Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4NZd7Zm3m7aS9sFHd7KqgAn6smM.roa
File:                     4NZd7Zm3m7aS9sFHd7KqgAn6smM.roa (raw, json)
Hash identifier:          jd6999IzuOeK5jWj/Q/Os/yuYCGoXhv8hHTyRdLMaBA=
Subject key identifier:   E0:D6:5D:ED:99:B7:9B:B6:92:F6:C1:47:77:B2:AA:80:09:FA:B2:63
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       01856EEFD59405A4B6B75A09EC580CFF5311
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4NZd7Zm3m7aS9sFHd7KqgAn6smM.roa
Signing time:             Sun 01 Jan 2023 20:04:49 +0000
ROA not before:           Sun 01 Jan 2023 20:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202061
IP address blocks:        93.159.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:ef:d5:94:05:a4:b6:b7:5a:09:ec:58:0c:ff:53:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 20:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e0d65ded99b79bb692f6c14777b2aa8009fab263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:32:71:d5:5b:00:74:68:1c:6b:59:80:2a:
                    81:a4:b1:72:02:c8:08:10:d3:1c:a1:74:aa:05:63:
                    07:4f:d8:0e:46:ae:b8:9e:55:ca:14:46:cd:c6:a4:
                    19:ea:08:e3:0c:5f:16:12:6b:9c:1a:a9:44:19:88:
                    99:b9:87:c9:dc:4c:26:b5:f1:20:b4:9e:39:ea:b8:
                    d5:dd:c1:72:42:6f:3b:61:03:f9:04:8b:f2:db:e9:
                    f0:87:9b:06:26:db:b6:12:98:49:28:aa:4c:8f:d9:
                    1a:ae:93:24:96:b8:54:d9:42:b9:b9:c7:15:f8:ad:
                    bf:c0:a6:a0:f4:b6:d6:01:f5:82:ca:66:59:6a:7f:
                    35:de:48:4b:92:13:c6:1e:5a:c9:7b:1c:a8:ab:2c:
                    27:f9:a9:81:f1:b0:b1:19:21:a6:da:3f:83:16:5b:
                    24:e3:c3:63:5d:74:fc:d8:33:3d:82:33:73:65:9f:
                    df:e9:c6:a3:2b:53:c9:97:ae:4c:49:51:f9:c7:bd:
                    f9:f0:9a:f8:c7:90:08:1e:de:e4:24:26:ab:c7:01:
                    93:b6:e1:c2:09:2f:57:88:28:b5:1e:a1:06:d0:b4:
                    94:b0:ee:ea:ba:24:a8:6f:e4:d7:ba:90:79:72:08:
                    84:d5:bb:bc:2c:e5:0f:aa:0d:0b:f0:d1:cf:cb:23:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D6:5D:ED:99:B7:9B:B6:92:F6:C1:47:77:B2:AA:80:09:FA:B2:63
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4NZd7Zm3m7aS9sFHd7KqgAn6smM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:d2:a2:6d:87:31:9e:a0:f8:19:80:e5:7b:8b:2f:92:bc:
         02:2b:08:51:5c:07:93:f6:27:80:52:6a:a4:8e:37:70:3f:e8:
         23:76:1e:ec:03:ad:30:4e:da:72:79:7a:ba:0a:55:44:b2:15:
         5a:6e:99:b2:f8:b9:2a:4a:8f:b8:33:34:ce:27:2f:97:8c:fb:
         af:63:c0:7f:37:a2:86:98:c0:58:50:35:55:c3:16:ff:e9:05:
         7a:7e:fa:91:01:56:7c:7e:42:0e:f5:c0:2c:7a:e3:94:cd:a4:
         25:c9:fd:5f:af:81:49:8d:55:d6:9a:8d:03:09:00:75:bc:96:
         ed:f6:24:62:a7:22:1a:cb:2d:a3:8d:47:cb:d3:7a:19:1a:5c:
         51:40:3b:17:95:28:90:17:c6:3c:1d:68:6b:bf:a0:be:0c:59:
         34:80:f2:2c:d4:58:39:cf:5f:56:93:40:27:77:7e:5b:10:41:
         65:ec:30:e2:a8:a6:b2:27:60:1d:00:66:56:17:bc:d7:64:a0:
         9a:4d:38:36:38:f2:0c:fe:a9:82:08:06:20:f6:22:1c:15:40:
         17:e5:2d:2b:2c:dc:20:b6:76:00:2b:b6:20:95:79:ab:16:bd:
         b9:74:3b:d1:34:1d:19:5b:c9:10:e1:cf:77:30:da:fc:aa:09:
         fb:1e:4a:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu79WUBaS2t1oJ7FgM/1MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl
MzRiOTMwHhcNMjMwMTAxMjAwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGQ2NWRlZDk5Yjc5YmI2OTJmNmMxNDc3N2IyYWE4MDA5ZmFiMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcYycdVbAHRoHGtZgCqBpLFyAsgI
ENMcoXSqBWMHT9gORq64nlXKFEbNxqQZ6gjjDF8WEmucGqlEGYiZuYfJ3EwmtfEg
tJ456rjV3cFyQm87YQP5BIvy2+nwh5sGJtu2EphJKKpMj9karpMklrhU2UK5uccV
+K2/wKag9LbWAfWCymZZan813khLkhPGHlrJexyoqywn+amB8bCxGSGm2j+DFlsk
48NjXXT82DM9gjNzZZ/f6cajK1PJl65MSVH5x7358Jr4x5AIHt7kJCarxwGTtuHC
CS9XiCi1HqEG0LSUsO7quiSob+TXupB5cgiE1bu8LOUPqg0L8NHPyyNbQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODWXe2Zt5u2kvbBR3eyqoAJ+rJjMB8GA1UdIwQY
MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt
NWNiZDFmM2ZmMzlhLzEvNE5aZDdabTNtN2FTOXNGSGQ3S3FnQW42c21NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh
LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ+5MA0G
CSqGSIb3DQEBCwUAA4IBAQA3/9KibYcxnqD4GYDle4svkrwCKwhRXAeT9ieAUmqk
jjdwP+gjdh7sA60wTtpyeXq6ClVEshVabpmy+LkqSo+4MzTOJy+XjPuvY8B/N6KG
mMBYUDVVwxb/6QV6fvqRAVZ8fkIO9cAseuOUzaQlyf1fr4FJjVXWmo0DCQB1vJbt
9iRipyIayy2jjUfL03oZGlxRQDsXlSiQF8Y8HWhrv6C+DFk0gPIs1Fg5z19Wk0An
d35bEEFl7DDiqKayJ2AdAGZWF7zXZKCaTTg2OPIM/qmCCAYg9iIcFUAX5S0rLNwg
tnYAK7YglXmrFr25dDvRNB0ZW8kQ4c93MNr8qgn7HkrG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org