Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EVX5qJiC8n8Wvbvrf6i_129I9Yo.roa
File:                     EVX5qJiC8n8Wvbvrf6i_129I9Yo.roa (raw, json)
Hash identifier:          y389a1LTmy4m6x9fgLltuPxtCoMNW3WNqONF02H/62o=
Subject key identifier:   11:55:F9:A8:98:82:F2:7F:16:BD:BB:EB:7F:A8:BF:D7:6F:48:F5:8A
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       018C7DE19A88A0AE57380C9807780D4F39C8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EVX5qJiC8n8Wvbvrf6i_129I9Yo.roa
Signing time:             Mon 18 Dec 2023 17:03:06 +0000
ROA not before:           Mon 18 Dec 2023 17:03:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139989
IP address blocks:        81.168.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7d:e1:9a:88:a0:ae:57:38:0c:98:07:78:0d:4f:39:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Dec 18 17:03:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1155f9a89882f27f16bdbbeb7fa8bfd76f48f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0a:89:e6:93:62:6a:ea:e0:98:c1:dc:fc:e8:
                    eb:ea:84:48:16:34:1e:d5:93:bd:72:4f:7b:43:07:
                    d9:d9:18:85:f3:6c:52:1f:05:e2:90:f6:c0:d1:7e:
                    b3:63:78:7a:6f:6f:10:11:29:84:c2:16:6b:52:10:
                    1f:09:fa:bf:33:61:21:fe:32:3b:b2:0b:38:8e:91:
                    91:b4:52:5b:d1:c0:a8:86:09:fc:fb:e1:de:50:bd:
                    a6:eb:22:fe:7b:90:fd:7d:2a:d9:f8:dc:32:87:60:
                    f0:2a:72:13:dc:65:39:e3:01:11:53:c7:10:0c:b2:
                    64:18:ab:54:5a:c0:52:b8:dc:a4:c1:05:3e:9c:36:
                    f8:fa:49:24:a6:b3:f5:a8:07:4b:d0:f5:ad:79:34:
                    72:cb:71:9e:c8:ff:d0:a0:ab:50:0f:17:8c:30:70:
                    c5:4a:65:72:47:07:fe:0f:b7:14:ea:e6:a8:b9:14:
                    e4:4a:2d:01:f3:ad:0f:3c:24:85:19:27:ce:97:62:
                    5c:db:ce:91:a9:0b:76:7e:8a:3c:91:7e:07:e2:e0:
                    19:ad:83:33:3d:4f:97:35:ed:98:5b:60:7c:f8:a5:
                    ff:04:92:7d:1f:58:8f:5a:db:3d:88:2a:3a:38:4d:
                    6b:49:52:1d:19:b2:8b:09:b9:77:90:cb:82:d5:a2:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:55:F9:A8:98:82:F2:7F:16:BD:BB:EB:7F:A8:BF:D7:6F:48:F5:8A
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EVX5qJiC8n8Wvbvrf6i_129I9Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:31:e8:26:d0:8d:6a:22:20:24:da:dc:2b:94:47:36:90:27:
         9e:2b:38:be:8f:0c:94:46:ef:15:57:83:6b:45:b1:bc:0c:a5:
         c6:48:b6:3a:11:c4:17:f7:95:00:ba:85:6c:6d:fb:58:86:1c:
         8b:d4:18:dd:02:94:65:84:f2:9e:a6:6f:fd:64:28:e7:7a:35:
         14:48:bf:fe:f8:33:1e:6d:65:6f:36:21:48:0a:4c:21:a3:3c:
         6c:29:94:22:b7:1c:cf:7a:aa:5d:2e:1a:22:88:ba:6d:b9:8e:
         16:51:11:a6:31:69:14:8b:ad:69:8f:a2:fd:a4:cc:5e:79:10:
         ea:be:0a:dd:3d:67:03:50:ae:9a:dc:35:fb:32:db:93:ec:99:
         17:1a:37:78:f6:4c:94:ca:18:d2:a7:62:d4:72:1e:28:b7:d4:
         8f:ca:b9:99:69:d8:cb:df:9a:92:e2:87:d3:6b:2f:99:9e:48:
         9c:ef:ce:cb:08:cb:4d:6d:e5:b7:92:98:02:fe:6f:37:b2:53:
         00:df:0e:fc:78:ef:b2:a7:85:6c:6c:83:55:0c:96:eb:dc:6b:
         e1:aa:f3:22:fb:0e:0c:c5:5f:30:14:27:1c:90:fa:b3:9b:8e:
         1e:a0:0f:b4:d1:83:8e:d4:8e:b8:4c:e5:a5:8e:44:bf:1e:a9:
         9b:83:0a:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx94ZqIoK5XOAyYB3gNTznIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjMxMjE4MTcwMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU1ZjlhODk4ODJmMjdmMTZiZGJiZWI3ZmE4YmZkNzZmNDhmNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqJ5pNiaurgmMHc/Ojr6oRIFjQe
1ZO9ck97QwfZ2RiF82xSHwXikPbA0X6zY3h6b28QESmEwhZrUhAfCfq/M2Eh/jI7
sgs4jpGRtFJb0cCohgn8++HeUL2m6yL+e5D9fSrZ+Nwyh2DwKnIT3GU54wERU8cQ
DLJkGKtUWsBSuNykwQU+nDb4+kkkprP1qAdL0PWteTRyy3GeyP/QoKtQDxeMMHDF
SmVyRwf+D7cU6uaouRTkSi0B860PPCSFGSfOl2Jc286RqQt2foo8kX4H4uAZrYMz
PU+XNe2YW2B8+KX/BJJ9H1iPWts9iCo6OE1rSVIdGbKLCbl3kMuC1aKK8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFV+aiYgvJ/Fr2763+ov9dvSPWKMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRVZYNXFKaUM4bjhXdmJ2cmY2aV8xMjlJOVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUah0MA0G
CSqGSIb3DQEBCwUAA4IBAQAFMegm0I1qIiAk2twrlEc2kCeeKzi+jwyURu8VV4Nr
RbG8DKXGSLY6EcQX95UAuoVsbftYhhyL1BjdApRlhPKepm/9ZCjnejUUSL/++DMe
bWVvNiFICkwhozxsKZQitxzPeqpdLhoiiLptuY4WURGmMWkUi61pj6L9pMxeeRDq
vgrdPWcDUK6a3DX7MtuT7JkXGjd49kyUyhjSp2LUch4ot9SPyrmZadjL35qS4ofT
ay+Znkic787LCMtNbeW3kpgC/m83slMA3w78eO+yp4VsbINVDJbr3GvhqvMi+w4M
xV8wFCcckPqzm44eoA+00YOO1I64TOWljkS/HqmbgwoI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org