Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHJ6-s55-UpaQHuGZpxbp2x4Uxk.roa
File:                     IHJ6-s55-UpaQHuGZpxbp2x4Uxk.roa (raw, json)
Hash identifier:          1ONn6Lc9m3z7+OEQs6Ya3Q6U9MhW5mx/Bdcac/mlLwk=
Subject key identifier:   20:72:7A:FA:CE:79:F9:4A:5A:40:7B:86:66:9C:5B:A7:6C:78:53:19
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       018570E758F006B2A3B733B5C7F85F909B51
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHJ6-s55-UpaQHuGZpxbp2x4Uxk.roa
Signing time:             Mon 02 Jan 2023 05:14:47 +0000
ROA not before:           Mon 02 Jan 2023 05:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212384
IP address blocks:        193.178.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:58:f0:06:b2:a3:b7:33:b5:c7:f8:5f:90:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Jan  2 05:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20727aface79f94a5a407b86669c5ba76c785319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:ee:e2:a9:a2:a0:44:05:44:5d:c2:53:fc:
                    12:d6:45:9b:4c:bd:23:2b:39:01:e8:eb:66:08:a0:
                    ac:ca:c3:e6:8b:4d:1b:ed:e5:5e:d8:f0:c0:f1:fe:
                    ae:d1:98:7b:f9:6f:08:a3:21:2f:7b:54:2b:4e:d9:
                    2e:db:db:d4:b2:5e:04:2b:2b:7d:f4:ac:d0:46:2c:
                    20:79:8c:d0:87:44:a8:6f:3c:7b:8b:2b:88:9a:70:
                    88:26:2e:09:7e:06:30:ec:eb:1f:68:da:89:b5:17:
                    83:5b:9d:c9:c9:f4:c8:97:e4:11:0e:2b:13:e0:e3:
                    96:98:64:96:57:7e:b0:2e:95:a9:8e:da:6a:a4:4e:
                    b1:37:a1:1d:7e:f5:fb:0e:5b:ee:ab:12:24:2c:97:
                    58:76:f7:b6:05:00:b9:96:89:3e:0f:4d:c3:e8:90:
                    59:5f:58:d9:a4:0d:63:09:16:56:9c:e8:92:cb:2c:
                    a5:54:10:5a:ae:e2:6e:96:4f:17:cf:75:31:c7:0d:
                    1c:a9:aa:9c:06:f9:23:ce:73:ac:4d:d9:98:fa:d1:
                    08:1a:96:b3:ab:f3:05:0b:9f:c8:3f:65:48:20:1d:
                    d1:03:7f:29:bd:02:71:4c:7d:0c:74:8d:53:86:f5:
                    51:d8:80:98:6e:89:54:9a:2c:cb:8a:17:12:43:9d:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:72:7A:FA:CE:79:F9:4A:5A:40:7B:86:66:9C:5B:A7:6C:78:53:19
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHJ6-s55-UpaQHuGZpxbp2x4Uxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:59:97:4a:cd:51:4e:f1:c1:74:16:ce:ba:81:c5:9b:a5:
         91:79:4a:af:71:6a:6e:32:f7:7b:aa:76:0c:5e:e4:1b:87:c6:
         b3:ad:d1:75:cb:c5:29:13:7b:d0:23:8c:8d:d3:6b:d2:9d:2b:
         6f:87:3b:30:5d:66:ad:01:f0:64:8a:7b:59:a1:73:58:b7:7b:
         b9:ef:f2:88:9e:90:1c:19:79:72:53:c9:e8:c5:bb:8e:56:3b:
         c0:db:df:6d:db:5a:2a:45:20:96:ff:84:95:35:29:42:a4:3e:
         4d:a2:ab:1b:9b:97:0e:61:58:cc:a5:5e:e8:25:74:93:ea:40:
         4f:73:2d:a3:aa:68:34:77:a7:4b:6c:f9:35:93:fa:6d:7a:91:
         5b:1e:7a:78:24:66:70:e3:09:21:3a:e6:2d:30:8b:b0:23:a7:
         ed:c0:1e:13:9a:ed:9c:a5:fa:0c:c0:da:74:aa:59:e1:eb:ed:
         84:dc:8b:42:8b:e8:95:52:c5:bd:68:cc:2f:4a:5f:f0:2a:01:
         20:73:ca:b3:d9:d7:be:e1:4a:46:41:85:82:cf:0b:83:6f:ed:
         cc:26:2a:5e:29:e4:6b:56:a5:b1:0b:cc:bf:96:aa:b1:77:5f:
         48:81:22:c9:47:c9:8f:03:0f:e9:11:78:f6:9e:bc:78:84:41:
         aa:6f:0c:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw51jwBrKjtzO1x/hfkJtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjMwMTAyMDUxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDcyN2FmYWNlNzlmOTRhNWE0MDdiODY2NjljNWJhNzZjNzg1MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCju4qmioEQFRF3CU/wS1kWbTL0j
KzkB6OtmCKCsysPmi00b7eVe2PDA8f6u0Zh7+W8IoyEve1QrTtku29vUsl4EKyt9
9KzQRiwgeYzQh0Sobzx7iyuImnCIJi4JfgYw7OsfaNqJtReDW53JyfTIl+QRDisT
4OOWmGSWV36wLpWpjtpqpE6xN6EdfvX7DlvuqxIkLJdYdve2BQC5lok+D03D6JBZ
X1jZpA1jCRZWnOiSyyylVBBaruJulk8Xz3Uxxw0cqaqcBvkjznOsTdmY+tEIGpaz
q/MFC5/IP2VIIB3RA38pvQJxTH0MdI1ThvVR2ICYbolUmizLihcSQ524wQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCByevrOeflKWkB7hmacW6dseFMZMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvSUhKNi1zNTUtVXBhUUh1R1pweGJwMng0VXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbI0MA0G
CSqGSIb3DQEBCwUAA4IBAQBnGlmXSs1RTvHBdBbOuoHFm6WReUqvcWpuMvd7qnYM
XuQbh8azrdF1y8UpE3vQI4yN02vSnStvhzswXWatAfBkintZoXNYt3u57/KInpAc
GXlyU8noxbuOVjvA299t21oqRSCW/4SVNSlCpD5Noqsbm5cOYVjMpV7oJXST6kBP
cy2jqmg0d6dLbPk1k/ptepFbHnp4JGZw4wkhOuYtMIuwI6ftwB4Tmu2cpfoMwNp0
qlnh6+2E3ItCi+iVUsW9aMwvSl/wKgEgc8qz2de+4UpGQYWCzwuDb+3MJipeKeRr
VqWxC8y/lqqxd19IgSLJR8mPAw/pEXj2nrx4hEGqbwyQ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org