Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/zGIY2nf-q61XajMBT-1Q0ZftkpE.roa
File:                     zGIY2nf-q61XajMBT-1Q0ZftkpE.roa (raw, json)
Hash identifier:          EcoGJULNGNQL5jxI4vm6EAiMMBBtPQyQkmJeYkYHiRg=
Subject key identifier:   CC:62:18:DA:77:FE:AB:AD:57:6A:33:01:4F:ED:50:D1:97:ED:92:91
Certificate issuer:       /CN=ba3c124548e2bdf66110264ce97ea4fa231f30d6
Certificate serial:       018CC94D792393E29341D52E539978B03EE1
Authority key identifier: BA:3C:12:45:48:E2:BD:F6:61:10:26:4C:E9:7E:A4:FA:23:1F:30:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ujwSRUjivfZhECZM6X6k-iMfMNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/zGIY2nf-q61XajMBT-1Q0ZftkpE.roa
Signing time:             Tue 02 Jan 2024 08:32:26 +0000
ROA not before:           Tue 02 Jan 2024 08:32:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51202
IP address blocks:        91.218.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 08 Jun 2024 13:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:79:23:93:e2:93:41:d5:2e:53:99:78:b0:3e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba3c124548e2bdf66110264ce97ea4fa231f30d6
        Validity
            Not Before: Jan  2 08:32:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cc6218da77feabad576a33014fed50d197ed9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:34:93:a3:d3:d0:7d:42:8f:b8:28:a6:ce:57:
                    16:87:25:d1:df:d4:be:95:3b:17:60:ef:b3:4b:5a:
                    84:e0:fd:2a:7b:e4:37:b6:bf:a0:d6:6f:41:a7:33:
                    d7:5d:d2:c0:80:cf:6c:23:72:4f:c2:3a:4f:98:7f:
                    3b:59:89:e9:52:10:94:7d:09:25:c8:89:e8:e1:ab:
                    0e:35:33:a7:38:7f:1e:88:e5:dc:c6:63:4c:65:3b:
                    f0:c5:b1:ab:e9:16:7a:83:51:33:fe:3d:91:12:63:
                    af:3c:59:9a:cb:25:35:1c:17:ef:c8:3b:14:4c:3f:
                    14:32:28:fd:3d:10:03:50:f7:3f:cf:7a:dd:37:98:
                    ff:e4:5d:5b:74:c3:72:21:8e:af:1f:14:04:ab:92:
                    ba:6a:09:50:d3:6f:43:03:24:a4:86:95:11:1b:c8:
                    cf:b3:72:7e:89:5d:2f:e3:56:f3:03:62:ee:0a:5c:
                    46:38:55:7f:74:a5:5d:f7:4d:57:32:d8:85:4c:fc:
                    f7:da:ac:e0:e6:48:41:c5:29:21:a9:95:5d:a1:d2:
                    a4:ca:50:d5:f4:d3:86:87:8a:1c:37:12:93:5d:62:
                    26:28:44:43:9a:d0:2b:73:cf:f7:c5:bf:3a:17:51:
                    78:f2:1e:d0:b4:ea:38:3a:9e:1e:37:2a:86:c6:a7:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:18:DA:77:FE:AB:AD:57:6A:33:01:4F:ED:50:D1:97:ED:92:91
            X509v3 Authority Key Identifier:
