Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa
File:                     Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa (raw, json)
Hash identifier:          zi1cdOUBCCB6bzsUr66sJJ5+9X5q/o59SA7fJ8Uf6eg=
Subject key identifier:   65:DD:44:56:F5:6E:34:2D:A5:5C:DA:01:C5:06:02:0D:79:54:3D:67
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       0188E4C63E26BF15A7D85059D1ABA3FD0272
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa
Signing time:             Thu 22 Jun 2023 20:22:57 +0000
ROA not before:           Thu 22 Jun 2023 20:22:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16625
IP address blocks:        92.123.240.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e4:c6:3e:26:bf:15:a7:d8:50:59:d1:ab:a3:fd:02:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jun 22 20:22:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65dd4456f56e342da55cda01c506020d79543d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:e7:29:4b:ce:30:9a:33:34:ae:20:cf:5f:
                    47:4a:d9:29:c9:5f:f0:b7:5c:91:e7:0c:7b:26:f4:
                    66:62:cf:24:0d:77:64:4a:37:93:62:56:c2:cd:14:
                    c9:95:89:2b:4e:e2:5d:05:d8:9e:49:69:b9:3b:91:
                    1f:7b:8d:55:4d:a0:9f:4e:52:4e:d3:82:b5:f9:4a:
                    5d:6c:3f:f3:23:92:ba:d6:36:22:69:e6:0a:44:f6:
                    6e:0c:7f:58:ab:68:32:2c:f0:87:26:f1:47:55:b6:
                    81:e5:3e:8d:a2:04:5b:c4:42:cc:87:42:e6:a9:9f:
                    74:2a:e8:c6:40:62:c3:a7:14:6c:92:4f:82:72:e0:
                    6b:b3:50:0b:67:32:fd:7b:8f:87:1c:4a:14:c3:42:
                    d4:c1:27:72:5e:e5:78:6d:f4:47:bf:d9:54:e1:8f:
                    00:50:e4:a5:fb:61:72:96:08:a8:0d:aa:54:f2:8c:
                    e1:d5:2d:92:5f:8f:bc:d4:3e:bd:c0:04:58:7f:78:
                    45:c5:4b:41:68:4f:7a:25:34:01:b0:71:3b:4d:d7:
                    6b:68:04:d0:08:10:4c:e0:c3:01:42:cb:6a:a2:1a:
                    c4:f7:5e:6c:71:d3:d5:05:00:7b:da:2e:c7:f3:d8:
                    cc:09:15:ad:b8:cf:d5:66:c0:1a:c3:99:f8:c7:d1:
                    f9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:44:56:F5:6E:34:2D:A5:5C:DA:01:C5:06:02:0D:79:54:3D:67
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Zd1EVvVuNC2lXNoBxQYCDXlUPWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.123.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:87:b5:be:10:cd:24:2f:95:d2:dd:05:6b:9a:92:e0:2b:b7:
         88:9f:2d:29:cb:e4:63:f1:a7:25:fd:f4:a0:7f:cd:c4:e9:c8:
         a9:df:71:56:38:fc:dd:0a:8b:0c:2c:5f:d0:13:fb:1b:e2:f0:
         5b:b9:c2:49:e1:3e:2e:75:ce:be:8a:cc:4b:89:e7:9e:b3:b8:
         b5:a4:d1:8d:d1:8e:60:a3:b1:d2:93:e1:09:fc:3b:56:3c:68:
         a5:9d:77:cc:ae:61:b1:b5:f9:cf:0d:94:f6:a2:b2:1b:60:95:
         de:58:10:90:aa:99:62:c7:96:b2:6f:e9:05:0e:40:29:39:e4:
         95:9d:ee:4f:45:ef:29:a6:31:3b:f3:b3:2e:c1:dd:e8:6b:98:
         8e:4d:64:73:71:c7:4a:7f:bc:49:2c:a3:cd:df:c0:ba:62:f8:
         8d:7e:c7:fd:93:16:0d:bc:9b:34:da:5b:40:e8:e5:04:6f:81:
         d4:a6:c5:a1:81:ce:da:39:09:09:40:df:06:f5:fc:20:84:2a:
         b6:da:f1:02:99:82:48:33:64:e9:02:b1:b8:45:1c:bf:fb:cb:
         52:6b:a9:91:e8:ed:df:21:d0:75:4a:a6:3a:91:43:9d:21:a3:
         21:87:9b:a1:35:5a:09:64:78:07:b0:05:1d:88:e3:52:0e:3a:
         a9:c8:62:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjkxj4mvxWn2FBZ0auj/QJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjMwNjIyMjAyMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWRkNDQ1NmY1NmUzNDJkYTU1Y2RhMDFjNTA2MDIwZDc5NTQzZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTrnKUvOMJozNK4gz19HStkpyV/w
t1yR5wx7JvRmYs8kDXdkSjeTYlbCzRTJlYkrTuJdBdieSWm5O5Efe41VTaCfTlJO
04K1+UpdbD/zI5K61jYiaeYKRPZuDH9Yq2gyLPCHJvFHVbaB5T6NogRbxELMh0Lm
qZ90KujGQGLDpxRskk+CcuBrs1ALZzL9e4+HHEoUw0LUwSdyXuV4bfRHv9lU4Y8A
UOSl+2FylgioDapU8ozh1S2SX4+81D69wARYf3hFxUtBaE96JTQBsHE7TddraATQ
CBBM4MMBQstqohrE915scdPVBQB72i7H89jMCRWtuM/VZsAaw5n4x9H5LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGXdRFb1bjQtpVzaAcUGAg15VD1nMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvWmQxRVZ2VnVOQzJsWE5vQnhRWUNEWGxVUFdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHvwMA0G
CSqGSIb3DQEBCwUAA4IBAQBzh7W+EM0kL5XS3QVrmpLgK7eIny0py+Rj8acl/fSg
f83E6cip33FWOPzdCosMLF/QE/sb4vBbucJJ4T4udc6+isxLieees7i1pNGN0Y5g
o7HSk+EJ/DtWPGilnXfMrmGxtfnPDZT2orIbYJXeWBCQqplix5ayb+kFDkApOeSV
ne5PRe8ppjE787Muwd3oa5iOTWRzccdKf7xJLKPN38C6YviNfsf9kxYNvJs02ltA
6OUEb4HUpsWhgc7aOQkJQN8G9fwghCq22vECmYJIM2TpArG4RRy/+8tSa6mR6O3f
IdB1SqY6kUOdIaMhh5uhNVoJZHgHsAUdiONSDjqpyGIq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:32 2024 by rpki-client on console-fra.rpki-client.org