Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/E_BATKraQaWXoveCTNzQQd6JkMU.roa
File:                     E_BATKraQaWXoveCTNzQQd6JkMU.roa (raw, json)
Hash identifier:          /xf9yrA88F3XlC00WqbetdEgP/0ioBFSrDs0hXU19WU=
Subject key identifier:   13:F0:40:4C:AA:DA:41:A5:97:A2:F7:82:4C:DC:D0:41:DE:89:90:C5
Certificate issuer:       /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial:       01856FA7138D9887BBB79D053C6F59A6A7E2
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/E_BATKraQaWXoveCTNzQQd6JkMU.roa
Signing time:             Sun 01 Jan 2023 23:24:58 +0000
ROA not before:           Sun 01 Jan 2023 23:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44207
IP address blocks:        195.184.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:13:8d:98:87:bb:b7:9d:05:3c:6f:59:a6:a7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
        Validity
            Not Before: Jan  1 23:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13f0404caada41a597a2f7824cdcd041de8990c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:91:47:2e:a7:79:26:0b:0e:79:63:68:8d:
                    d1:3b:cd:9e:59:c1:45:45:d2:92:41:5d:aa:49:f8:
                    44:30:37:38:56:b8:42:b2:85:35:6e:de:4b:d6:08:
                    74:4c:16:9c:54:0c:45:94:76:e4:1e:32:b6:bd:3b:
                    a1:49:ab:af:32:71:b4:fb:b6:26:11:88:95:f0:7c:
                    b4:e8:cb:58:8a:5c:30:61:f1:cb:cb:89:8e:4e:cd:
                    d6:3d:29:c6:71:87:35:d7:19:01:dd:b3:54:76:f7:
                    74:6c:89:67:8b:f2:3f:80:df:7e:dc:1a:94:9d:a7:
                    88:f6:40:6a:35:ba:3a:a7:42:34:75:00:e9:f0:47:
                    7e:4b:a1:75:3d:18:c9:e3:47:2d:bc:ea:f0:04:88:
                    b8:c0:35:4d:a9:e7:1c:8d:d6:68:c4:ec:4f:1b:8c:
                    e1:76:40:69:0c:ba:00:ca:f8:30:25:fb:be:61:eb:
                    8b:ed:22:28:ef:76:49:de:37:8e:52:8f:ce:74:a4:
                    9c:75:95:78:5a:7d:13:5d:35:97:9d:83:b8:50:3e:
                    58:1d:22:ec:2a:65:63:bd:90:aa:f4:96:75:ab:ec:
                    86:8b:ab:c3:e2:2d:aa:c5:0b:b5:91:a5:f8:6d:e0:
                    46:b6:9c:ca:3a:85:49:5f:78:c5:1c:55:69:3b:38:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:40:4C:AA:DA:41:A5:97:A2:F7:82:4C:DC:D0:41:DE:89:90:C5
            X509v3 Authority Key Identifier:
                keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/E_BATKraQaWXoveCTNzQQd6JkMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:8e:f0:f6:55:bd:e0:9f:eb:a4:d7:be:0a:a1:17:3b:42:
         fb:27:1c:c4:50:59:11:c7:76:99:36:78:e2:b8:3e:51:61:3e:
         47:10:77:10:35:8c:45:25:2b:28:08:fd:5f:98:44:46:3b:de:
         03:83:84:d6:88:fb:ed:26:95:dc:a5:58:cf:2f:c2:31:8d:39:
         b9:50:88:f5:9c:b8:5c:aa:44:5d:a0:30:2f:20:4f:07:60:f6:
         a2:e5:76:55:7b:f5:4a:61:05:80:7d:b5:a6:5b:f9:33:e1:82:
         d9:69:04:23:b5:ab:c0:ec:5c:88:73:cc:d8:79:80:27:73:b0:
         1e:8b:c0:28:ad:d5:5e:20:5f:d6:37:56:7a:f0:17:c0:59:2a:
         fb:74:68:03:35:77:cc:e7:ce:10:53:d8:22:da:93:48:ab:2c:
         2c:c3:f9:2b:f9:a3:10:1f:92:09:05:93:9b:f3:83:e0:76:ea:
         b7:4d:99:48:d1:75:9b:c7:bb:fd:3e:44:09:1e:dd:c9:a8:eb:
         3e:3f:1c:6e:10:9a:53:b7:36:7e:3c:d0:7f:fc:87:12:b7:6b:
         fc:47:28:18:a6:53:ef:04:2e:ce:c9:f3:4a:49:28:5c:47:09:
         c0:d0:ee:be:4e:07:80:e5:ac:42:a9:8c:d5:a8:e2:87:06:b9:
         ab:69:5f:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpxONmIe7t50FPG9ZpqfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNTMxOGM1OGJmNWJhNzQzMjRiMjVkMDM3NDA0ZGQ4ZGRh
OWZmMjQwHhcNMjMwMTAxMjMyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2YwNDA0Y2FhZGE0MWE1OTdhMmY3ODI0Y2RjZDA0MWRlODk5MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6CRRy6neSYLDnljaI3RO82eWcFF
RdKSQV2qSfhEMDc4VrhCsoU1bt5L1gh0TBacVAxFlHbkHjK2vTuhSauvMnG0+7Ym
EYiV8Hy06MtYilwwYfHLy4mOTs3WPSnGcYc11xkB3bNUdvd0bIlni/I/gN9+3BqU
naeI9kBqNbo6p0I0dQDp8Ed+S6F1PRjJ40ctvOrwBIi4wDVNqeccjdZoxOxPG4zh
dkBpDLoAyvgwJfu+YeuL7SIo73ZJ3jeOUo/OdKScdZV4Wn0TXTWXnYO4UD5YHSLs
KmVjvZCq9JZ1q+yGi6vD4i2qxQu1kaX4beBGtpzKOoVJX3jFHFVpOzhb4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPwQEyq2kGll6L3gkzc0EHeiZDFMB8GA1UdIwQY
MBaAFApTGMWL9bp0Mksl0DdATdjdqf8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2xNWXhZdjF1blF5U3lYUU4wQk4yTjJwX3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84NTJjZmItNDQ3MS00MjkwLTkxZjQt
NmJjNDkwNWM0MmQ0LzEvRV9CQVRLcmFRYVdYb3ZlQ1ROelFRZDZKa01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84NTJjZmItNDQ3MS00MjkwLTkxZjQtNmJjNDkwNWM0MmQ0
LzEvQ2xNWXhZdjF1blF5U3lYUU4wQk4yTjJwX3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7heMA0G
CSqGSIb3DQEBCwUAA4IBAQByD47w9lW94J/rpNe+CqEXO0L7JxzEUFkRx3aZNnji
uD5RYT5HEHcQNYxFJSsoCP1fmERGO94Dg4TWiPvtJpXcpVjPL8IxjTm5UIj1nLhc
qkRdoDAvIE8HYPai5XZVe/VKYQWAfbWmW/kz4YLZaQQjtavA7FyIc8zYeYAnc7Ae
i8AordVeIF/WN1Z68BfAWSr7dGgDNXfM584QU9gi2pNIqywsw/kr+aMQH5IJBZOb
84Pgduq3TZlI0XWbx7v9PkQJHt3JqOs+PxxuEJpTtzZ+PNB//IcSt2v8RygYplPv
BC7OyfNKSShcRwnA0O6+TgeA5axCqYzVqOKHBrmraV9C
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:29 2024 by rpki-client on console-ams.rpki-client.org