Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/d2tOJL0M30Lkjh8ON8cR6A1q41w.roa
File:                     d2tOJL0M30Lkjh8ON8cR6A1q41w.roa (raw, json)
Hash identifier:          kXnq9aKx4Vlz6fn98qx63eF8GLBYfSsLaoU0Kf+v8dQ=
Subject key identifier:   77:6B:4E:24:BD:0C:DF:42:E4:8E:1F:0E:37:C7:11:E8:0D:6A:E3:5C
Certificate issuer:       /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial:       0185720C46FDDC4A9DE0C5247967F3FB3EC8
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/d2tOJL0M30Lkjh8ON8cR6A1q41w.roa
Signing time:             Mon 02 Jan 2023 10:34:45 +0000
ROA not before:           Mon 02 Jan 2023 10:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25178
IP address blocks:        185.85.184.0/22 maxlen: 24
                          2a05:b100::/29 maxlen: 48

Validation:               Failed, certificate revoked on Wed 25 Oct 2023 13:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:46:fd:dc:4a:9d:e0:c5:24:79:67:f3:fb:3e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
        Validity
            Not Before: Jan  2 10:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=776b4e24bd0cdf42e48e1f0e37c711e80d6ae35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:74:89:ea:d7:10:4e:5b:92:25:b6:f3:1b:
                    5c:43:bb:31:14:ea:31:4b:3a:66:a8:0e:6a:27:fa:
                    b9:df:0f:6b:64:6e:9a:68:fa:2d:48:30:34:21:e3:
                    ff:93:f9:e5:e0:a5:3e:45:53:72:dd:23:df:56:d0:
                    e1:79:b7:a1:ad:28:d6:73:cf:3b:8b:63:7f:81:49:
                    38:23:73:3c:ae:71:c0:bf:1b:02:dd:a3:e8:d4:9d:
                    d9:90:34:62:c1:d7:08:94:68:27:46:43:ec:51:16:
                    49:f4:fd:3f:1a:df:31:b4:b7:16:b5:4e:8b:c0:b7:
                    46:07:34:bf:d7:39:d9:be:d3:8b:b9:92:83:df:b2:
                    6d:58:aa:2e:ff:7b:bc:9d:27:33:c0:0a:a7:da:6f:
                    d6:85:82:c2:50:fd:73:fd:17:55:e9:d3:50:6e:60:
                    42:7f:67:91:dd:77:2b:0a:f0:af:d0:f3:e0:3b:7a:
                    92:35:1c:6e:31:99:7b:1f:62:a6:8a:a6:44:61:cc:
                    9b:8e:04:8b:75:02:ab:7e:78:db:63:4c:57:d8:5c:
                    bb:a3:d1:a8:bb:1e:24:37:89:fa:1d:0e:10:a2:d1:
                    99:3b:b2:a4:3a:fc:c5:36:98:19:75:f7:74:48:4e:
                    50:7b:07:1a:60:3c:b4:5f:27:62:28:e4:3a:30:78:
                    67:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:4E:24:BD:0C:DF:42:E4:8E:1F:0E:37:C7:11:E8:0D:6A:E3:5C
            X509v3 Authority Key Identifier:
                keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/d2tOJL0M30Lkjh8ON8cR6A1q41w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.184.0/22
                IPv6:
                  2a05:b100::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:de:0a:42:3b:9f:54:d7:26:62:de:8d:d9:f9:1f:e5:68:d4:
         ca:be:83:d0:d9:43:a9:d0:57:b7:73:fe:09:9e:52:a5:91:a2:
         79:a7:01:8d:03:83:76:62:cf:38:ed:df:45:06:40:ea:4f:bc:
         1e:e5:a7:4b:4d:9f:c3:5f:51:46:24:d5:1e:20:4b:50:94:41:
         56:4b:c1:ae:12:d1:3a:da:de:e3:47:ea:87:87:ee:ed:a3:42:
         0f:85:2b:93:e7:10:b8:3b:7a:64:aa:96:50:67:fc:ed:fa:81:
         92:27:15:64:01:12:f4:e4:20:43:6b:7f:db:29:20:ba:e6:32:
         da:1f:b9:44:6e:b0:6b:d0:45:db:e1:d8:ec:3b:67:12:65:2d:
         36:e0:6c:9a:b0:da:67:dc:5e:58:d5:6a:7f:55:63:d3:5f:0b:
         af:d9:78:b9:df:93:4b:8a:42:8a:c6:1e:7c:e7:0b:dd:7a:e7:
         3c:fb:96:a0:76:93:87:fb:54:8a:51:5d:9d:2d:3d:6a:34:43:
         11:52:2f:6c:c7:55:d7:77:c6:87:66:35:39:cd:50:d4:39:94:
         18:2f:57:55:d2:bc:f1:7b:22:11:9f:14:4e:51:3d:ea:26:7e:
         f2:89:6f:d1:87:74:f9:2b:cd:aa:a2:6a:91:71:90:9d:d7:f9:
         fa:cf:78:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyDEb93Eqd4MUkeWfz+z7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZmVlMTc2ZjUxY2U4ZmQ4MTQyNGZmNzNhNTQxNzM0MTI3
OWMwZjEwHhcNMjMwMTAyMTAzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzZiNGUyNGJkMGNkZjQyZTQ4ZTFmMGUzN2M3MTFlODBkNmFlMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1t0ierXEE5bkiW28xtcQ7sxFOox
SzpmqA5qJ/q53w9rZG6aaPotSDA0IeP/k/nl4KU+RVNy3SPfVtDhebehrSjWc887
i2N/gUk4I3M8rnHAvxsC3aPo1J3ZkDRiwdcIlGgnRkPsURZJ9P0/Gt8xtLcWtU6L
wLdGBzS/1znZvtOLuZKD37JtWKou/3u8nSczwAqn2m/WhYLCUP1z/RdV6dNQbmBC
f2eR3XcrCvCv0PPgO3qSNRxuMZl7H2KmiqZEYcybjgSLdQKrfnjbY0xX2Fy7o9Go
ux4kN4n6HQ4QotGZO7KkOvzFNpgZdfd0SE5QewcaYDy0XydiKOQ6MHhnwwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHdrTiS9DN9C5I4fDjfHEegNauNcMB8GA1UdIwQY
MBaAFHD+4Xb1HOj9gUJP9zpUFzQSecDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1A3aGR2VWM2UDJCUWtfM09sUVhOQko1d1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYt
NzUyZTliOGIwNzU2LzEvZDJ0T0pMME0zMExramg4T044Y1I2QTFxNDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYtNzUyZTliOGIwNzU2
LzEvY1A3aGR2VWM2UDJCUWtfM09sUVhOQko1d1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVW4MA0E
AgACMAcDBQMqBbEAMA0GCSqGSIb3DQEBCwUAA4IBAQB53gpCO59U1yZi3o3Z+R/l
aNTKvoPQ2UOp0Fe3c/4JnlKlkaJ5pwGNA4N2Ys847d9FBkDqT7we5adLTZ/DX1FG
JNUeIEtQlEFWS8GuEtE62t7jR+qHh+7to0IPhSuT5xC4O3pkqpZQZ/zt+oGSJxVk
ARL05CBDa3/bKSC65jLaH7lEbrBr0EXb4djsO2cSZS024GyasNpn3F5Y1Wp/VWPT
Xwuv2Xi535NLikKKxh585wvdeuc8+5agdpOH+1SKUV2dLT1qNEMRUi9sx1XXd8aH
ZjU5zVDUOZQYL1dV0rzxeyIRnxROUT3qJn7yiW/Rh3T5K82qomqRcZCd1/n6z3i0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org