Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa
File:                     a9zXtz7gXKVvMFLc2kyjcbImIf8.roa (raw, json)
Hash identifier:          wy3wt1vl8zhI0HSfEUHX15u2v7fHaK/MJmkgguJbTsA=
Subject key identifier:   6B:DC:D7:B7:3E:E0:5C:A5:6F:30:52:DC:DA:4C:A3:71:B2:26:21:FF
Certificate issuer:       /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial:       0185E324C9808372587D58A77A54C30FBF83
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa
Signing time:             Tue 24 Jan 2023 09:38:36 +0000
ROA not before:           Tue 24 Jan 2023 09:38:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39442
IP address blocks:        185.124.176.0/22 maxlen: 22
                          89.249.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 23 May 2023 07:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e3:24:c9:80:83:72:58:7d:58:a7:7a:54:c3:0f:bf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
        Validity
            Not Before: Jan 24 09:38:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bdcd7b73ee05ca56f3052dcda4ca371b22621ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:d5:fc:b3:41:32:6d:5e:71:e1:c2:83:c1:
                    ab:78:55:b6:e3:3f:db:4b:b1:73:38:6b:ea:63:0b:
                    04:25:bf:71:b0:45:81:79:e8:6c:79:60:ac:c2:eb:
                    b6:58:04:97:78:10:72:84:a1:b6:9f:3b:d5:4e:e8:
                    e9:fa:17:bb:61:bf:59:36:d1:3f:0a:0a:3f:2d:cf:
                    8b:fa:72:05:da:91:c9:60:c2:df:f2:e7:2c:6c:23:
                    ff:d5:ea:b8:ba:dd:b7:e1:39:00:6d:52:51:f0:f5:
                    51:af:3f:9f:ae:10:37:0d:66:d2:a7:fb:10:ec:f4:
                    6a:67:20:6d:33:7e:a0:66:f2:c0:c0:98:da:e2:4c:
                    96:54:d6:f4:f7:97:7b:73:07:37:fd:b9:c7:25:cb:
                    ff:cc:38:d7:f1:f0:d8:76:f1:a2:2d:ed:29:bb:1a:
                    8d:e1:d1:cf:74:2e:fa:51:bc:84:74:48:45:0b:03:
                    e1:53:66:26:fe:b2:1c:c0:ae:9d:cb:18:b1:12:6c:
                    0f:0b:15:77:83:9a:45:45:99:73:cb:b7:55:fd:1e:
                    47:7b:81:c2:78:5b:51:f0:6b:73:20:de:bc:16:2b:
                    b7:df:b9:2b:cc:3a:33:85:e1:13:28:58:ba:cc:8a:
                    ab:59:dd:0e:0a:fd:c9:4c:b4:94:90:be:24:68:ad:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:D7:B7:3E:E0:5C:A5:6F:30:52:DC:DA:4C:A3:71:B2:26:21:FF
            X509v3 Authority Key Identifier:
                keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/a9zXtz7gXKVvMFLc2kyjcbImIf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.249.224.0/20
                  185.124.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:72:14:c7:12:a1:7d:ff:ea:4f:10:16:66:74:af:17:39:50:
         43:07:0b:4d:37:4e:70:71:d5:73:08:a7:c1:d8:97:67:7d:26:
         d7:2d:71:e1:bf:fa:b2:4c:8d:66:20:ac:70:1a:f1:5e:36:b7:
         98:74:af:cb:e6:3f:80:10:45:06:2d:17:b8:c3:24:fa:08:86:
         88:66:e6:6f:62:e5:5a:a7:db:34:e5:3e:27:59:f6:48:29:d8:
         2b:3e:ec:c7:df:2c:e2:26:70:83:e3:c8:1b:30:51:df:53:0b:
         49:95:7b:47:07:e0:dc:93:e8:7d:37:26:ca:0f:06:56:8c:87:
         d2:25:e9:97:dc:1a:9a:87:b7:2a:ba:94:0b:4b:a7:6f:37:fe:
         48:64:77:88:48:69:e5:29:7f:17:9c:0f:23:35:35:09:29:ef:
         67:b2:c0:ee:31:2a:63:04:f2:e7:ff:ac:95:3d:73:07:d7:69:
         8f:86:23:a9:7c:ff:25:ce:9b:7f:8f:70:eb:14:df:cc:e0:f1:
         60:1a:f9:87:49:39:c2:b8:7f:c4:6e:ab:af:41:f7:12:44:5a:
         4e:84:a4:e9:bb:bd:6d:db:4b:f3:a4:50:a6:93:57:db:29:70:
         e5:28:a0:9a:bb:f3:41:a9:47:20:cd:95:c5:fc:31:c6:84:a9:
         e0:6c:f6:36
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXjJMmAg3JYfVinelTDD7+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix
ZDdkNGQwHhcNMjMwMTI0MDkzODM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRjZDdiNzNlZTA1Y2E1NmYzMDUyZGNkYTRjYTM3MWIyMjYyMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJfV/LNBMm1eceHCg8GreFW24z/b
S7FzOGvqYwsEJb9xsEWBeehseWCswuu2WASXeBByhKG2nzvVTujp+he7Yb9ZNtE/
Cgo/Lc+L+nIF2pHJYMLf8ucsbCP/1eq4ut234TkAbVJR8PVRrz+frhA3DWbSp/sQ
7PRqZyBtM36gZvLAwJja4kyWVNb095d7cwc3/bnHJcv/zDjX8fDYdvGiLe0puxqN
4dHPdC76UbyEdEhFCwPhU2Ym/rIcwK6dyxixEmwPCxV3g5pFRZlzy7dV/R5He4HC
eFtR8GtzIN68Fiu337krzDozheETKFi6zIqrWd0OCv3JTLSUkL4kaK24wwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGvc17c+4FylbzBS3NpMo3GyJiH/MB8GA1UdIwQY
MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt
NWFjN2YwNjYyMzBiLzEvYTl6WHR6N2dYS1Z2TUZMYzJreWpjYkltSWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi
LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWfngAwQC
uXywMA0GCSqGSIb3DQEBCwUAA4IBAQCcchTHEqF9/+pPEBZmdK8XOVBDBwtNN05w
cdVzCKfB2JdnfSbXLXHhv/qyTI1mIKxwGvFeNreYdK/L5j+AEEUGLRe4wyT6CIaI
ZuZvYuVap9s05T4nWfZIKdgrPuzH3yziJnCD48gbMFHfUwtJlXtHB+Dck+h9NybK
DwZWjIfSJemX3Bqah7cqupQLS6dvN/5IZHeISGnlKX8XnA8jNTUJKe9nssDuMSpj
BPLn/6yVPXMH12mPhiOpfP8lzpt/j3DrFN/M4PFgGvmHSTnCuH/EbquvQfcSRFpO
hKTpu71t20vzpFCmk1fbKXDlKKCau/NBqUcgzZXF/DHGhKngbPY2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:38 2024 by rpki-client on console-ams.rpki-client.org