                keyid:BA:3C:12:45:48:E2:BD:F6:61:10:26:4C:E9:7E:A4:FA:23:1F:30:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujwSRUjivfZhECZM6X6k-iMfMNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/zGIY2nf-q61XajMBT-1Q0ZftkpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/184099-35fe-43d6-a9b6-f76a87222ed0/1/ujwSRUjivfZhECZM6X6k-iMfMNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.218.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:f0:d6:86:d6:d2:69:da:b7:2a:52:f9:c4:7d:70:b7:f0:
         5e:17:74:ae:3b:b7:f2:cb:8a:3e:82:7f:80:37:eb:09:f8:37:
         3f:69:bd:22:f9:56:b2:63:8f:14:79:37:b4:33:a5:3a:ac:f1:
         ba:92:25:c6:c2:5e:00:44:e7:55:61:55:54:be:a1:31:55:41:
         b1:7d:3d:c0:c7:b7:01:58:56:9d:c0:04:b5:78:5a:b7:56:35:
         f2:5e:aa:29:36:da:97:b1:d2:50:0e:f7:87:7c:b3:4b:bd:bf:
         66:b2:d5:c3:a5:8a:67:55:e9:59:4c:c0:8e:b9:66:b2:94:15:
         4e:f6:d8:07:f5:b2:5e:1a:3a:44:63:80:9f:f3:27:62:8f:ea:
         b9:53:db:d2:58:fc:cb:c9:31:d7:92:83:92:d1:89:ed:27:2c:
         56:36:cb:d8:74:b9:9b:09:68:91:9e:b5:fa:fe:7a:2b:9f:d1:
         f5:b3:38:2f:a5:b1:ba:8f:2a:1b:49:d2:49:19:78:26:9c:5c:
         43:19:e1:dd:df:5b:2d:7c:ef:55:8c:90:13:d9:be:7a:c7:58:
         56:85:bb:d9:16:af:14:45:14:b6:9a:40:ac:7f:ec:ee:3d:fe:
         80:77:e7:ec:87:c9:f1:a0:3a:f4:66:60:4a:ed:7c:30:7c:ea:
         49:aa:7e:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTXkjk+KTQdUuU5l4sD7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhM2MxMjQ1NDhlMmJkZjY2MTEwMjY0Y2U5N2VhNGZhMjMx
ZjMwZDYwHhcNMjQwMTAyMDgzMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzYyMThkYTc3ZmVhYmFkNTc2YTMzMDE0ZmVkNTBkMTk3ZWQ5MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSTo9PQfUKPuCimzlcWhyXR39S+
lTsXYO+zS1qE4P0qe+Q3tr+g1m9BpzPXXdLAgM9sI3JPwjpPmH87WYnpUhCUfQkl
yIno4asONTOnOH8eiOXcxmNMZTvwxbGr6RZ6g1Ez/j2REmOvPFmayyU1HBfvyDsU
TD8UMij9PRADUPc/z3rdN5j/5F1bdMNyIY6vHxQEq5K6aglQ029DAySkhpURG8jP
s3J+iV0v41bzA2LuClxGOFV/dKVd901XMtiFTPz32qzg5khBxSkhqZVdodKkylDV
9NOGh4ocNxKTXWImKERDmtArc8/3xb86F1F48h7QtOo4Op4eNyqGxqfxCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMxiGNp3/qutV2ozAU/tUNGX7ZKRMB8GA1UdIwQY
MBaAFLo8EkVI4r32YRAmTOl+pPojHzDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWp3U1JVaml2ZlpoRUNaTTZYNmstaU1mTU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODQwOTktMzVmZS00M2Q2LWE5YjYt
Zjc2YTg3MjIyZWQwLzEvekdJWTJuZi1xNjFYYWpNQlQtMVEwWmZ0a3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODQwOTktMzVmZS00M2Q2LWE5YjYtZjc2YTg3MjIyZWQw
LzEvdWp3U1JVaml2ZlpoRUNaTTZYNmstaU1mTU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9oAMA0G
CSqGSIb3DQEBCwUAA4IBAQBvkfDWhtbSadq3KlL5xH1wt/BeF3SuO7fyy4o+gn+A
N+sJ+Dc/ab0i+VayY48UeTe0M6U6rPG6kiXGwl4AROdVYVVUvqExVUGxfT3Ax7cB
WFadwAS1eFq3VjXyXqopNtqXsdJQDveHfLNLvb9mstXDpYpnVelZTMCOuWaylBVO
9tgH9bJeGjpEY4Cf8ydij+q5U9vSWPzLyTHXkoOS0YntJyxWNsvYdLmbCWiRnrX6
/norn9H1szgvpbG6jyobSdJJGXgmnFxDGeHd31stfO9VjJAT2b56x1hWhbvZFq8U
RRS2mkCsf+zuPf6Ad+fsh8nxoDr0ZmBK7XwwfOpJqn73
Generated at Sat Jun 8 15:42:05 2024 by rpki-client on console-fra.rpki-client.org