Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5UqP9y8GSJd2xQmxcmSFfWwaGdU.roa
File:                     5UqP9y8GSJd2xQmxcmSFfWwaGdU.roa (raw, json)
Hash identifier:          Ww9ou29EdPWnlZN+cGIrUwdCPrJZj5ux8+wvWvdYZlw=
Subject key identifier:   E5:4A:8F:F7:2F:06:48:97:76:C5:09:B1:72:64:85:7D:6C:1A:19:D5
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01875287599B05B4A8BA3A2717AF335FA4DC
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5UqP9y8GSJd2xQmxcmSFfWwaGdU.roa
Signing time:             Wed 05 Apr 2023 17:46:54 +0000
ROA not before:           Wed 05 Apr 2023 17:46:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Apr 2023 10:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:52:87:59:9b:05:b4:a8:ba:3a:27:17:af:33:5f:a4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Apr  5 17:46:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e54a8ff72f06489776c509b17264857d6c1a19d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:63:ec:87:6d:7a:f5:91:ed:81:b2:44:5f:c0:
                    7d:d2:50:75:e5:81:80:1a:e5:9a:a2:53:f6:33:35:
                    ef:ff:32:5a:0b:09:02:8b:36:02:98:0d:c8:b8:ce:
                    38:dc:f7:b5:60:2e:b0:52:78:46:fd:e5:28:fb:49:
                    9b:53:e7:0a:51:b1:f5:54:ec:5f:42:e1:fa:bd:60:
                    5f:67:c2:fe:71:14:00:9d:f6:48:f5:bc:a2:05:09:
                    bf:35:c7:4e:f1:ed:4f:34:a4:f4:ee:d5:2b:2e:ad:
                    18:47:7c:d7:a1:71:00:3f:5a:05:09:97:8c:f3:0a:
                    76:54:37:18:b1:0a:1d:74:f9:c8:70:c0:ab:2d:f3:
                    df:04:89:e4:9f:55:03:e8:cc:99:41:6e:99:f2:e7:
                    81:21:c9:6e:7c:2b:b7:22:59:68:3c:7a:0b:78:59:
                    a1:a6:e0:01:d1:f9:2f:e7:38:16:59:29:f5:d8:46:
                    e4:ea:2e:f1:73:0e:cd:eb:ea:fd:89:b7:6e:4e:d3:
                    9c:38:c3:15:bb:61:12:42:9b:72:5c:f7:46:4f:25:
                    58:97:68:03:81:b7:64:67:fa:aa:19:f6:7f:64:13:
                    9a:14:8d:49:e2:77:a2:3a:b5:46:e6:ec:f5:2f:da:
                    1e:21:1e:5c:c4:ca:c8:2e:89:c3:73:53:50:4d:bb:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:8F:F7:2F:06:48:97:76:C5:09:B1:72:64:85:7D:6C:1A:19:D5
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5UqP9y8GSJd2xQmxcmSFfWwaGdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:92:7c:c5:5e:c1:a0:8f:dc:15:5f:8b:53:09:7a:08:96:
         73:45:48:9f:49:0e:7b:30:81:04:74:b3:66:04:e3:ba:e8:15:
         80:7f:67:dd:d3:2f:4e:08:cc:23:34:87:0f:70:44:a8:3c:9c:
         23:77:ce:2c:48:49:8f:0a:5a:8f:31:4c:10:de:86:71:bf:d5:
         79:a3:16:ee:4b:7f:27:c2:a6:9a:8c:50:59:6f:b7:d4:0a:6e:
         18:4a:9b:55:c8:92:a8:0c:c1:92:b8:e1:91:fa:49:1d:45:56:
         91:6e:02:e2:42:b8:9a:4c:3f:5f:54:52:b3:b7:11:ad:07:5e:
         3f:3f:53:a2:ef:de:fd:95:99:9a:30:f5:1b:b3:a2:a8:ee:e5:
         39:fc:34:da:f6:de:c3:cd:19:94:98:64:ac:ab:8f:02:0c:bf:
         9a:b1:35:04:95:32:e3:40:f7:bd:f2:cb:37:16:b5:f7:07:e6:
         8c:7e:a2:e9:45:13:9a:50:4d:19:74:8a:50:1b:3b:a4:e5:d1:
         06:2e:ca:8b:97:9e:6c:ff:99:4f:a8:5b:bc:29:81:03:a0:f5:
         0e:70:16:f8:2e:cf:9f:dd:4c:1d:74:4e:0a:d3:da:06:a8:cb:
         72:eb:8f:01:31:e6:92:f9:01:04:af:a1:d3:b3:8a:cb:c9:45:
         56:9a:db:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdSh1mbBbSoujonF68zX6TcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwNDA1MTc0NjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTRhOGZmNzJmMDY0ODk3NzZjNTA5YjE3MjY0ODU3ZDZjMWExOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimPsh2169ZHtgbJEX8B90lB15YGA
GuWaolP2MzXv/zJaCwkCizYCmA3IuM443Pe1YC6wUnhG/eUo+0mbU+cKUbH1VOxf
QuH6vWBfZ8L+cRQAnfZI9byiBQm/NcdO8e1PNKT07tUrLq0YR3zXoXEAP1oFCZeM
8wp2VDcYsQoddPnIcMCrLfPfBInkn1UD6MyZQW6Z8ueBIclufCu3IlloPHoLeFmh
puAB0fkv5zgWWSn12Ebk6i7xcw7N6+r9ibduTtOcOMMVu2ESQptyXPdGTyVYl2gD
gbdkZ/qqGfZ/ZBOaFI1J4neiOrVG5uz1L9oeIR5cxMrILonDc1NQTbuUKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVKj/cvBkiXdsUJsXJkhX1sGhnVMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvNVVxUDl5OEdTSmQyeFFteGNtU0ZmV3dhR2RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVEcMA0G
CSqGSIb3DQEBCwUAA4IBAQBCa5J8xV7BoI/cFV+LUwl6CJZzRUifSQ57MIEEdLNm
BOO66BWAf2fd0y9OCMwjNIcPcESoPJwjd84sSEmPClqPMUwQ3oZxv9V5oxbuS38n
wqaajFBZb7fUCm4YSptVyJKoDMGSuOGR+kkdRVaRbgLiQriaTD9fVFKztxGtB14/
P1Oi7979lZmaMPUbs6Ko7uU5/DTa9t7DzRmUmGSsq48CDL+asTUElTLjQPe98ss3
FrX3B+aMfqLpRROaUE0ZdIpQGzuk5dEGLsqLl55s/5lPqFu8KYEDoPUOcBb4Ls+f
3UwddE4K09oGqMty648BMeaS+QEEr6HTs4rLyUVWmtuo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org