Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa
File:                     eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa (raw, json)
Hash identifier:          pTr5J+kMgdwaBK5RhC67fgapNrdztjBjeQqeCB22XmE=
Subject key identifier:   78:C2:EB:A3:66:15:06:F2:B4:77:1A:C5:91:37:E8:27:B3:BC:30:50
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       01857295C8E2E5FEB50C559C77CAB4B2BAFD
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa
Signing time:             Mon 02 Jan 2023 13:04:56 +0000
ROA not before:           Mon 02 Jan 2023 13:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52468
IP address blocks:        81.199.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:c8:e2:e5:fe:b5:0c:55:9c:77:ca:b4:b2:ba:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jan  2 13:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78c2eba3661506f2b4771ac59137e827b3bc3050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:79:4e:e5:96:96:fa:8a:4a:07:df:c1:bd:
                    a6:c4:a1:29:e0:71:79:91:e8:9b:b2:76:c2:29:e9:
                    71:de:a0:a7:ab:9a:3c:df:09:1c:f7:f5:0d:42:35:
                    c6:0f:20:60:1d:3e:93:4c:dd:21:ef:f3:43:85:c0:
                    ec:e6:07:22:b3:1b:d2:e0:04:6e:93:9d:7f:2e:43:
                    d6:c9:47:78:ab:2e:26:15:ec:49:34:d5:41:7a:b8:
                    f6:35:f0:f9:c7:07:50:0c:b1:3b:8f:aa:ea:76:64:
                    bf:88:64:90:27:f8:cf:c9:1b:be:46:33:a1:71:d8:
                    d4:9e:7a:c7:9e:b6:0f:0f:b1:35:c4:ae:6e:b9:93:
                    71:b7:09:fe:f5:8e:99:bb:45:48:0e:fa:c0:3a:24:
                    6b:d3:51:a5:32:7d:90:4b:69:d2:14:6b:16:36:76:
                    14:88:19:c2:15:09:f8:74:7d:d0:20:25:3a:17:68:
                    20:bf:97:33:e5:32:ca:0f:b7:9e:5b:67:1d:64:ad:
                    8b:2a:1c:a4:8c:e4:4c:07:f4:a7:c7:e4:1b:0b:63:
                    b4:5e:6e:95:fe:7b:68:ea:89:ad:40:02:5d:5e:3f:
                    d2:45:77:c1:22:fe:ed:c1:1a:55:21:52:ad:0d:c8:
                    fa:75:ee:bb:ff:3c:26:ad:f9:31:32:a4:56:fa:c3:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:EB:A3:66:15:06:F2:B4:77:1A:C5:91:37:E8:27:B3:BC:30:50
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/eMLro2YVBvK0dxrFkTfoJ7O8MFA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7e:c6:db:7d:e3:54:03:c3:ea:67:1f:b3:00:3f:8b:30:59:
         76:58:8c:69:a4:79:a1:b7:0a:5e:36:6d:ca:ed:15:31:65:da:
         87:dc:b2:c2:a5:5e:8c:89:f1:9b:3a:17:b5:5a:26:eb:a4:55:
         88:4c:ce:20:8a:88:6e:c3:76:1f:91:38:d3:00:54:31:bf:fb:
         14:24:4e:bf:6a:60:4f:8b:cc:2c:3c:68:0c:89:cd:34:b8:93:
         78:0b:c0:fe:da:3a:99:80:ce:ef:7c:60:4c:0c:e0:ab:bc:62:
         75:6b:93:af:5e:92:df:38:b0:4b:28:4b:4f:a3:f5:1f:7b:a2:
         cc:4e:59:de:8e:5a:3b:ff:b9:08:c8:0c:6b:2e:9e:45:1b:56:
         f0:0e:14:c4:05:19:af:11:6e:eb:03:d5:89:fb:34:c4:60:fe:
         9f:7f:6e:8f:bf:b7:15:99:9b:32:93:d0:0d:5e:36:ad:1c:6d:
         ad:85:ec:b8:9d:53:54:1c:55:73:fb:d5:56:e4:57:d5:9a:e2:
         77:77:8c:15:a9:47:82:7a:a5:96:c7:f7:37:1a:3b:4d:08:a0:
         3d:f4:9d:65:ee:da:a9:19:c6:13:0d:13:bf:f0:b2:bd:e2:1b:
         68:75:de:c1:09:2d:d3:44:c0:7f:98:cd:a4:af:20:9e:35:8d:
         42:c2:42:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVylcji5f61DFWcd8q0srr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjMwMTAyMTMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMyZWJhMzY2MTUwNmYyYjQ3NzFhYzU5MTM3ZTgyN2IzYmMzMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcd5TuWWlvqKSgffwb2mxKEp4HF5
keibsnbCKelx3qCnq5o83wkc9/UNQjXGDyBgHT6TTN0h7/NDhcDs5gcisxvS4ARu
k51/LkPWyUd4qy4mFexJNNVBerj2NfD5xwdQDLE7j6rqdmS/iGSQJ/jPyRu+RjOh
cdjUnnrHnrYPD7E1xK5uuZNxtwn+9Y6Zu0VIDvrAOiRr01GlMn2QS2nSFGsWNnYU
iBnCFQn4dH3QICU6F2ggv5cz5TLKD7eeW2cdZK2LKhykjORMB/Snx+QbC2O0Xm6V
/nto6omtQAJdXj/SRXfBIv7twRpVIVKtDcj6de67/zwmrfkxMqRW+sPobwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjC66NmFQbytHcaxZE36CezvDBQMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvZU1Mcm8yWVZCdkswZHhyRmtUZm9KN084TUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcdzMA0G
CSqGSIb3DQEBCwUAA4IBAQCofsbbfeNUA8PqZx+zAD+LMFl2WIxppHmhtwpeNm3K
7RUxZdqH3LLCpV6MifGbOhe1WibrpFWITM4giohuw3YfkTjTAFQxv/sUJE6/amBP
i8wsPGgMic00uJN4C8D+2jqZgM7vfGBMDOCrvGJ1a5OvXpLfOLBLKEtPo/Ufe6LM
Tlnejlo7/7kIyAxrLp5FG1bwDhTEBRmvEW7rA9WJ+zTEYP6ff26Pv7cVmZsyk9AN
XjatHG2they4nVNUHFVz+9VW5FfVmuJ3d4wVqUeCeqWWx/c3GjtNCKA99J1l7tqp
GcYTDRO/8LK94htodd7BCS3TRMB/mM2kryCeNY1CwkI0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org