Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/Sy00jZuB2fR_9Fq4lBCWfkhvoBs.roa
File:                     Sy00jZuB2fR_9Fq4lBCWfkhvoBs.roa (raw, json)
Hash identifier:          +HYH3lB/i1Zn8PQjvIHWpuxn+Q5E73B7/0GxEs5LOi4=
Subject key identifier:   4B:2D:34:8D:9B:81:D9:F4:7F:F4:5A:B8:94:10:96:7E:48:6F:A0:1B
Certificate issuer:       /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial:       01856EA69F858C3BE9337FF4846F5D976DB3
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/Sy00jZuB2fR_9Fq4lBCWfkhvoBs.roa
Signing time:             Sun 01 Jan 2023 18:44:51 +0000
ROA not before:           Sun 01 Jan 2023 18:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34984
IP address blocks:        185.99.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Jan 2023 13:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:9f:85:8c:3b:e9:33:7f:f4:84:6f:5d:97:6d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
        Validity
            Not Before: Jan  1 18:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b2d348d9b81d9f47ff45ab89410967e486fa01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:62:13:8b:34:c3:d3:e1:0d:44:6d:1f:0f:44:
                    e9:c6:19:1b:1b:da:8e:ff:0f:cf:f6:df:02:2e:38:
                    e9:8d:58:dc:a2:b8:45:29:9f:f2:e0:99:1f:c4:65:
                    f3:14:10:44:d9:d7:05:6b:42:ab:dc:17:82:a9:fc:
                    32:06:40:e6:f1:56:03:eb:7d:78:bd:9d:bb:07:83:
                    c1:1d:fa:b7:ab:a1:98:26:21:35:76:79:24:eb:5d:
                    27:1a:80:1a:c2:3e:57:1e:66:35:e5:66:c2:11:1e:
                    fd:35:d1:c9:7e:82:f5:65:2e:35:95:7f:c8:57:e0:
                    86:29:d3:67:5c:18:2e:da:27:02:3e:d7:c2:63:81:
                    98:7a:f3:9a:f6:87:fa:3e:09:a5:fe:1e:86:cb:23:
                    e3:9b:5c:8f:e3:cb:c9:ba:a8:ff:09:fd:6a:35:59:
                    51:b1:17:aa:66:7b:14:db:cd:1e:26:86:08:46:1c:
                    7c:f6:0c:a2:0e:2e:66:74:bb:23:f7:54:f7:b3:57:
                    dd:b0:23:a3:de:86:ed:7b:7e:36:75:bc:0f:ce:fe:
                    3b:13:f4:6c:c1:6a:ee:80:90:c1:01:bc:02:08:3d:
                    e7:9b:85:4a:a7:a3:8a:18:1f:2c:d8:ea:17:ca:dd:
                    3b:79:84:a4:10:00:3b:25:3b:db:4f:7b:10:4f:e2:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2D:34:8D:9B:81:D9:F4:7F:F4:5A:B8:94:10:96:7E:48:6F:A0:1B
            X509v3 Authority Key Identifier:
                keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/Sy00jZuB2fR_9Fq4lBCWfkhvoBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.99.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:1b:8c:86:98:e7:9a:4b:5e:14:4d:85:3b:7b:3a:6e:ce:
         2c:92:56:8a:24:9a:7e:5e:26:99:ae:50:3b:33:bc:76:63:74:
         2b:3b:71:47:1a:33:46:79:31:58:1e:a6:8b:71:20:13:58:bf:
         4c:a9:90:b8:4d:a2:26:35:d2:62:d6:93:33:5e:0b:b9:8d:f5:
         34:1a:19:2b:14:93:e9:a7:5a:d3:43:87:96:cc:0f:f9:6d:c3:
         1a:18:1d:e5:86:93:2e:87:49:30:47:72:62:db:ce:88:01:b2:
         01:af:83:8b:7a:69:ef:68:de:d7:60:35:c1:b6:92:6a:a0:dc:
         0b:b9:0f:6b:4b:6f:35:05:44:97:c0:fe:17:92:a2:7c:d1:21:
         c2:ee:9c:ed:b4:54:ca:d1:17:4b:41:e2:48:8c:3f:fd:f4:fb:
         a2:71:47:32:92:13:75:5e:9b:20:a2:8f:25:f1:d9:d9:94:66:
         b7:ad:92:42:00:63:99:44:09:23:1f:80:cc:d5:43:a5:77:bf:
         20:12:d4:f7:12:66:5c:5f:71:1b:c1:ac:b3:d2:4e:1b:b8:d4:
         5d:73:7e:06:a0:4a:d0:2f:83:78:d5:5f:8f:a5:e9:f9:db:63:
         97:8d:75:39:05:35:90:0e:0b:fb:18:3a:93:d6:4d:96:ee:11:
         f7:da:42:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupp+FjDvpM3/0hG9dl22zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjMwMTAxMTg0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjJkMzQ4ZDliODFkOWY0N2ZmNDVhYjg5NDEwOTY3ZTQ4NmZhMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWITizTD0+ENRG0fD0TpxhkbG9qO
/w/P9t8CLjjpjVjcorhFKZ/y4JkfxGXzFBBE2dcFa0Kr3BeCqfwyBkDm8VYD6314
vZ27B4PBHfq3q6GYJiE1dnkk610nGoAawj5XHmY15WbCER79NdHJfoL1ZS41lX/I
V+CGKdNnXBgu2icCPtfCY4GYevOa9of6Pgml/h6GyyPjm1yP48vJuqj/Cf1qNVlR
sReqZnsU280eJoYIRhx89gyiDi5mdLsj91T3s1fdsCOj3obte342dbwPzv47E/Rs
wWrugJDBAbwCCD3nm4VKp6OKGB8s2OoXyt07eYSkEAA7JTvbT3sQT+Je/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEstNI2bgdn0f/RauJQQln5Ib6AbMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvU3kwMGpadUIyZlJfOUZxNGxCQ1dma2h2b0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWMWMA0G
CSqGSIb3DQEBCwUAA4IBAQBdQRuMhpjnmkteFE2FO3s6bs4sklaKJJp+XiaZrlA7
M7x2Y3QrO3FHGjNGeTFYHqaLcSATWL9MqZC4TaImNdJi1pMzXgu5jfU0GhkrFJPp
p1rTQ4eWzA/5bcMaGB3lhpMuh0kwR3Ji286IAbIBr4OLemnvaN7XYDXBtpJqoNwL
uQ9rS281BUSXwP4XkqJ80SHC7pzttFTK0RdLQeJIjD/99PuicUcykhN1Xpsgoo8l
8dnZlGa3rZJCAGOZRAkjH4DM1UOld78gEtT3EmZcX3Ebwayz0k4buNRdc34GoErQ
L4N41V+Ppen522OXjXU5BTWQDgv7GDqT1k2W7hH32kJe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:29 2024 by rpki-client on console-ams.rpki-client.org