Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa
File:                     056RA_agtdf1EzzGo8bh4to-TD4.roa (raw, json)
Hash identifier:          Jh5ui/RWq/EH0vqmWzDU5R6OshIz7KbtqFZJoBMQihs=
Subject key identifier:   D3:9E:91:03:F6:A0:B5:D7:F5:13:3C:C6:A3:C6:E1:E2:DA:3E:4C:3E
Certificate issuer:       /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial:       0185729EE4A00C0700AAD092C2AD6FC54B30
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa
Signing time:             Mon 02 Jan 2023 13:14:53 +0000
ROA not before:           Mon 02 Jan 2023 13:14:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5610
IP address blocks:        195.5.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:e4:a0:0c:07:00:aa:d0:92:c2:ad:6f:c5:4b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
        Validity
            Not Before: Jan  2 13:14:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d39e9103f6a0b5d7f5133cc6a3c6e1e2da3e4c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:66:d2:29:fe:80:f9:58:eb:19:b7:7a:96:90:
                    64:9f:65:1c:75:37:85:9f:56:e9:c4:a0:10:72:06:
                    89:50:ae:06:28:1e:ba:01:a4:8f:78:82:5c:2c:79:
                    a7:4a:e4:a7:36:91:7c:0a:1b:fc:3f:a6:3b:e3:3c:
                    63:43:17:de:5c:bf:6a:4b:fa:9a:e3:d8:6a:41:5b:
                    78:0e:78:9a:9b:58:f7:4c:43:3e:5e:c8:b2:9a:d3:
                    b2:72:a2:4a:97:95:40:30:05:9a:f0:17:60:e8:c1:
                    48:c2:be:9e:8d:e3:17:c1:77:6c:6a:2c:48:44:42:
                    85:95:61:22:a6:46:fb:b4:de:5c:e5:20:ca:76:26:
                    ca:16:92:e2:83:ab:62:fb:25:03:f4:1d:94:be:46:
                    be:ce:3a:e2:04:82:a7:b4:88:36:b5:ac:8d:09:0c:
                    7e:80:77:4b:7c:8a:6f:5e:56:1b:fe:c8:b2:41:c5:
                    41:78:cb:e9:92:d2:02:ad:c4:24:b0:56:75:be:2c:
                    83:1e:19:75:6d:9c:96:46:aa:f2:a7:33:9a:ec:9b:
                    b6:5e:6e:de:80:c3:3f:dd:b0:37:d8:53:a2:bd:c3:
                    cc:d5:ba:b5:8e:f2:aa:aa:69:78:3e:4a:6d:47:82:
                    5a:3c:a0:6d:e6:be:8b:af:0f:e4:a0:15:0d:f5:37:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:91:03:F6:A0:B5:D7:F5:13:3C:C6:A3:C6:E1:E2:DA:3E:4C:3E
            X509v3 Authority Key Identifier:
                keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/056RA_agtdf1EzzGo8bh4to-TD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:3b:fe:34:83:a2:34:05:6b:ce:95:74:bd:eb:5e:ba:21:
         1c:21:74:b9:a0:d1:b1:2d:01:9c:d9:ab:75:f4:b7:7a:94:3b:
         a5:df:8c:4d:c6:3a:75:7e:3f:1a:be:df:d2:d9:30:53:b4:8f:
         53:2d:63:7d:eb:ca:45:3f:c3:ed:c2:ea:e4:69:5c:5f:ad:72:
         98:64:10:74:c3:30:0c:d6:a4:fa:ff:61:32:80:05:ce:23:9c:
         24:69:b7:d7:09:a0:50:61:dc:e4:96:92:3d:d4:01:ec:38:bb:
         4f:b7:bc:f6:5f:9e:68:e7:08:80:81:63:a6:e0:e1:81:ca:9b:
         96:58:93:22:16:c5:bc:a7:ee:2a:4d:49:fa:0e:77:68:47:44:
         c4:a5:9d:f0:e6:43:7b:6c:5a:60:8e:72:74:f9:86:3e:49:32:
         b7:ef:d0:0b:5b:e9:2b:21:95:ea:f7:10:8b:fa:53:bf:bf:80:
         17:36:5d:bb:68:d0:d1:60:b4:c6:b9:04:b8:f2:a6:2c:bd:97:
         7a:dc:64:05:67:fd:23:37:86:44:11:9e:4b:c1:57:62:03:66:
         c7:ef:46:2d:92:39:cb:56:0e:34:7f:54:80:21:12:ed:41:ce:
         75:13:cc:8e:7a:b7:b5:bd:85:78:6c:59:85:2d:d9:76:85:09:
         27:58:49:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVynuSgDAcAqtCSwq1vxUswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh
MGZmNDMwHhcNMjMwMTAyMTMxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzllOTEwM2Y2YTBiNWQ3ZjUxMzNjYzZhM2M2ZTFlMmRhM2U0YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2bSKf6A+VjrGbd6lpBkn2UcdTeF
n1bpxKAQcgaJUK4GKB66AaSPeIJcLHmnSuSnNpF8Chv8P6Y74zxjQxfeXL9qS/qa
49hqQVt4Dniam1j3TEM+XsiymtOycqJKl5VAMAWa8Bdg6MFIwr6ejeMXwXdsaixI
REKFlWEipkb7tN5c5SDKdibKFpLig6ti+yUD9B2Uvka+zjriBIKntIg2tayNCQx+
gHdLfIpvXlYb/siyQcVBeMvpktICrcQksFZ1viyDHhl1bZyWRqrypzOa7Ju2Xm7e
gMM/3bA32FOivcPM1bq1jvKqqml4PkptR4JaPKBt5r6Lrw/koBUN9TcbDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOekQP2oLXX9RM8xqPG4eLaPkw+MB8GA1UdIwQY
MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt
NmUzZmE2MmNkMmRmLzEvMDU2UkFfYWd0ZGYxRXp6R284Ymg0dG8tVEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm
LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwW6MA0G
CSqGSIb3DQEBCwUAA4IBAQCd5zv+NIOiNAVrzpV0veteuiEcIXS5oNGxLQGc2at1
9Ld6lDul34xNxjp1fj8avt/S2TBTtI9TLWN968pFP8PtwurkaVxfrXKYZBB0wzAM
1qT6/2EygAXOI5wkabfXCaBQYdzklpI91AHsOLtPt7z2X55o5wiAgWOm4OGBypuW
WJMiFsW8p+4qTUn6DndoR0TEpZ3w5kN7bFpgjnJ0+YY+STK379ALW+krIZXq9xCL
+lO/v4AXNl27aNDRYLTGuQS48qYsvZd63GQFZ/0jN4ZEEZ5LwVdiA2bH70YtkjnL
Vg40f1SAIRLtQc51E8yOere1vYV4bFmFLdl2hQknWEmB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:31 2024 by rpki-client on console-ams.rpki-client.org