Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/Rq-lVEMyl8PHXFn53Ac8-BYAuMc.roa
File:                     Rq-lVEMyl8PHXFn53Ac8-BYAuMc.roa (raw, json)
Hash identifier:          7M6jSoYnoaH93VnIc/yGCJyXdPUgNm8ioqCi+Vdri4c=
Subject key identifier:   46:AF:A5:54:43:32:97:C3:C7:5C:59:F9:DC:07:3C:F8:16:00:B8:C7
Certificate issuer:       /CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Certificate serial:       0185E4A0AD0230464E192DAC026562B17950
Authority key identifier: 61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/Rq-lVEMyl8PHXFn53Ac8-BYAuMc.roa
Signing time:             Tue 24 Jan 2023 16:33:33 +0000
ROA not before:           Tue 24 Jan 2023 16:33:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136923
IP address blocks:        193.109.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 09:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e4:a0:ad:02:30:46:4e:19:2d:ac:02:65:62:b1:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616a7260f386561b4358ea50c03c5e343d6d0c33
        Validity
            Not Before: Jan 24 16:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46afa554433297c3c75c59f9dc073cf81600b8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:63:36:6a:12:51:38:71:33:1b:31:ab:6e:
                    fb:ef:48:8e:3a:d9:6c:89:18:ce:31:ae:02:bb:3c:
                    f3:9d:33:55:a6:63:96:a0:55:7f:92:6a:ea:0b:b8:
                    c4:32:26:96:3e:77:91:d0:74:13:7e:0e:7a:6a:90:
                    c0:f0:ed:49:40:ff:78:f5:d4:dd:89:5a:a8:b2:ed:
                    1a:40:59:61:ad:77:7a:a3:50:a4:74:36:f0:60:56:
                    2a:07:2e:11:86:39:10:7e:ac:ef:3c:af:22:92:4c:
                    7b:0a:c2:b0:67:2e:fa:23:80:aa:6b:6f:52:30:04:
                    d3:d4:d1:7b:82:23:9f:d6:3b:1b:46:18:66:35:c1:
                    a9:3a:ee:b2:88:06:6e:b3:b4:bc:77:c6:18:df:75:
                    d0:7d:04:fd:b2:ec:29:9f:6e:5f:ed:1d:31:cf:57:
                    3f:ac:65:09:f8:0a:1e:f6:1f:e1:9c:5b:24:da:7a:
                    dd:88:f0:a7:08:6f:5b:4c:4b:6a:5c:66:f4:87:5d:
                    22:ca:75:f6:71:6c:cb:1f:82:bf:8c:9a:a5:61:11:
                    5d:2d:02:2f:56:31:e1:cb:43:73:14:d4:a4:a9:be:
                    89:c0:75:0c:46:2b:f5:33:fd:bb:80:c3:d5:0e:cd:
                    12:47:c7:77:95:f3:93:ed:a6:33:c1:63:38:25:60:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AF:A5:54:43:32:97:C3:C7:5C:59:F9:DC:07:3C:F8:16:00:B8:C7
            X509v3 Authority Key Identifier:
                keyid:61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/Rq-lVEMyl8PHXFn53Ac8-BYAuMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:91:5b:b3:bf:e3:f4:8a:eb:c3:79:0c:69:d5:83:55:3e:a6:
         15:ce:70:15:c1:2c:81:3b:a6:d7:ab:e0:98:c6:db:cd:31:92:
         14:88:61:cd:80:a6:10:93:59:8f:76:48:dc:60:0e:93:6d:34:
         d2:f3:ec:49:95:34:70:22:bd:08:cb:ec:bb:9b:71:5d:5c:f6:
         86:46:f5:3a:72:d1:77:39:20:89:ec:b9:27:ad:cb:d2:19:42:
         27:f6:6d:21:cf:44:6c:0f:b5:bc:1b:09:43:b1:9e:cc:35:24:
         da:26:77:2e:74:31:bf:8b:5b:d2:20:39:70:48:0e:0c:52:28:
         21:68:cc:9f:c9:ea:ff:a3:69:fe:c8:5e:1f:50:59:ea:b4:a6:
         7f:1c:a3:4d:9b:76:2d:86:71:cb:d3:b4:fb:34:7d:b3:5b:55:
         f6:44:c8:ea:58:11:bb:11:57:3a:88:cf:d4:06:9f:c1:8f:8c:
         88:ba:52:76:d7:c2:e9:5c:fb:ef:fa:67:cd:b5:7a:07:cd:83:
         27:b1:7b:10:cc:f2:e3:8c:a1:f0:93:28:18:56:ee:3f:b7:25:
         6b:a0:a9:14:d9:cb:4c:2e:16:2a:c0:36:99:80:23:75:e8:db:
         60:dc:ec:d8:84:d8:66:a6:91:e9:b2:cf:c8:2a:98:08:58:cd:
         85:28:30:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXkoK0CMEZOGS2sAmVisXlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNmE3MjYwZjM4NjU2MWI0MzU4ZWE1MGMwM2M1ZTM0M2Q2
ZDBjMzMwHhcNMjMwMTI0MTYzMzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFmYTU1NDQzMzI5N2MzYzc1YzU5ZjlkYzA3M2NmODE2MDBiOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9djNmoSUThxMxsxq27770iOOtls
iRjOMa4CuzzznTNVpmOWoFV/kmrqC7jEMiaWPneR0HQTfg56apDA8O1JQP949dTd
iVqosu0aQFlhrXd6o1CkdDbwYFYqBy4RhjkQfqzvPK8ikkx7CsKwZy76I4Cqa29S
MATT1NF7giOf1jsbRhhmNcGpOu6yiAZus7S8d8YY33XQfQT9suwpn25f7R0xz1c/
rGUJ+Aoe9h/hnFsk2nrdiPCnCG9bTEtqXGb0h10iynX2cWzLH4K/jJqlYRFdLQIv
VjHhy0NzFNSkqb6JwHUMRiv1M/27gMPVDs0SR8d3lfOT7aYzwWM4JWDZfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEavpVRDMpfDx1xZ+dwHPPgWALjHMB8GA1UdIwQY
MBaAFGFqcmDzhlYbQ1jqUMA8XjQ9bQwzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdweVlQT0dWaHREV09wUXdEeGVORDF0RERNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82NzY2OGEtMjFlNS00OTU0LWFhMjct
YzBlM2M5MDcyMDYyLzEvUnEtbFZFTXlsOFBIWEZuNTNBYzgtQllBdU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82NzY2OGEtMjFlNS00OTU0LWFhMjctYzBlM2M5MDcyMDYy
LzEvWVdweVlQT0dWaHREV09wUXdEeGVORDF0RERNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW1SMA0G
CSqGSIb3DQEBCwUAA4IBAQBQkVuzv+P0iuvDeQxp1YNVPqYVznAVwSyBO6bXq+CY
xtvNMZIUiGHNgKYQk1mPdkjcYA6TbTTS8+xJlTRwIr0Iy+y7m3FdXPaGRvU6ctF3
OSCJ7LknrcvSGUIn9m0hz0RsD7W8GwlDsZ7MNSTaJncudDG/i1vSIDlwSA4MUigh
aMyfyer/o2n+yF4fUFnqtKZ/HKNNm3YthnHL07T7NH2zW1X2RMjqWBG7EVc6iM/U
Bp/Bj4yIulJ218LpXPvv+mfNtXoHzYMnsXsQzPLjjKHwkygYVu4/tyVroKkU2ctM
LhYqwDaZgCN16Ntg3OzYhNhmppHpss/IKpgIWM2FKDAV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-fra.rpki-client.org