Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/_2I5vU3H1ERwbT3aYOxHQzg3s7E.roa
File:                     _2I5vU3H1ERwbT3aYOxHQzg3s7E.roa (raw, json)
Hash identifier:          E8Ku5n/YFnNfWXtAYelTRvMV515ojpf1TyzkI8SPh9w=
Subject key identifier:   FF:62:39:BD:4D:C7:D4:44:70:6D:3D:DA:60:EC:47:43:38:37:B3:B1
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       018571BA1ABDC8C17A2C34CF6352870BE90A
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/_2I5vU3H1ERwbT3aYOxHQzg3s7E.roa
Signing time:             Mon 02 Jan 2023 09:04:59 +0000
ROA not before:           Mon 02 Jan 2023 09:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64404
IP address blocks:        94.45.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:ba:1a:bd:c8:c1:7a:2c:34:cf:63:52:87:0b:e9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Jan  2 09:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff6239bd4dc7d444706d3dda60ec47433837b3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:85:b1:40:17:15:0e:13:90:99:91:a7:22:
                    15:90:e1:90:8b:6a:dc:9c:aa:a2:95:fb:60:92:c9:
                    57:e0:cd:30:e3:5c:9a:db:0e:6a:be:23:59:ae:a6:
                    42:d7:c7:74:f3:fe:ff:1b:84:1b:8a:b6:33:96:3d:
                    d2:ad:cc:c5:41:2c:f0:4b:01:f4:88:31:65:cf:10:
                    7a:f6:6d:00:33:5b:73:66:20:2b:11:f7:4e:0f:37:
                    da:05:c0:d7:74:6c:7f:29:1c:d4:62:c6:b0:78:1b:
                    24:2c:83:ec:52:8d:a1:fc:23:19:47:e8:92:d2:ec:
                    b9:17:cf:81:c6:52:a5:bd:b3:11:60:df:ad:81:97:
                    bb:5a:07:ec:5f:93:22:bc:3a:d6:47:4e:91:43:2e:
                    01:58:3e:2d:fa:03:9d:80:15:e5:75:80:d4:0d:a5:
                    3f:9b:c9:49:fa:89:a7:fd:96:b7:c6:65:4a:ed:72:
                    1e:01:d9:8e:ab:ed:09:6d:50:00:93:ae:a6:23:de:
                    1b:ec:25:f6:09:92:18:70:b2:55:7b:5d:48:6f:90:
                    b1:0b:7c:ff:62:07:51:16:84:ac:33:28:95:84:32:
                    49:db:62:bc:2d:0a:3b:ea:95:33:47:bd:34:2a:c9:
                    56:5d:9a:63:35:66:f7:5f:3c:91:e7:43:ea:54:8c:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:62:39:BD:4D:C7:D4:44:70:6D:3D:DA:60:EC:47:43:38:37:B3:B1
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/_2I5vU3H1ERwbT3aYOxHQzg3s7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:85:17:c1:ac:7b:3e:dd:58:e3:78:77:e1:41:a7:47:38:
         8d:48:de:b1:26:b6:90:58:14:ee:7d:8a:1f:e2:73:be:d4:1a:
         7a:6e:ec:4b:5d:37:ea:72:cd:58:c0:09:79:a3:ef:00:ee:95:
         86:15:6d:a2:47:d9:a9:96:ce:76:03:c7:74:67:3b:f5:5d:e2:
         dc:48:42:67:c5:6f:53:e2:3c:66:31:9a:11:f0:45:a8:d1:91:
         6e:30:b2:87:47:03:65:4e:c7:d5:ae:4d:cb:33:70:0b:bb:9e:
         34:ed:fa:28:2a:00:44:f9:e5:e8:38:23:ed:78:35:5b:93:c7:
         17:21:67:ad:4e:34:7a:bc:ce:a5:a8:3b:6c:4c:0f:ef:73:b5:
         2e:0c:f4:a4:87:97:63:03:4f:b4:d6:ee:26:9b:a2:84:b8:4f:
         df:74:72:c6:98:fb:ab:e9:5b:87:a3:3b:6c:41:67:55:14:a6:
         26:3f:3d:1f:80:98:f6:26:98:1c:70:49:6d:78:e1:8c:8f:04:
         fc:cd:6a:18:f4:6f:12:1d:fb:f6:36:00:9c:d9:2f:6b:41:20:
         70:ec:a4:d4:fd:ce:97:5a:ce:c0:88:e0:a4:17:86:ae:fc:af:
         a7:d1:de:04:30:a6:ee:47:74:1e:27:aa:a2:8c:8c:af:ed:08:
         37:a8:be:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxuhq9yMF6LDTPY1KHC+kKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDc5YzQyOWE3MTQ2ZjFmOWFhMDQ5YmRiNDJjYTk1MTQ0
Yjc0ZGEwHhcNMjMwMTAyMDkwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjYyMzliZDRkYzdkNDQ0NzA2ZDNkZGE2MGVjNDc0MzM4MzdiM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSOFsUAXFQ4TkJmRpyIVkOGQi2rc
nKqilftgkslX4M0w41ya2w5qviNZrqZC18d08/7/G4QbirYzlj3SrczFQSzwSwH0
iDFlzxB69m0AM1tzZiArEfdODzfaBcDXdGx/KRzUYsaweBskLIPsUo2h/CMZR+iS
0uy5F8+BxlKlvbMRYN+tgZe7WgfsX5MivDrWR06RQy4BWD4t+gOdgBXldYDUDaU/
m8lJ+omn/Za3xmVK7XIeAdmOq+0JbVAAk66mI94b7CX2CZIYcLJVe11Ib5CxC3z/
YgdRFoSsMyiVhDJJ22K8LQo76pUzR700KslWXZpjNWb3XzyR50PqVIxuYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9iOb1Nx9REcG092mDsR0M4N7OxMB8GA1UdIwQY
MBaAFAYHnEKacUbx+aoEm9tCypUUS3TaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEt
YTJmOWE4YTUxYmIwLzEvXzJJNXZVM0gxRVJ3YlQzYVlPeEhRemczczdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83NDA1ODktODVjZC00OTdhLTkwYzEtYTJmOWE4YTUxYmIw
LzEvQmdlY1FwcHhSdkg1cWdTYjIwTEtsUlJMZE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXi3gMA0G
CSqGSIb3DQEBCwUAA4IBAQAcUoUXwax7Pt1Y43h34UGnRziNSN6xJraQWBTufYof
4nO+1Bp6buxLXTfqcs1YwAl5o+8A7pWGFW2iR9mpls52A8d0Zzv1XeLcSEJnxW9T
4jxmMZoR8EWo0ZFuMLKHRwNlTsfVrk3LM3ALu5407fooKgBE+eXoOCPteDVbk8cX
IWetTjR6vM6lqDtsTA/vc7UuDPSkh5djA0+01u4mm6KEuE/fdHLGmPur6VuHozts
QWdVFKYmPz0fgJj2JpgccElteOGMjwT8zWoY9G8SHfv2NgCc2S9rQSBw7KTU/c6X
Ws7AiOCkF4au/K+n0d4EMKbuR3QeJ6qijIyv7Qg3qL4/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:07 2024 by rpki-client on console-ams.rpki-client.org