Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/0Vs35YUrWXB37tSccJM5fB07Bvw.roa
File:                     0Vs35YUrWXB37tSccJM5fB07Bvw.roa (raw, json)
Hash identifier:          hm7aBOtxCHRcfGE/bosC43uBL9kzg6ec9reApxwHpPw=
Subject key identifier:   D1:5B:37:E5:85:2B:59:70:77:EE:D4:9C:70:93:39:7C:1D:3B:06:FC
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0186C2A7F822B2AA3F6B2DDE8E2FE4E00F38
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/0Vs35YUrWXB37tSccJM5fB07Bvw.roa
Signing time:             Wed 08 Mar 2023 19:17:13 +0000
ROA not before:           Wed 08 Mar 2023 19:17:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7411
IP address blocks:        93.89.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Mar 2023 17:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c2:a7:f8:22:b2:aa:3f:6b:2d:de:8e:2f:e4:e0:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Mar  8 19:17:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d15b37e5852b597077eed49c7093397c1d3b06fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:b2:35:88:74:ba:66:c8:ca:b4:bf:6c:db:
                    19:7a:c5:6a:19:f5:ba:c8:6f:b2:71:9c:3a:7a:f4:
                    af:d2:07:81:96:98:0f:78:26:60:b9:33:ae:66:95:
                    31:5f:83:7a:8e:05:3b:44:2a:1c:96:84:1b:aa:91:
                    5e:a2:22:c7:bf:48:37:1d:83:73:76:c2:95:f5:b0:
                    c2:54:65:02:36:43:c4:ab:d7:25:bc:6c:ea:08:98:
                    b1:34:d7:69:30:f7:46:be:e2:a3:23:06:3e:a8:11:
                    7e:db:da:b5:90:9a:22:af:20:fe:22:36:33:b7:f2:
                    b6:af:6c:6f:dd:fe:bd:c5:52:4b:b3:52:6d:7f:db:
                    81:38:a7:58:a8:8a:dd:8d:a3:eb:55:65:7e:40:58:
                    ec:18:55:00:45:ea:a6:f9:f3:1d:b7:4f:e6:79:61:
                    3d:67:8d:04:d0:5a:25:ba:40:4d:7f:56:fb:89:08:
                    51:10:5e:37:a7:35:22:df:f8:06:d7:f9:67:b4:97:
                    a4:8e:8a:ea:31:87:37:f6:50:97:f0:21:e4:80:45:
                    9c:03:28:31:ae:4c:48:43:ba:4e:9f:63:77:6a:04:
                    51:2e:0b:e9:68:49:94:fc:cf:aa:6d:75:9f:fb:99:
                    d0:3c:ec:c9:68:8a:e3:f8:ea:bd:99:10:58:5c:c1:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:37:E5:85:2B:59:70:77:EE:D4:9C:70:93:39:7C:1D:3B:06:FC
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/0Vs35YUrWXB37tSccJM5fB07Bvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:58:43:fc:3b:c1:e1:4d:8d:0d:41:ce:80:07:cc:fa:09:
         db:9d:d4:91:e7:b1:fb:f0:fc:2f:dd:c7:e2:61:bc:3d:c9:4e:
         18:af:fa:ef:44:2f:80:06:e6:79:42:b9:2a:af:ad:a2:6b:bc:
         96:ac:9c:51:41:a6:f4:90:54:75:bf:86:97:c9:e5:4d:67:6b:
         09:0b:8a:50:48:fa:a4:bb:21:3b:0c:eb:b8:e1:a5:81:8a:80:
         57:62:24:f1:4d:99:4d:a8:39:14:44:bc:dd:98:18:49:d9:cc:
         28:95:c2:68:93:a6:a7:9b:b9:29:52:a9:a1:34:05:2c:b2:a0:
         7e:fc:ef:ef:bc:fd:75:ae:65:62:96:6d:4f:0a:12:bd:af:92:
         d6:cd:fa:5f:90:33:8f:2e:f0:71:f9:a1:c1:df:4b:81:8c:93:
         68:17:19:ff:5a:c4:1b:71:2a:62:a1:d9:e4:65:d3:db:30:2f:
         0f:5f:bd:4d:e7:65:33:2b:07:e3:39:f7:9c:5f:a1:b4:d0:58:
         96:97:b0:14:8f:b6:23:d8:ad:80:c9:85:af:a4:ca:d5:3c:98:
         6e:91:0a:34:6f:24:f3:9c:dc:f5:5c:13:eb:e2:87:7a:17:13:
         77:f6:88:96:de:4b:b4:75:24:41:33:ee:7f:36:14:c5:3d:32:
         9e:10:c1:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbCp/gisqo/ay3eji/k4A84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwMzA4MTkxNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTViMzdlNTg1MmI1OTcwNzdlZWQ0OWM3MDkzMzk3YzFkM2IwNmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRayNYh0umbIyrS/bNsZesVqGfW6
yG+ycZw6evSv0geBlpgPeCZguTOuZpUxX4N6jgU7RCocloQbqpFeoiLHv0g3HYNz
dsKV9bDCVGUCNkPEq9clvGzqCJixNNdpMPdGvuKjIwY+qBF+29q1kJoiryD+IjYz
t/K2r2xv3f69xVJLs1Jtf9uBOKdYqIrdjaPrVWV+QFjsGFUAReqm+fMdt0/meWE9
Z40E0FolukBNf1b7iQhREF43pzUi3/gG1/lntJekjorqMYc39lCX8CHkgEWcAygx
rkxIQ7pOn2N3agRRLgvpaEmU/M+qbXWf+5nQPOzJaIrj+Oq9mRBYXMHkpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFbN+WFK1lwd+7UnHCTOXwdOwb8MB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvMFZzMzVZVXJXWEIzN3RTY2NKTTVmQjA3QnZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVnUMA0G
CSqGSIb3DQEBCwUAA4IBAQBB8VhD/DvB4U2NDUHOgAfM+gnbndSR57H78Pwv3cfi
Ybw9yU4Yr/rvRC+ABuZ5Qrkqr62ia7yWrJxRQab0kFR1v4aXyeVNZ2sJC4pQSPqk
uyE7DOu44aWBioBXYiTxTZlNqDkURLzdmBhJ2cwolcJok6anm7kpUqmhNAUssqB+
/O/vvP11rmVilm1PChK9r5LWzfpfkDOPLvBx+aHB30uBjJNoFxn/WsQbcSpiodnk
ZdPbMC8PX71N52UzKwfjOfecX6G00FiWl7AUj7Yj2K2AyYWvpMrVPJhukQo0byTz
nNz1XBPr4od6FxN39oiW3ku0dSRBM+5/NhTFPTKeEMER
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org