Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/uQJMrTWTRfZOe6mo3aJ_T2Qdx4I.roa
File:                     uQJMrTWTRfZOe6mo3aJ_T2Qdx4I.roa (raw, json)
Hash identifier:          XW52N1w4EFvHzTg5Zh+cupFf6J/uvnzKrS12k9JAH1s=
Subject key identifier:   B9:02:4C:AD:35:93:45:F6:4E:7B:A9:A8:DD:A2:7F:4F:64:1D:C7:82
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       018C060A83FD7D6554E3EBE521E00F58E7AF
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/uQJMrTWTRfZOe6mo3aJ_T2Qdx4I.roa
Signing time:             Sat 25 Nov 2023 10:33:21 +0000
ROA not before:           Sat 25 Nov 2023 10:33:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203847
IP address blocks:        185.206.52.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sat 25 Nov 2023 10:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:06:0a:83:fd:7d:65:54:e3:eb:e5:21:e0:0f:58:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Nov 25 10:33:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9024cad359345f64e7ba9a8dda27f4f641dc782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:a8:fb:ef:ff:fb:0d:95:e9:35:17:be:38:
                    cb:7c:d0:6c:23:3e:72:f8:b5:d2:09:95:30:07:a0:
                    c2:62:26:9b:13:53:e1:63:0e:45:99:e8:e3:ad:ed:
                    d8:16:c9:87:bd:87:78:2d:c8:c7:99:bf:20:73:3c:
                    fc:01:0b:09:10:5a:33:55:f9:cc:b9:8c:6f:1d:f4:
                    08:21:7a:c2:c0:59:cb:e0:eb:07:e3:47:ad:a3:81:
                    06:00:2b:6c:b3:06:93:a6:02:17:34:af:5c:25:9c:
                    66:ed:67:f6:03:03:39:60:f1:68:a2:2b:cb:58:8e:
                    70:23:88:ab:77:12:11:bc:b8:6d:c3:ef:ba:84:b9:
                    52:ed:8a:27:35:6d:8f:0d:96:05:69:82:d5:91:34:
                    16:35:86:42:98:a1:64:2c:d4:82:48:12:73:92:1d:
                    cd:11:62:90:59:3b:d2:6d:cd:f0:0b:15:5c:23:7c:
                    0a:64:83:b5:ee:99:46:ba:d9:21:2f:c5:24:5b:2e:
                    48:f7:5e:a3:7a:82:e6:d4:5c:ef:9c:02:85:ca:1e:
                    6f:36:c4:38:f1:ab:19:f8:88:58:42:41:60:68:59:
                    d0:7e:3d:a9:18:50:fc:22:ac:6e:61:15:b2:d6:2c:
                    f9:3f:c6:fa:ba:d6:b0:1d:f0:31:f2:b2:6b:7b:f4:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:02:4C:AD:35:93:45:F6:4E:7B:A9:A8:DD:A2:7F:4F:64:1D:C7:82
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/uQJMrTWTRfZOe6mo3aJ_T2Qdx4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.206.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:3b:73:9a:8d:cc:cb:b0:d5:23:0f:52:fe:b0:ae:0f:51:
         53:5c:47:22:cc:0b:51:4e:2d:99:3a:a8:2b:2e:6d:1b:c1:e1:
         04:a7:6d:e7:4e:75:99:a5:04:9a:49:d7:e3:5c:6a:63:6b:fd:
         d4:9f:3c:02:26:b6:7a:99:c4:6f:b9:a9:09:ab:0a:1a:a2:33:
         a6:cf:56:3f:6b:de:17:81:be:2e:25:89:57:2d:63:09:18:46:
         25:1d:b8:e9:20:a2:23:dd:21:47:22:9f:9b:2b:2b:ff:c3:34:
         7a:35:a2:41:73:a8:cd:e1:14:b9:52:df:02:85:6c:ff:96:14:
         ec:96:1e:5e:f1:ca:35:7f:5e:02:fb:ca:62:96:26:14:f3:79:
         e9:13:8e:08:3e:4e:d0:e1:c4:cd:66:a9:fd:c0:aa:4e:9b:3d:
         fe:ac:88:1a:49:1d:88:e0:6e:03:ba:80:1b:6a:74:4e:dc:16:
         e7:6f:06:e2:18:8a:ea:76:f1:cd:a1:83:7a:78:f7:c2:01:be:
         5a:d5:10:6d:40:94:30:d5:ec:74:85:97:19:f7:e3:80:f4:c4:
         f1:2d:d0:f4:41:33:20:e2:a1:82:85:24:ef:0a:f5:4a:c8:07:
         0f:3a:35:61:c5:cc:86:e9:b8:77:8c:8c:51:5d:fd:cd:1b:b4:
         c5:97:a6:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwGCoP9fWVU4+vlIeAPWOevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx
YTE2MWUwHhcNMjMxMTI1MTAzMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTAyNGNhZDM1OTM0NWY2NGU3YmE5YThkZGEyN2Y0ZjY0MWRjNzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj52o++//+w2V6TUXvjjLfNBsIz5y
+LXSCZUwB6DCYiabE1PhYw5Fmejjre3YFsmHvYd4LcjHmb8gczz8AQsJEFozVfnM
uYxvHfQIIXrCwFnL4OsH40eto4EGACtsswaTpgIXNK9cJZxm7Wf2AwM5YPFooivL
WI5wI4irdxIRvLhtw++6hLlS7YonNW2PDZYFaYLVkTQWNYZCmKFkLNSCSBJzkh3N
EWKQWTvSbc3wCxVcI3wKZIO17plGutkhL8UkWy5I916jeoLm1FzvnAKFyh5vNsQ4
8asZ+IhYQkFgaFnQfj2pGFD8IqxuYRWy1iz5P8b6utawHfAx8rJre/RyFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkCTK01k0X2TnupqN2if09kHceCMB8GA1UdIwQY
MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt
MTNiOTExMGNlMjBjLzEvdVFKTXJUV1RSZlpPZTZtbzNhSl9UMlFkeDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj
LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuc40MA0G
CSqGSIb3DQEBCwUAA4IBAQA+pTtzmo3My7DVIw9S/rCuD1FTXEcizAtRTi2ZOqgr
Lm0bweEEp23nTnWZpQSaSdfjXGpja/3UnzwCJrZ6mcRvuakJqwoaojOmz1Y/a94X
gb4uJYlXLWMJGEYlHbjpIKIj3SFHIp+bKyv/wzR6NaJBc6jN4RS5Ut8ChWz/lhTs
lh5e8co1f14C+8piliYU83npE44IPk7Q4cTNZqn9wKpOmz3+rIgaSR2I4G4DuoAb
anRO3BbnbwbiGIrqdvHNoYN6ePfCAb5a1RBtQJQw1ex0hZcZ9+OA9MTxLdD0QTMg
4qGChSTvCvVKyAcPOjVhxcyG6bh3jIxRXf3NG7TFl6Zg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org