Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/jaymc5PKfvGhjmjswyB0ZUUl9gQ.roa
File:                     jaymc5PKfvGhjmjswyB0ZUUl9gQ.roa (raw, json)
Hash identifier:          n7DK1GfwctCUFZqdDq+DJ1H/FzyMgbc6KihONM6TYCQ=
Subject key identifier:   8D:AC:A6:73:93:CA:7E:F1:A1:8E:68:EC:C3:20:74:65:45:25:F6:04
Certificate issuer:       /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial:       018A84616618051BCF7BF147A55D6BA251E1
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/jaymc5PKfvGhjmjswyB0ZUUl9gQ.roa
Signing time:             Mon 11 Sep 2023 13:14:50 +0000
ROA not before:           Mon 11 Sep 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8426
IP address blocks:        178.248.184.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:61:66:18:05:1b:cf:7b:f1:47:a5:5d:6b:a2:51:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
        Validity
            Not Before: Sep 11 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8daca67393ca7ef1a18e68ecc32074654525f604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1e:b9:5e:81:c7:4d:6b:f5:ff:67:f6:47:fb:
                    15:c7:c9:28:b6:85:ad:b1:c4:14:7f:e7:b8:10:89:
                    99:af:a8:61:31:27:ba:49:dd:17:e3:5c:b7:e8:2b:
                    0f:16:6d:12:57:f6:37:43:4a:91:eb:0b:43:fe:e2:
                    6a:6f:ac:89:5b:20:1a:91:ed:66:48:09:e2:90:43:
                    da:e4:26:03:c2:3b:29:b3:1f:17:f7:23:b7:3c:ec:
                    9b:8d:ad:d8:8e:19:d4:b6:23:a3:d9:83:97:61:66:
                    61:d1:0e:db:69:32:45:63:b5:ca:26:1d:da:24:26:
                    b2:d6:cd:74:ff:9d:a8:9d:45:42:50:8b:ef:d5:b4:
                    68:e6:71:4e:5b:58:69:fd:c0:d8:89:be:39:ae:28:
                    97:f2:94:11:c0:84:fa:a7:ef:58:25:5c:a4:71:0b:
                    e4:4f:5b:e2:b4:e6:08:7c:b8:a0:62:df:06:78:1f:
                    f4:1f:1c:62:d9:1e:e0:44:3c:a8:0e:e9:2d:9b:60:
                    c3:f8:61:4d:67:bd:ab:ca:fb:de:b7:31:d9:2e:c6:
                    81:a0:a9:ad:41:fd:08:f3:d8:a2:1e:07:30:f6:ac:
                    2e:d9:f4:3c:53:37:c6:fb:13:69:e4:cc:a0:d0:f0:
                    5a:b5:fd:8d:a5:a9:ea:3b:9d:9c:77:24:72:8d:e6:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AC:A6:73:93:CA:7E:F1:A1:8E:68:EC:C3:20:74:65:45:25:F6:04
            X509v3 Authority Key Identifier:
                keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/jaymc5PKfvGhjmjswyB0ZUUl9gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.248.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:a8:75:95:d3:e1:f6:c2:a8:dd:b5:c4:0d:f4:73:58:c9:c3:
         c3:19:7b:5c:50:15:75:91:3b:14:45:be:09:47:91:55:f4:e7:
         eb:1e:6b:b7:64:69:ae:6c:b5:f7:28:ed:80:12:0d:94:52:9c:
         a6:9f:2a:42:94:0d:ff:5b:36:c9:ec:ec:20:bc:67:4d:bc:fd:
         46:d9:64:f7:fb:e9:ff:26:5f:f9:60:7f:33:5f:96:6a:60:d1:
         5a:af:a2:ee:50:ee:74:68:f6:6a:73:83:ca:52:d4:29:c9:77:
         0f:e3:30:ea:ed:df:93:7f:17:3e:6d:c4:a5:3b:94:4c:bf:ee:
         ac:72:89:b3:5f:85:79:df:b6:49:28:b1:83:a8:94:51:33:96:
         18:54:2f:68:b8:c9:25:30:d4:1b:bd:19:97:93:05:d5:7a:fc:
         46:2d:a3:09:14:c0:85:b5:23:d0:0a:ad:b3:8e:f6:55:61:84:
         f3:40:3d:bd:93:57:13:29:3e:8d:0c:f3:77:4a:79:d9:c3:81:
         7e:ad:79:17:e8:df:4b:99:4e:ee:51:89:16:44:0e:f4:96:0b:
         1b:91:c0:46:8b:bf:62:4e:d1:d2:53:c6:33:27:8a:a2:8d:18:
         eb:69:92:67:d6:70:88:7e:6b:bb:26:17:67:cb:c2:a5:34:fc:
         d4:7c:2d:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqEYWYYBRvPe/FHpV1rolHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjMwOTExMTMxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGFjYTY3MzkzY2E3ZWYxYTE4ZTY4ZWNjMzIwNzQ2NTQ1MjVmNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh65XoHHTWv1/2f2R/sVx8kotoWt
scQUf+e4EImZr6hhMSe6Sd0X41y36CsPFm0SV/Y3Q0qR6wtD/uJqb6yJWyAake1m
SAnikEPa5CYDwjspsx8X9yO3POybja3YjhnUtiOj2YOXYWZh0Q7baTJFY7XKJh3a
JCay1s10/52onUVCUIvv1bRo5nFOW1hp/cDYib45riiX8pQRwIT6p+9YJVykcQvk
T1vitOYIfLigYt8GeB/0Hxxi2R7gRDyoDuktm2DD+GFNZ72ryvvetzHZLsaBoKmt
Qf0I89iiHgcw9qwu2fQ8UzfG+xNp5Myg0PBatf2NpanqO52cdyRyjeZWawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2spnOTyn7xoY5o7MMgdGVFJfYEMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvamF5bWM1UEtmdkdoam1qc3d5QjBaVVVsOWdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvi4MA0G
CSqGSIb3DQEBCwUAA4IBAQBSqHWV0+H2wqjdtcQN9HNYycPDGXtcUBV1kTsURb4J
R5FV9OfrHmu3ZGmubLX3KO2AEg2UUpymnypClA3/WzbJ7OwgvGdNvP1G2WT3++n/
Jl/5YH8zX5ZqYNFar6LuUO50aPZqc4PKUtQpyXcP4zDq7d+Tfxc+bcSlO5RMv+6s
comzX4V537ZJKLGDqJRRM5YYVC9ouMklMNQbvRmXkwXVevxGLaMJFMCFtSPQCq2z
jvZVYYTzQD29k1cTKT6NDPN3SnnZw4F+rXkX6N9LmU7uUYkWRA70lgsbkcBGi79i
TtHSU8YzJ4qijRjraZJn1nCIfmu7Jhdny8KlNPzUfC31
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:05 2024 by rpki-client on console-ams.rpki-client.org