Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/X8z_EyS2MYKdGl1hwnjVaAa3vxk.roa
File:                     X8z_EyS2MYKdGl1hwnjVaAa3vxk.roa (raw, json)
Hash identifier:          h/fKMyA59BwuaI+M1YlWoEyufFc38BNga9yE3KliAVY=
Subject key identifier:   5F:CC:FF:13:24:B6:31:82:9D:1A:5D:61:C2:78:D5:68:06:B7:BF:19
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       0186383255C8063DAF8AE81577DCDF691737
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/X8z_EyS2MYKdGl1hwnjVaAa3vxk.roa
Signing time:             Thu 09 Feb 2023 22:01:08 +0000
ROA not before:           Thu 09 Feb 2023 22:01:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200993
IP address blocks:        178.250.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:38:32:55:c8:06:3d:af:8a:e8:15:77:dc:df:69:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Feb  9 22:01:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5fccff1324b631829d1a5d61c278d56806b7bf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:9a:01:e7:85:1d:65:0d:d6:66:06:51:1d:
                    71:75:c7:61:f3:16:61:e9:2b:e5:d4:5e:a7:60:cd:
                    c5:a3:48:95:cf:d2:44:a1:e7:a3:26:16:40:69:a8:
                    72:03:1e:9c:80:39:c1:04:29:d7:48:5f:97:2a:e3:
                    88:c7:3b:cb:04:e1:ec:7d:04:82:dd:04:cc:fa:ba:
                    b9:e0:b0:85:72:8c:4d:73:95:b0:78:2f:d4:b2:fc:
                    f6:b9:46:fc:d0:5a:9b:b6:c0:1b:40:da:b5:66:13:
                    1f:6b:68:4c:c1:d4:65:3b:fb:15:d3:6d:aa:92:1d:
                    41:a2:5b:50:87:24:51:7c:28:42:79:8d:15:e2:10:
                    62:19:22:e1:bd:df:4b:62:0e:d2:9a:35:0f:03:23:
                    a0:52:35:57:5e:11:5b:f7:1b:69:9e:9b:ba:a1:87:
                    54:28:7d:22:69:ee:1d:94:5f:25:60:ca:da:e1:31:
                    8d:19:ce:84:f4:00:ed:01:11:63:c8:4a:cf:66:09:
                    b0:e7:61:fa:a7:45:f9:a0:ad:56:7a:bc:1a:b4:f7:
                    b4:4a:7e:b3:80:d9:67:ba:14:34:23:a4:e6:0b:18:
                    a1:3b:26:ca:5e:5e:43:98:21:db:e8:42:fd:ce:9e:
                    6e:fe:6d:31:1b:47:1f:b1:17:e2:e6:b5:46:24:a3:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:FF:13:24:B6:31:82:9D:1A:5D:61:C2:78:D5:68:06:B7:BF:19
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/X8z_EyS2MYKdGl1hwnjVaAa3vxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.250.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e3:3b:ce:bc:cf:1b:26:68:05:8f:2f:a0:f5:71:c3:04:40:
         f2:e7:92:65:8a:d0:9e:6e:6e:2f:ee:8a:31:a9:d0:b3:44:bc:
         0f:56:26:d1:fc:11:0b:8c:ce:35:28:28:e4:14:03:8c:5a:5d:
         47:30:82:1e:06:3f:af:48:70:f4:9a:0b:1e:55:e4:c4:a9:9e:
         b2:02:77:eb:69:8b:9f:da:9d:b3:ce:07:a6:16:7a:0e:1a:53:
         72:97:57:4a:be:d6:b4:c3:df:f5:1e:53:b2:d4:ea:de:c8:48:
         f2:81:67:8d:64:f2:bf:41:11:5c:00:44:6a:5e:6e:75:7b:91:
         63:18:0c:d0:49:71:cf:72:ee:84:63:fe:e3:b0:a8:e9:e5:8d:
         bb:0b:b7:e3:d6:48:7b:7a:35:d3:ac:7d:34:c7:91:a3:ca:a5:
         34:0f:64:0e:03:96:a4:7d:e9:6b:b1:1b:c9:43:e8:fa:62:94:
         34:41:cc:bd:97:b9:cb:a6:29:a3:5f:af:f8:0d:40:d0:33:9d:
         61:e7:e4:66:e4:8d:77:c9:53:2f:69:69:cf:79:3a:4a:b0:7a:
         26:8a:8b:6b:25:25:9a:37:42:94:5a:21:2b:d5:67:64:31:11:
         60:fb:0a:1c:04:f3:3e:11:93:3a:1f:7c:b8:f3:d3:08:9b:04:
         0d:a9:39:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY4MlXIBj2viugVd9zfaRc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjMwMjA5MjIwMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmNjZmYxMzI0YjYzMTgyOWQxYTVkNjFjMjc4ZDU2ODA2YjdiZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWKaAeeFHWUN1mYGUR1xdcdh8xZh
6Svl1F6nYM3Fo0iVz9JEoeejJhZAaahyAx6cgDnBBCnXSF+XKuOIxzvLBOHsfQSC
3QTM+rq54LCFcoxNc5WweC/Usvz2uUb80FqbtsAbQNq1ZhMfa2hMwdRlO/sV022q
kh1BoltQhyRRfChCeY0V4hBiGSLhvd9LYg7SmjUPAyOgUjVXXhFb9xtpnpu6oYdU
KH0iae4dlF8lYMra4TGNGc6E9ADtARFjyErPZgmw52H6p0X5oK1WerwatPe0Sn6z
gNlnuhQ0I6TmCxihOybKXl5DmCHb6EL9zp5u/m0xG0cfsRfi5rVGJKN7/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/M/xMktjGCnRpdYcJ41WgGt78ZMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvWDh6X0V5UzJNWUtkR2wxaHdualZhQWEzdnhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvq7MA0G
CSqGSIb3DQEBCwUAA4IBAQBK4zvOvM8bJmgFjy+g9XHDBEDy55JlitCebm4v7oox
qdCzRLwPVibR/BELjM41KCjkFAOMWl1HMIIeBj+vSHD0mgseVeTEqZ6yAnfraYuf
2p2zzgemFnoOGlNyl1dKvta0w9/1HlOy1OreyEjygWeNZPK/QRFcAERqXm51e5Fj
GAzQSXHPcu6EY/7jsKjp5Y27C7fj1kh7ejXTrH00x5GjyqU0D2QOA5akfelrsRvJ
Q+j6YpQ0Qcy9l7nLpimjX6/4DUDQM51h5+Rm5I13yVMvaWnPeTpKsHomiotrJSWa
N0KUWiEr1WdkMRFg+wocBPM+EZM6H3y489MImwQNqTn/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:53 2024 by rpki-client on console-ams.rpki-client.org