Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa
File:                     G_SOhQH9vNbccKxwhTuOhM1mFuk.roa (raw, json)
Hash identifier:          B1lpVOtdUIPclFLJFOfrr5FKNHg7nKSn7efBHkwTH+4=
Subject key identifier:   1B:F4:8E:85:01:FD:BC:D6:DC:70:AC:70:85:3B:8E:84:CD:66:16:E9
Certificate issuer:       /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial:       018CC64AF668CD68DBF9188AD608442013CC
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa
Signing time:             Mon 01 Jan 2024 18:30:50 +0000
ROA not before:           Mon 01 Jan 2024 18:30:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203698
IP address blocks:        87.236.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Jan 2024 12:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:f6:68:cd:68:db:f9:18:8a:d6:08:44:20:13:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
        Validity
            Not Before: Jan  1 18:30:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1bf48e8501fdbcd6dc70ac70853b8e84cd6616e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:0d:73:02:f1:27:c4:d5:82:46:fe:52:3d:
                    89:99:0b:f8:53:84:05:5c:01:7b:30:53:0a:bd:2c:
                    a3:ed:b9:6f:f6:b4:28:c3:84:51:ad:ac:58:91:f2:
                    24:12:63:21:9d:22:60:38:ae:67:e0:b2:13:02:f8:
                    a6:a1:5b:b2:54:77:4d:66:9d:72:32:f5:30:69:5c:
                    28:5e:e7:c5:a1:42:6d:87:91:9d:5a:0a:19:9b:2d:
                    6e:26:c8:ba:d2:05:12:04:04:45:38:77:3a:f0:8a:
                    c5:e4:9f:36:91:fa:bb:d5:32:e5:31:9f:18:35:76:
                    b0:d1:bf:c9:1d:d2:b6:50:fb:67:11:1f:f3:eb:2d:
                    3e:38:10:a9:16:be:dc:c4:29:e1:8b:bd:f2:ca:cb:
                    82:a0:24:ee:b9:9b:b9:f6:ff:d5:9e:fd:40:1b:cc:
                    cb:de:e1:23:70:c8:a1:4e:93:bc:72:1f:3b:0d:81:
                    ae:e7:59:59:df:ae:6f:6b:60:54:c1:d2:cf:73:12:
                    5e:04:0d:81:25:6a:7e:28:48:3c:0f:68:b3:f6:bd:
                    2b:b8:72:20:e6:4a:96:1f:7f:ad:68:6c:0c:5a:7a:
                    ac:29:bf:e5:1b:1a:7a:81:28:02:d6:cc:78:19:73:
                    95:35:91:56:75:17:f8:39:97:53:0d:50:dc:a5:7e:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F4:8E:85:01:FD:BC:D6:DC:70:AC:70:85:3B:8E:84:CD:66:16:E9
            X509v3 Authority Key Identifier:
                keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/G_SOhQH9vNbccKxwhTuOhM1mFuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:80:27:ab:b4:71:5e:3a:05:c0:ba:fa:e9:35:b7:be:bd:
         40:f6:c0:78:f6:38:b6:42:db:03:d1:c3:20:6b:8b:92:a4:de:
         bb:55:a3:5e:6a:21:f4:ac:7f:65:4d:2b:ba:dd:2b:a5:98:bc:
         ef:7b:1f:52:6d:3a:36:65:b3:46:f1:4e:cf:6b:2a:39:13:90:
         92:55:b8:c8:a7:64:e3:36:19:c4:79:a8:9f:15:64:cb:ea:a9:
         6d:fd:1e:a7:a8:f0:1d:ec:f8:0a:dd:bf:fc:b3:39:2a:31:49:
         24:9a:df:6f:bb:25:63:1f:f7:4b:f5:92:71:18:bb:99:79:10:
         b3:a1:87:22:ed:d7:f8:9f:47:c2:da:ec:82:18:8c:76:6b:b0:
         45:39:70:82:fb:81:75:5c:09:19:45:3c:b2:ec:27:42:be:f2:
         d3:8b:4d:66:44:1e:f0:89:20:5e:cb:e1:e3:1b:e4:06:65:59:
         01:b3:d7:f7:2d:93:df:cb:2d:a4:0d:dd:97:77:c5:6c:60:14:
         9f:b2:89:1b:e8:65:59:f1:c1:e2:78:c1:4a:18:a9:8e:f4:30:
         50:15:6c:74:20:98:48:9e:1e:22:7a:fe:0f:99:40:bb:ad:d6:
         d8:ae:5f:43:24:03:cc:f0:a7:19:9a:c0:26:bd:cf:a5:64:38:
         af:ea:11:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSvZozWjb+RiK1ghEIBPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYjMzODJjMTZhMGE1NjE1OTkwZDRiY2U2MzRkYzUxNjgy
ZjJlYWEwHhcNMjQwMTAxMTgzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmY0OGU4NTAxZmRiY2Q2ZGM3MGFjNzA4NTNiOGU4NGNkNjYxNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkoNcwLxJ8TVgkb+Uj2JmQv4U4QF
XAF7MFMKvSyj7blv9rQow4RRraxYkfIkEmMhnSJgOK5n4LITAvimoVuyVHdNZp1y
MvUwaVwoXufFoUJth5GdWgoZmy1uJsi60gUSBARFOHc68IrF5J82kfq71TLlMZ8Y
NXaw0b/JHdK2UPtnER/z6y0+OBCpFr7cxCnhi73yysuCoCTuuZu59v/Vnv1AG8zL
3uEjcMihTpO8ch87DYGu51lZ365va2BUwdLPcxJeBA2BJWp+KEg8D2iz9r0ruHIg
5kqWH3+taGwMWnqsKb/lGxp6gSgC1sx4GXOVNZFWdRf4OZdTDVDcpX74JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBv0joUB/bzW3HCscIU7joTNZhbpMB8GA1UdIwQY
MBaAFHuzOCwWoKVhWZDUvOY03FFoLy6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEt
OTU1NGE1YWMzNmJiLzEvR19TT2hRSDl2TmJjY0t4d2hUdU9oTTFtRnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NDBhNzQtYTJmMi00YmQ2LThlNWEtOTU1NGE1YWMzNmJi
LzEvZTdNNExCYWdwV0Zaa05TODVqVGNVV2d2THFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+wjMA0G
CSqGSIb3DQEBCwUAA4IBAQCcYIAnq7RxXjoFwLr66TW3vr1A9sB49ji2QtsD0cMg
a4uSpN67VaNeaiH0rH9lTSu63SulmLzvex9SbTo2ZbNG8U7Payo5E5CSVbjIp2Tj
NhnEeaifFWTL6qlt/R6nqPAd7PgK3b/8szkqMUkkmt9vuyVjH/dL9ZJxGLuZeRCz
oYci7df4n0fC2uyCGIx2a7BFOXCC+4F1XAkZRTyy7CdCvvLTi01mRB7wiSBey+Hj
G+QGZVkBs9f3LZPfyy2kDd2Xd8VsYBSfsokb6GVZ8cHieMFKGKmO9DBQFWx0IJhI
nh4iev4PmUC7rdbYrl9DJAPM8KcZmsAmvc+lZDiv6hFZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org