Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa
File:                     v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa (raw, json)
Hash identifier:          QpwMatDYFH36k8iB89D4OKeW3xZ8RbhpvTFEVezuiMw=
Subject key identifier:   BF:E4:D7:D6:97:74:CA:5D:91:2D:59:A3:1B:F5:3C:53:A8:58:EA:16
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       01856ED4CE5A2C0E97100F58279C3807D1D4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa
Signing time:             Sun 01 Jan 2023 19:35:18 +0000
ROA not before:           Sun 01 Jan 2023 19:35:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        147.136.64.0/19 maxlen: 24
                          185.226.204.0/22 maxlen: 24
                          92.50.0.0/18 maxlen: 24
                          170.246.64.0/22 maxlen: 24
                          168.199.128.0/17 maxlen: 24
                          185.101.244.0/22 maxlen: 24
                          185.101.252.0/22 maxlen: 24
                          185.102.4.0/22 maxlen: 24
                          185.170.68.0/22 maxlen: 24
                          192.95.80.0/20 maxlen: 24
                          185.171.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:ce:5a:2c:0e:97:10:0f:58:27:9c:38:07:d1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Jan  1 19:35:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bfe4d7d69774ca5d912d59a31bf53c53a858ea16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:0b:94:cc:d6:6d:d1:cd:40:0a:d7:b2:7f:
                    51:a5:2f:8c:9b:0f:b0:2d:66:77:5f:89:ad:f7:e3:
                    29:72:f3:08:f8:9c:d4:1f:0e:95:5d:ee:73:e1:05:
                    21:d3:06:60:ad:2e:b9:4a:56:f9:cf:b0:2c:f3:70:
                    c6:84:16:57:0a:6b:3c:5c:93:8c:c8:90:9f:e3:5e:
                    16:f1:29:a3:31:44:96:f0:b7:8f:d2:b3:19:23:ed:
                    d2:eb:7a:f0:2d:1c:ab:24:a0:91:2b:5e:bb:00:58:
                    59:4b:9b:f7:67:c3:cb:cc:58:0d:2c:43:53:fb:73:
                    d6:64:74:fe:7f:d8:8d:3a:ee:c5:66:7e:f2:b6:9e:
                    6d:55:33:18:6d:f9:7b:43:12:54:0e:5d:b9:85:1f:
                    81:1e:16:e0:53:b9:a2:81:64:e1:ee:1e:26:d1:16:
                    86:fc:37:df:e7:21:2b:58:c9:87:75:43:48:2e:4d:
                    bf:7c:09:bc:fa:cb:de:80:20:b0:ee:12:75:60:80:
                    4d:d7:a0:f9:06:ff:e2:51:51:83:11:cb:32:33:43:
                    de:c1:a5:19:b3:04:14:f2:33:73:c7:cb:9b:95:46:
                    01:a2:69:56:e2:36:7c:03:ca:91:b1:1c:a9:cc:f2:
                    25:33:e2:cc:8c:40:62:92:ec:1e:10:7c:db:5e:a7:
                    d3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E4:D7:D6:97:74:CA:5D:91:2D:59:A3:1B:F5:3C:53:A8:58:EA:16
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/v-TX1pd0yl2RLVmjG_U8U6hY6hY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.50.0.0/18
