Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/B0Dal52SHMIIRzfj-Webwr96J7o.roa
File:                     B0Dal52SHMIIRzfj-Webwr96J7o.roa (raw, json)
Hash identifier:          DdMVC0ZYHQk0/jdwB4zjJQ2WTIOSz5tfRWOMv+uR76w=
Subject key identifier:   07:40:DA:97:9D:92:1C:C2:08:47:37:E3:F9:67:9B:C2:BF:7A:27:BA
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       0187552F967A0605E3993A5AD8636CAC8128
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/B0Dal52SHMIIRzfj-Webwr96J7o.roa
Signing time:             Thu 06 Apr 2023 06:09:54 +0000
ROA not before:           Thu 06 Apr 2023 06:09:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400377
IP address blocks:        185.96.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:55:2f:96:7a:06:05:e3:99:3a:5a:d8:63:6c:ac:81:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Apr  6 06:09:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0740da979d921cc2084737e3f9679bc2bf7a27ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:bb:43:9b:01:03:50:ee:2c:ed:47:39:f6:
                    cc:3f:b8:8f:80:b3:b2:96:03:4c:7e:8a:0f:0c:16:
                    c8:09:be:5f:76:53:d5:f7:53:c6:8f:fd:de:cd:1f:
                    cf:44:c6:14:03:ed:b5:f9:1e:dd:49:1d:17:cf:e3:
                    e2:70:ba:6b:b9:2d:f4:3a:8c:6c:bc:2b:74:d4:ee:
                    1d:85:2e:31:fc:ae:a6:e0:6c:81:c9:21:21:67:f7:
                    d3:51:28:9d:3d:94:25:fc:27:b9:f6:68:fc:2a:cb:
                    dc:4f:51:24:f9:50:bb:39:20:84:62:6a:24:5c:19:
                    4f:8a:dd:81:e1:41:fe:af:00:60:98:58:6f:28:f9:
                    bb:de:6d:c8:51:b4:5e:c4:27:65:33:6f:0e:75:fd:
                    ae:81:e3:31:f2:8b:d2:60:b5:60:dc:d0:47:5c:ba:
                    09:28:6b:9e:f2:62:4e:f4:42:99:d5:c1:b8:90:c4:
                    f1:b8:51:e1:06:d4:21:fd:25:f7:16:a9:e9:4a:ef:
                    68:1f:ac:05:45:3f:20:65:6a:fd:54:6d:75:4c:44:
                    26:23:9d:6f:49:a6:87:94:42:bc:1f:49:b8:bb:6b:
                    18:63:a2:5b:ab:1f:aa:b5:e1:b2:d0:08:17:d6:5f:
                    be:26:0c:38:bc:fd:c6:6b:16:43:85:d7:c9:f7:df:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:DA:97:9D:92:1C:C2:08:47:37:E3:F9:67:9B:C2:BF:7A:27:BA
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/B0Dal52SHMIIRzfj-Webwr96J7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.96.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:51:19:30:a5:ef:21:f7:33:9c:d1:a5:39:96:fe:9a:92:
         4f:50:6b:b6:69:59:ce:4c:77:81:b0:07:09:bd:d4:59:75:f9:
         45:ec:26:ea:d7:13:d0:29:4a:6f:7f:52:0c:2b:86:75:f0:f1:
         af:e3:ca:b0:28:7c:83:6c:3b:54:31:c4:e7:c9:20:b1:c2:8a:
         1a:d4:2d:6d:77:8a:44:57:2a:92:ef:23:99:00:e7:46:b1:ae:
         ff:1d:c5:1e:e2:3f:1d:bf:0f:89:04:c4:9f:3a:0d:13:f3:72:
         16:e7:7e:a7:72:fc:33:54:f4:86:92:a3:c4:03:6b:61:a0:1f:
         dc:59:6f:8b:64:a4:b8:12:fd:68:a6:9f:f6:59:69:3c:a2:83:
         87:13:fe:f7:fb:95:16:f6:82:33:58:6e:41:4c:a5:14:0c:69:
         b9:9a:43:e7:24:df:d4:83:eb:4e:70:7e:b5:34:81:bc:80:6f:
         17:26:6c:5c:5b:1a:2d:b7:48:10:45:56:43:68:4f:96:53:c1:
         98:c4:74:8a:d0:d9:c0:33:28:a5:b6:93:7b:81:4b:42:e2:a0:
         84:b5:d5:e8:96:8d:db:c9:17:ae:e3:4b:72:ad:3f:bd:f1:2e:
         e2:12:4d:f8:c2:e2:a0:62:a3:dc:05:c8:bc:19:57:8e:9d:17:
         2a:dd:fd:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdVL5Z6BgXjmTpa2GNsrIEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjMwNDA2MDYwOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQwZGE5NzlkOTIxY2MyMDg0NzM3ZTNmOTY3OWJjMmJmN2EyN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1m7Q5sBA1DuLO1HOfbMP7iPgLOy
lgNMfooPDBbICb5fdlPV91PGj/3ezR/PRMYUA+21+R7dSR0Xz+PicLpruS30Ooxs
vCt01O4dhS4x/K6m4GyBySEhZ/fTUSidPZQl/Ce59mj8KsvcT1Ek+VC7OSCEYmok
XBlPit2B4UH+rwBgmFhvKPm73m3IUbRexCdlM28Odf2ugeMx8ovSYLVg3NBHXLoJ
KGue8mJO9EKZ1cG4kMTxuFHhBtQh/SX3FqnpSu9oH6wFRT8gZWr9VG11TEQmI51v
SaaHlEK8H0m4u2sYY6Jbqx+qteGy0AgX1l++Jgw4vP3GaxZDhdfJ99+gTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdA2pedkhzCCEc34/lnm8K/eie6MB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvQjBEYWw1MlNITUlJUnpmai1XZWJ3cjk2SjdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWBTMA0G
CSqGSIb3DQEBCwUAA4IBAQA34FEZMKXvIfcznNGlOZb+mpJPUGu2aVnOTHeBsAcJ
vdRZdflF7Cbq1xPQKUpvf1IMK4Z18PGv48qwKHyDbDtUMcTnySCxwooa1C1td4pE
VyqS7yOZAOdGsa7/HcUe4j8dvw+JBMSfOg0T83IW536ncvwzVPSGkqPEA2thoB/c
WW+LZKS4Ev1opp/2WWk8ooOHE/73+5UW9oIzWG5BTKUUDGm5mkPnJN/Ug+tOcH61
NIG8gG8XJmxcWxott0gQRVZDaE+WU8GYxHSK0NnAMyiltpN7gUtC4qCEtdXolo3b
yReu40tyrT+98S7iEk34wuKgYqPcBci8GVeOnRcq3f1T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org