Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eE3eD0BSpgo2gkAx-A6wQjGjGfs.roa
File:                     eE3eD0BSpgo2gkAx-A6wQjGjGfs.roa (raw, json)
Hash identifier:          7A3Lb0ecKHs0DNth14kzswZ6VLdm5lwvpbF8gjZ+XsA=
Subject key identifier:   78:4D:DE:0F:40:52:A6:0A:36:82:40:31:F8:0E:B0:42:31:A3:19:FB
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0187199F5B512C92687EDB67BF145419AD72
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eE3eD0BSpgo2gkAx-A6wQjGjGfs.roa
Signing time:             Sat 25 Mar 2023 16:34:46 +0000
ROA not before:           Sat 25 Mar 2023 16:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212835
IP address blocks:        185.243.48.0/24 maxlen: 24
                          178.239.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:19:9f:5b:51:2c:92:68:7e:db:67:bf:14:54:19:ad:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Mar 25 16:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=784dde0f4052a60a36824031f80eb04231a319fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:79:20:9a:57:be:61:7c:ca:34:80:06:57:ac:
                    ff:f0:53:cd:e3:7f:f4:3e:49:b8:08:6b:82:19:e7:
                    ec:ab:4b:f1:51:79:57:fb:fe:0d:37:c3:03:39:22:
                    d3:20:2d:20:9c:32:9c:b8:4d:cd:a6:69:bf:f8:96:
                    00:1c:4b:d1:84:f7:7a:c7:96:28:a9:86:9d:5b:83:
                    0e:86:06:94:60:57:24:5d:a1:0b:3a:d1:83:0f:62:
                    04:00:49:9d:63:b6:52:9d:61:36:b1:33:5c:e3:86:
                    72:89:c0:1a:bb:3c:54:ca:86:0e:fa:91:3a:83:76:
                    ab:ac:fc:07:fb:71:63:ef:1a:ca:96:86:ec:37:9b:
                    e4:82:4a:25:49:b3:5f:12:0a:4f:20:48:b4:81:fb:
                    cd:c2:65:9d:8a:94:94:22:9d:01:72:0f:7d:61:08:
                    6d:ac:91:2c:39:1a:38:76:93:16:b7:ca:7c:32:44:
                    21:b1:e5:fe:6f:52:4d:69:b3:0f:9f:2a:07:61:b0:
                    ba:ca:e7:4d:9f:4a:e6:9a:e4:09:8a:69:e3:28:3c:
                    54:da:49:eb:e3:f3:68:62:57:af:4d:50:93:dd:ea:
                    36:ee:38:db:d6:3f:16:c2:c2:4a:37:25:a1:a5:ec:
                    8e:61:c2:ca:e3:60:1d:f5:e1:f9:f4:68:4e:86:82:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:DE:0F:40:52:A6:0A:36:82:40:31:F8:0E:B0:42:31:A3:19:FB
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/eE3eD0BSpgo2gkAx-A6wQjGjGfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.154.0/24
                  185.243.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:21:66:90:c4:9a:92:46:90:b3:79:bb:ba:94:c5:91:c5:
         fb:0f:48:af:c4:2c:d1:13:2c:e4:db:3c:3c:a2:02:52:0a:d4:
         84:24:3c:c4:83:44:3d:a4:08:9c:a6:93:5f:ff:c9:86:44:eb:
         b3:1b:13:aa:23:e7:5c:9f:40:a6:90:e4:68:18:63:7e:ac:1e:
         45:8c:96:78:ad:4f:d5:13:f3:1e:7d:c4:4b:3c:97:17:eb:8d:
         64:2d:6d:57:03:96:17:f2:2d:96:18:e5:d0:7d:61:61:7a:4c:
         52:c7:49:18:77:11:80:03:ea:ba:78:cd:2b:ee:70:5c:f0:40:
         ae:3b:64:f8:99:55:a2:53:82:9f:00:b5:ae:96:90:0c:43:53:
         e0:90:f2:40:ee:28:a4:94:31:0b:cf:a7:ea:17:fc:b8:e0:24:
         fb:1b:eb:67:9b:9e:ad:59:5c:71:84:e7:9d:e4:5b:84:57:85:
         c4:97:ca:f9:b1:63:19:40:0a:83:90:05:6f:ba:3b:8d:48:1d:
         12:29:17:5b:aa:da:2a:3c:37:b1:0d:a1:a5:8b:ce:68:94:0b:
         11:bd:20:dc:8c:bb:1e:86:1c:35:66:79:52:92:62:61:2d:79:
         61:01:ed:ec:6e:91:cd:4d:83:3a:21:51:f8:52:10:32:f3:64:
         00:e0:ec:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYcZn1tRLJJofttnvxRUGa1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMzI1MTYzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODRkZGUwZjQwNTJhNjBhMzY4MjQwMzFmODBlYjA0MjMxYTMxOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHkgmle+YXzKNIAGV6z/8FPN43/0
Pkm4CGuCGefsq0vxUXlX+/4NN8MDOSLTIC0gnDKcuE3Npmm/+JYAHEvRhPd6x5Yo
qYadW4MOhgaUYFckXaELOtGDD2IEAEmdY7ZSnWE2sTNc44ZyicAauzxUyoYO+pE6
g3arrPwH+3Fj7xrKlobsN5vkgkolSbNfEgpPIEi0gfvNwmWdipSUIp0Bcg99YQht
rJEsORo4dpMWt8p8MkQhseX+b1JNabMPnyoHYbC6yudNn0rmmuQJimnjKDxU2knr
4/NoYlevTVCT3eo27jjb1j8WwsJKNyWhpeyOYcLK42Ad9eH59GhOhoIyiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhN3g9AUqYKNoJAMfgOsEIxoxn7MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvZUUzZUQwQlNwZ28yZ2tBeC1BNndRakdqR2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsu+aAwQA
ufMwMA0GCSqGSIb3DQEBCwUAA4IBAQBIXiFmkMSakkaQs3m7upTFkcX7D0ivxCzR
Eyzk2zw8ogJSCtSEJDzEg0Q9pAicppNf/8mGROuzGxOqI+dcn0CmkORoGGN+rB5F
jJZ4rU/VE/MefcRLPJcX641kLW1XA5YX8i2WGOXQfWFhekxSx0kYdxGAA+q6eM0r
7nBc8ECuO2T4mVWiU4KfALWulpAMQ1PgkPJA7iiklDELz6fqF/y44CT7G+tnm56t
WVxxhOed5FuEV4XEl8r5sWMZQAqDkAVvujuNSB0SKRdbqtoqPDexDaGli85olAsR
vSDcjLsehhw1ZnlSkmJhLXlhAe3sbpHNTYM6IVH4UhAy82QA4OxT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org