                  147.136.64.0/19
                  168.199.128.0/17
                  170.246.64.0/22
                  185.101.244.0/22
                  185.101.252.0/22
                  185.102.4.0/22
                  185.170.68.0/22
                  185.171.252.0/22
                  185.226.204.0/22
                  192.95.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:1f:a7:13:fe:f2:48:07:f2:0f:8f:4e:0b:1d:d6:b9:46:
         70:0e:b7:cf:57:39:25:d6:7c:13:61:aa:e6:d4:05:87:00:97:
         aa:cd:03:6e:5a:f0:4a:9d:c2:ba:83:92:85:5d:5e:e6:6a:68:
         13:23:b6:5b:43:3a:06:3a:f9:20:af:7c:75:36:d6:40:92:fd:
         21:6d:c3:f6:fc:ac:b9:be:fa:bf:1e:06:8e:25:8a:07:2b:54:
         fb:f0:df:ba:f5:6e:89:8e:ef:fa:d6:ae:e3:96:4e:0d:07:44:
         bb:eb:61:92:c1:42:7c:bb:6d:55:56:e2:ac:31:9b:21:30:32:
         a3:b7:80:a1:80:1d:c7:6c:e9:59:2b:17:c6:77:c4:d2:29:8c:
         9a:2b:83:d0:b0:c0:35:83:a6:73:9a:d5:cd:c2:17:c1:dd:29:
         46:ef:e6:20:d3:b9:b3:19:7e:63:e1:94:c7:e7:1b:db:bb:8e:
         7e:ce:c9:89:5e:ba:4f:fb:2b:8a:4b:4d:5f:e1:98:d3:2a:ba:
         63:ab:d7:3e:64:9f:ad:60:cd:6b:5d:df:dc:bb:41:c7:28:f2:
         05:99:7c:a7:ba:dc:9c:67:1a:80:4e:18:31:db:a0:19:f8:68:
         44:18:74:93:aa:e7:9f:6f:0f:69:ad:2a:c7:6f:83:02:83:72:
         3a:d7:fe:f3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYVu1M5aLA6XEA9YJ5w4B9HUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4
ODE3ZDgwHhcNMjMwMTAxMTkzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmU0ZDdkNjk3NzRjYTVkOTEyZDU5YTMxYmY1M2M1M2E4NThlYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA194LlMzWbdHNQArXsn9RpS+Mmw+w
LWZ3X4mt9+MpcvMI+JzUHw6VXe5z4QUh0wZgrS65Slb5z7As83DGhBZXCms8XJOM
yJCf414W8SmjMUSW8LeP0rMZI+3S63rwLRyrJKCRK167AFhZS5v3Z8PLzFgNLENT
+3PWZHT+f9iNOu7FZn7ytp5tVTMYbfl7QxJUDl25hR+BHhbgU7migWTh7h4m0RaG
/Dff5yErWMmHdUNILk2/fAm8+svegCCw7hJ1YIBN16D5Bv/iUVGDEcsyM0PewaUZ
swQU8jNzx8ublUYBomlW4jZ8A8qRsRypzPIlM+LMjEBikuweEHzbXqfTVQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFL/k19aXdMpdkS1Zoxv1PFOoWOoWMB8GA1UdIwQY
MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt
MmQxOTE4YmExYzBlLzEvdi1UWDFwZDB5bDJSTFZtakdfVThVNmhZNmhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl
LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQGXDIAAwQF
k4hAAwQHqMeAAwQCqvZAAwQCuWX0AwQCuWX8AwQCuWYEAwQCuapEAwQCuav8AwQC
ueLMAwQEwF9QMA0GCSqGSIb3DQEBCwUAA4IBAQCe6x+nE/7ySAfyD49OCx3WuUZw
DrfPVzkl1nwTYarm1AWHAJeqzQNuWvBKncK6g5KFXV7mamgTI7ZbQzoGOvkgr3x1
NtZAkv0hbcP2/Ky5vvq/HgaOJYoHK1T78N+69W6Jju/61q7jlk4NB0S762GSwUJ8
u21VVuKsMZshMDKjt4ChgB3HbOlZKxfGd8TSKYyaK4PQsMA1g6ZzmtXNwhfB3SlG
7+Yg07mzGX5j4ZTH5xvbu45+zsmJXrpP+yuKS01f4ZjTKrpjq9c+ZJ+tYM1rXd/c
u0HHKPIFmXynutycZxqAThgx26AZ+GhEGHSTquefbw9prSrHb4MCg3I61/7z
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-ams.rpki-client.org