Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L12NS5ovbW2ElOZsFVeSeu0TzMQ.roa
File:                     L12NS5ovbW2ElOZsFVeSeu0TzMQ.roa (raw, json)
Hash identifier:          Ev2UVFacmt98WajYhKzM3G7FQA8lKgkAs7UniBmFpr4=
Subject key identifier:   2F:5D:8D:4B:9A:2F:6D:6D:84:94:E6:6C:15:57:92:7A:ED:13:CC:C4
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0186DC0A65F1F243E734442820CA22AE67A5
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L12NS5ovbW2ElOZsFVeSeu0TzMQ.roa
Signing time:             Mon 13 Mar 2023 17:35:14 +0000
ROA not before:           Mon 13 Mar 2023 17:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7411
IP address blocks:        93.89.212.0/24 maxlen: 24
                          93.89.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 May 2023 12:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dc:0a:65:f1:f2:43:e7:34:44:28:20:ca:22:ae:67:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Mar 13 17:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f5d8d4b9a2f6d6d8494e66c1557927aed13ccc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:98:3a:f7:cf:42:96:fd:96:7c:e6:f1:ca:
                    d4:50:c7:bb:c5:19:af:89:39:d9:3c:11:60:87:50:
                    c1:1f:75:2f:1c:96:04:1a:87:5e:20:a1:60:35:77:
                    61:2d:43:12:46:58:04:cc:61:0d:c1:b9:4e:ad:ff:
                    7c:fe:06:9a:4a:10:51:5a:4a:a6:23:54:f8:fc:35:
                    6d:53:fa:00:0e:92:e4:a0:39:73:07:c7:73:5c:d9:
                    83:42:78:ef:8c:5d:f0:86:5c:c2:de:a0:96:e9:20:
                    b7:cf:93:83:14:cc:3a:85:4d:6b:b9:d3:99:19:ac:
                    6d:19:ba:8e:8f:04:c0:97:9c:d0:8a:05:7d:25:59:
                    aa:95:d4:cf:57:73:91:47:1c:6a:3f:a8:f5:4d:77:
                    03:b4:61:68:2e:f3:80:f6:2f:5d:11:56:fb:6f:32:
                    cf:22:b1:eb:36:86:34:48:7c:1d:d0:11:31:a9:68:
                    34:32:16:ec:e2:6a:03:45:df:1f:5d:eb:e2:e4:6d:
                    be:96:fc:aa:01:27:95:bf:2e:08:86:81:6a:26:44:
                    80:77:5e:b5:2c:b8:86:24:4b:23:c4:8c:ff:81:bd:
                    c8:4f:56:fd:f6:9a:03:4b:41:7c:65:b9:2a:80:1f:
                    80:fd:e6:78:3a:8b:67:ad:1b:64:6a:3a:c3:ba:48:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5D:8D:4B:9A:2F:6D:6D:84:94:E6:6C:15:57:92:7A:ED:13:CC:C4
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/L12NS5ovbW2ElOZsFVeSeu0TzMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.212.0/24
                  93.89.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:66:9f:f2:c5:aa:22:e3:82:80:9a:8f:d8:c4:79:70:51:b7:
         73:d2:95:ff:b9:a4:46:14:9b:28:d1:46:a4:29:68:93:b0:35:
         4c:25:06:21:64:33:a1:95:b8:01:9a:87:5a:a6:e1:c2:de:90:
         90:9b:bc:9d:5a:09:63:02:c8:3f:4b:af:95:ed:99:1f:e0:ad:
         0c:85:e7:43:e6:6a:ab:91:7a:8d:05:1a:7c:94:1d:60:ea:99:
         50:0b:1b:48:06:85:ba:26:f9:a4:e8:cc:36:be:c4:15:f6:a7:
         d4:cc:79:b1:0e:67:7f:bf:bf:b2:68:3c:f0:ae:05:8f:9a:3b:
         32:d2:bc:20:cf:0b:47:24:f4:3a:a7:46:d9:88:97:63:6b:23:
         fa:c3:8e:4c:ae:6f:0c:e9:9f:46:37:a3:3f:ce:5f:36:77:ea:
         d4:c2:6f:12:b4:ed:84:85:3b:2f:9c:e8:83:8d:1e:5d:ab:cb:
         b5:1f:d4:c9:c4:15:bd:75:0b:1c:bd:09:1d:30:3a:f3:7c:6a:
         84:2d:78:08:ff:13:35:ee:ac:02:2b:91:89:13:34:2c:2a:18:
         17:ed:c1:5a:0f:18:67:01:51:3c:e9:30:87:75:aa:57:03:ed:
         e2:b9:03:c3:ce:c1:cf:14:04:a6:38:2e:a9:1e:10:cf:f4:09:
         8b:eb:fd:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbcCmXx8kPnNEQoIMoirmelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwMzEzMTczNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjVkOGQ0YjlhMmY2ZDZkODQ5NGU2NmMxNTU3OTI3YWVkMTNjY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXeYOvfPQpb9lnzm8crUUMe7xRmv
iTnZPBFgh1DBH3UvHJYEGodeIKFgNXdhLUMSRlgEzGENwblOrf98/gaaShBRWkqm
I1T4/DVtU/oADpLkoDlzB8dzXNmDQnjvjF3whlzC3qCW6SC3z5ODFMw6hU1rudOZ
GaxtGbqOjwTAl5zQigV9JVmqldTPV3ORRxxqP6j1TXcDtGFoLvOA9i9dEVb7bzLP
IrHrNoY0SHwd0BExqWg0Mhbs4moDRd8fXevi5G2+lvyqASeVvy4IhoFqJkSAd161
LLiGJEsjxIz/gb3IT1b99poDS0F8ZbkqgB+A/eZ4OotnrRtkajrDukikbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC9djUuaL21thJTmbBVXknrtE8zEMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvTDEyTlM1b3ZiVzJFbE9ac0ZWZVNldTBUek1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXVnUAwQA
XVnWMA0GCSqGSIb3DQEBCwUAA4IBAQARZp/yxaoi44KAmo/YxHlwUbdz0pX/uaRG
FJso0UakKWiTsDVMJQYhZDOhlbgBmodapuHC3pCQm7ydWgljAsg/S6+V7Zkf4K0M
hedD5mqrkXqNBRp8lB1g6plQCxtIBoW6Jvmk6Mw2vsQV9qfUzHmxDmd/v7+yaDzw
rgWPmjsy0rwgzwtHJPQ6p0bZiJdjayP6w45Mrm8M6Z9GN6M/zl82d+rUwm8StO2E
hTsvnOiDjR5dq8u1H9TJxBW9dQscvQkdMDrzfGqELXgI/xM17qwCK5GJEzQsKhgX
7cFaDxhnAVE86TCHdapXA+3iuQPDzsHPFASmOC6pHhDP9AmL6/1O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org