Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ZHdaKQXNb6DvnecEQjaDUAk7Yr8.roa
File:                     ZHdaKQXNb6DvnecEQjaDUAk7Yr8.roa (raw, json)
Hash identifier:          UdJCQ1hzMYErwu78+E5/BDBx7MbYowanGANk/K7K+wA=
Subject key identifier:   64:77:5A:29:05:CD:6F:A0:EF:9D:E7:04:42:36:83:50:09:3B:62:BF
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       0185718C36524F76B098E03ACC2B9088A948
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ZHdaKQXNb6DvnecEQjaDUAk7Yr8.roa
Signing time:             Mon 02 Jan 2023 08:14:52 +0000
ROA not before:           Mon 02 Jan 2023 08:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201461
IP address blocks:        93.191.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:8c:36:52:4f:76:b0:98:e0:3a:cc:2b:90:88:a9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: Jan  2 08:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64775a2905cd6fa0ef9de70442368350093b62bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:4a:d2:03:aa:16:7d:ae:6a:63:ba:3c:ad:
                    42:89:b7:a1:aa:01:b3:13:40:7c:f8:d8:45:da:53:
                    54:39:7b:b6:a4:2c:07:f2:ec:81:26:be:66:01:49:
                    c5:4f:59:b6:14:7a:b3:f4:15:2b:aa:02:b2:e5:fd:
                    1f:52:59:cc:e6:95:77:12:c0:ac:27:a9:f3:7a:c7:
                    22:95:c7:96:2e:15:99:a2:5d:ad:12:2d:ec:90:78:
                    e4:27:af:85:f5:12:dd:6f:a8:58:f8:d6:da:ca:c8:
                    4a:ac:65:b0:87:b0:5e:66:0f:5c:04:ac:06:88:84:
                    5c:c9:27:84:2a:78:82:11:b9:05:eb:be:43:79:91:
                    0a:79:16:a8:32:62:c3:3b:ca:a9:32:c4:f3:91:23:
                    3a:d2:3e:f6:31:31:b8:bf:0f:f2:73:6d:28:cf:a5:
                    f5:51:c9:56:b0:67:a4:81:6a:62:ed:0e:bd:6a:99:
                    5c:10:93:38:e5:b6:00:ca:41:bc:b3:ab:a9:17:42:
                    84:14:43:51:5e:b2:e6:48:18:e0:a2:68:a3:da:b1:
                    13:94:f7:2b:ed:3d:8e:3e:ec:01:d2:35:0e:95:4a:
                    9f:34:ff:43:ca:10:4c:fd:21:83:40:fd:32:77:24:
                    52:31:e9:c9:be:72:cc:a7:49:2b:43:ba:53:83:fa:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:77:5A:29:05:CD:6F:A0:EF:9D:E7:04:42:36:83:50:09:3B:62:BF
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ZHdaKQXNb6DvnecEQjaDUAk7Yr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:dd:83:3d:6a:88:d3:e8:47:dc:ce:f4:2e:2c:43:05:23:ac:
         77:82:eb:56:89:65:36:23:cc:59:89:98:bc:35:a8:a1:b8:bb:
         9f:e8:d1:47:d9:47:63:10:d3:af:24:7c:9e:66:f2:f1:be:aa:
         58:bd:25:c9:48:01:df:60:36:5c:fc:8e:88:80:bb:4c:41:aa:
         b1:ce:77:56:d8:16:8b:6e:d0:38:71:a1:c9:db:28:88:d8:c6:
         23:c7:23:01:f6:dd:18:b6:93:de:8f:3c:28:67:70:66:e0:74:
         0d:f7:e8:55:6f:91:5b:1f:28:34:f0:8d:a1:2c:97:11:9a:3f:
         81:9d:e5:0d:38:a7:9d:aa:eb:9a:57:e3:d9:ab:1e:41:dd:9e:
         bd:8d:c9:8d:16:1b:9f:24:39:41:65:74:1d:36:13:48:25:e3:
         5e:96:b3:3c:9b:93:33:ba:15:8f:5b:9e:65:88:ad:a3:ac:82:
         4a:dd:31:ed:2f:9d:18:32:6d:25:be:dd:5d:e6:cc:7d:27:23:
         cd:f0:dd:87:d3:d6:95:61:f7:19:34:c1:bc:6c:f9:cb:94:65:
         ef:85:b4:4c:aa:4b:75:4f:15:8c:84:45:48:3f:71:8b:8c:89:
         e0:78:b8:f2:81:9f:71:6f:7e:38:4d:3b:4b:1c:af:d0:db:f7:
         aa:c6:e1:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxjDZST3awmOA6zCuQiKlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjMwMTAyMDgxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDc3NWEyOTA1Y2Q2ZmEwZWY5ZGU3MDQ0MjM2ODM1MDA5M2I2MmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e5K0gOqFn2uamO6PK1CibehqgGz
E0B8+NhF2lNUOXu2pCwH8uyBJr5mAUnFT1m2FHqz9BUrqgKy5f0fUlnM5pV3EsCs
J6nzescilceWLhWZol2tEi3skHjkJ6+F9RLdb6hY+NbayshKrGWwh7BeZg9cBKwG
iIRcySeEKniCEbkF675DeZEKeRaoMmLDO8qpMsTzkSM60j72MTG4vw/yc20oz6X1
UclWsGekgWpi7Q69aplcEJM45bYAykG8s6upF0KEFENRXrLmSBjgomij2rETlPcr
7T2OPuwB0jUOlUqfNP9DyhBM/SGDQP0ydyRSMenJvnLMp0krQ7pTg/rZPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGR3WikFzW+g753nBEI2g1AJO2K/MB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEvWkhkYUtRWE5iNkR2bmVjRVFqYURVQWs3WXI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb/GMA0G
CSqGSIb3DQEBCwUAA4IBAQAU3YM9aojT6EfczvQuLEMFI6x3gutWiWU2I8xZiZi8
NaihuLuf6NFH2UdjENOvJHyeZvLxvqpYvSXJSAHfYDZc/I6IgLtMQaqxzndW2BaL
btA4caHJ2yiI2MYjxyMB9t0YtpPejzwoZ3Bm4HQN9+hVb5FbHyg08I2hLJcRmj+B
neUNOKedquuaV+PZqx5B3Z69jcmNFhufJDlBZXQdNhNIJeNelrM8m5MzuhWPW55l
iK2jrIJK3THtL50YMm0lvt1d5sx9JyPN8N2H09aVYfcZNMG8bPnLlGXvhbRMqkt1
TxWMhEVIP3GLjIngeLjygZ9xb344TTtLHK/Q2/eqxuGA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:03 2024 by rpki-client on console-ams.rpki-client.org