Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/uYowgAnJG-HRN82V1_T7UUYtKfc.roa
File:                     uYowgAnJG-HRN82V1_T7UUYtKfc.roa (raw, json)
Hash identifier:          mR/dqC9qqkIIcRYqMt/syNGbK75VshRvrUf57JqBolg=
Subject key identifier:   B9:8A:30:80:09:C9:1B:E1:D1:37:CD:95:D7:F4:FB:51:46:2D:29:F7
Certificate issuer:       /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial:       0186FE30F69A833C28BD89EECEDDBD2F0926
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/uYowgAnJG-HRN82V1_T7UUYtKfc.roa
Signing time:             Mon 20 Mar 2023 08:44:27 +0000
ROA not before:           Mon 20 Mar 2023 08:44:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200737
IP address blocks:        46.231.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fe:30:f6:9a:83:3c:28:bd:89:ee:ce:dd:bd:2f:09:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
        Validity
            Not Before: Mar 20 08:44:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b98a308009c91be1d137cd95d7f4fb51462d29f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:c8:d7:ab:1d:9a:80:00:86:68:a0:40:e5:
                    a0:c0:09:71:0f:b9:79:f5:24:93:2b:c2:0a:fe:47:
                    83:4b:cc:19:0d:4c:30:3d:f1:33:99:2d:00:bb:cc:
                    a7:c0:a9:5a:b9:2f:17:a3:61:67:5c:50:77:74:c0:
                    d6:49:bd:28:97:ab:45:ed:e0:40:e7:cd:fe:36:1b:
                    e1:b7:0b:ca:d4:1d:5c:23:b6:27:fc:58:91:9d:3e:
                    fd:33:aa:1a:4d:27:c8:01:28:59:b8:12:0c:a0:cc:
                    22:e3:a2:bf:2a:f2:d2:3c:b0:b6:18:09:7a:58:01:
                    61:2e:86:c4:f9:6d:4c:b5:c1:a4:0e:53:1d:05:20:
                    24:a4:18:39:f8:e4:e0:0b:42:de:a5:02:8d:73:d4:
                    74:27:38:01:ee:01:3c:ed:e3:3b:75:09:b0:57:70:
                    8a:61:be:6a:eb:ad:9e:92:ca:b4:fa:da:7a:ab:6f:
                    37:8b:95:ba:8a:21:50:10:18:84:f1:5d:ff:fb:96:
                    ec:f3:7c:62:b9:74:e5:3d:d0:de:01:45:13:84:b0:
                    75:95:61:b5:44:12:46:a2:c9:e7:00:e0:76:19:56:
                    c9:ea:01:f7:ae:f2:5a:f9:30:9e:50:98:f7:af:26:
                    ac:af:4f:4a:c6:94:68:20:7b:12:af:7f:4d:fd:d7:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8A:30:80:09:C9:1B:E1:D1:37:CD:95:D7:F4:FB:51:46:2D:29:F7
            X509v3 Authority Key Identifier:
                keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/uYowgAnJG-HRN82V1_T7UUYtKfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.231.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:c8:96:3e:69:f9:24:2e:3e:31:cd:34:e3:83:5e:69:01:
         50:cd:57:9b:34:e6:5a:94:cf:88:45:7d:5e:81:44:25:76:6d:
         d1:b5:38:6c:3f:f6:2e:be:ee:42:e0:05:b5:99:69:6b:8e:ae:
         8a:79:74:b1:ed:78:47:a8:fe:21:d8:68:f3:70:f2:20:7e:f3:
         0a:96:2e:a3:ff:e2:11:75:40:1f:77:df:d8:48:3f:80:eb:47:
         ca:99:7e:0b:b2:f9:a9:9f:7d:c2:01:cd:03:ba:22:71:48:b1:
         76:53:87:ce:e5:1a:0b:99:6e:1b:1e:99:01:bd:2d:33:cd:6b:
         26:df:d7:ae:93:6c:e3:a1:3b:d5:7f:0b:49:8c:70:d8:e8:4b:
         34:d7:a2:04:06:62:15:b0:43:dd:81:92:d4:d5:e4:d7:9b:36:
         78:1b:36:26:af:d7:13:be:f2:46:34:9b:c1:2b:9b:0f:9b:42:
         fe:b2:03:b7:1d:a3:c6:ea:3e:0c:c2:8e:cb:79:b0:85:61:4e:
         1e:d7:67:ce:e7:fb:7c:0d:80:0a:95:fd:ad:32:0b:91:5b:2a:
         b9:ab:7c:0d:0f:2c:b3:c2:1f:5e:e5:58:71:84:b9:8b:85:1c:
         37:88:3a:78:fd:85:aa:cc:74:cb:14:3e:66:1b:e7:09:b8:da:
         32:d1:5d:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb+MPaagzwovYnuzt29LwkmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzIxMDc4ZjM1OWQ3OTkwMjc2ZGFiYjBmOGMzMDA3MGU2
ODU5NjMwHhcNMjMwMzIwMDg0NDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOThhMzA4MDA5YzkxYmUxZDEzN2NkOTVkN2Y0ZmI1MTQ2MmQyOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtjI16sdmoAAhmigQOWgwAlxD7l5
9SSTK8IK/keDS8wZDUwwPfEzmS0Au8ynwKlauS8Xo2FnXFB3dMDWSb0ol6tF7eBA
583+NhvhtwvK1B1cI7Yn/FiRnT79M6oaTSfIAShZuBIMoMwi46K/KvLSPLC2GAl6
WAFhLobE+W1MtcGkDlMdBSAkpBg5+OTgC0LepQKNc9R0JzgB7gE87eM7dQmwV3CK
Yb5q662eksq0+tp6q283i5W6iiFQEBiE8V3/+5bs83xiuXTlPdDeAUUThLB1lWG1
RBJGosnnAOB2GVbJ6gH3rvJa+TCeUJj3ryasr09KxpRoIHsSr39N/dertwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmKMIAJyRvh0TfNldf0+1FGLSn3MB8GA1UdIwQY
MBaAFCcyEHjzWdeZAnbauw+MMAcOaFljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQt
YzM0MzFkMzIwNDA2LzEvdVlvd2dBbkpHLUhSTjgyVjFfVDdVVVl0S2ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYjI3ZjItZTM2OS00YjA3LThkMWQtYzM0MzFkMzIwNDA2
LzEvSnpJUWVQTloxNWtDZHRxN0Q0d3dCdzVvV1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALufmMA0G
CSqGSIb3DQEBCwUAA4IBAQAQxciWPmn5JC4+Mc0044NeaQFQzVebNOZalM+IRX1e
gUQldm3RtThsP/Yuvu5C4AW1mWlrjq6KeXSx7XhHqP4h2GjzcPIgfvMKli6j/+IR
dUAfd9/YSD+A60fKmX4Lsvmpn33CAc0DuiJxSLF2U4fO5RoLmW4bHpkBvS0zzWsm
39euk2zjoTvVfwtJjHDY6Es016IEBmIVsEPdgZLU1eTXmzZ4GzYmr9cTvvJGNJvB
K5sPm0L+sgO3HaPG6j4Mwo7LebCFYU4e12fO5/t8DYAKlf2tMguRWyq5q3wNDyyz
wh9e5VhxhLmLhRw3iDp4/YWqzHTLFD5mG+cJuNoy0V0k
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-fra.rpki-client.org