Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa
File:                     HpICkbUrWrDypbQtSZbQ7yoPQS0.roa (raw, json)
Hash identifier:          tkzkLecd+8asM5wE5yNYG3HO/5Ec4QQleKhkFMEw6xY=
Subject key identifier:   1E:92:02:91:B5:2B:5A:B0:F2:A5:B4:2D:49:96:D0:EF:2A:0F:41:2D
Certificate issuer:       /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial:       018F760712CC32E9A97B9985D1B7E9BB7ECC
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa
Signing time:             Tue 14 May 2024 07:35:25 +0000
ROA not before:           Tue 14 May 2024 07:35:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        185.137.156.0/24 maxlen: 24
                          2a10:a100::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 12:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:76:07:12:cc:32:e9:a9:7b:99:85:d1:b7:e9:bb:7e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
        Validity
            Not Before: May 14 07:35:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1e920291b52b5ab0f2a5b42d4996d0ef2a0f412d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:d3:72:44:a0:2b:ac:16:e6:0f:a6:84:9d:
                    6e:80:77:53:47:60:4e:2f:d0:a7:24:3b:c7:f3:12:
                    e0:0f:7b:39:82:92:b6:e2:61:64:d6:1f:39:1d:b7:
                    5a:6a:a3:43:b9:a1:23:f3:bf:a3:f7:15:1a:cf:ff:
                    8d:ae:05:4b:f3:e0:6a:4a:b6:81:af:73:a6:54:fc:
                    e4:b9:aa:df:eb:fb:46:92:41:79:98:8a:bc:60:1d:
                    c2:4f:f9:62:84:bb:e8:a3:3d:a9:95:65:24:7f:fb:
                    27:ba:bd:f3:70:c0:da:13:b9:74:3e:a0:d8:14:57:
                    eb:84:19:97:cb:43:06:dc:5d:8e:2f:ac:f8:c7:d8:
                    0b:ef:88:6a:8a:b0:da:df:7a:3a:6d:e1:f5:a5:82:
                    d2:5b:67:96:b9:14:90:c1:e8:82:8a:95:75:7a:28:
                    11:8f:7e:f9:98:54:15:08:17:8d:87:22:dc:da:70:
                    bb:d5:9d:7f:bf:5d:05:c2:89:2d:94:d0:60:25:cb:
                    e3:d8:02:54:b1:28:1f:cd:de:fb:8b:b1:e7:63:fd:
                    06:a1:d3:d7:e8:a3:43:5e:58:b6:d2:8d:ea:a1:01:
                    be:36:a3:24:d0:09:bc:9d:65:3e:96:62:8f:36:c1:
                    03:89:52:2c:34:cd:a4:7c:25:aa:7c:e7:64:8d:74:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:02:91:B5:2B:5A:B0:F2:A5:B4:2D:49:96:D0:EF:2A:0F:41:2D
            X509v3 Authority Key Identifier:
                keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.156.0/24
                IPv6:
                  2a10:a100::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:46:fc:29:88:7b:07:93:16:87:d4:36:26:e0:16:5a:d1:96:
         d7:13:9e:3c:16:7a:75:10:03:b4:78:eb:26:d5:e7:7e:cd:b3:
         f6:9c:2b:08:21:44:68:72:d9:92:96:d9:ba:9e:a2:a0:66:ad:
         4e:4d:28:05:8f:a4:b5:89:22:c4:28:9e:71:a5:38:e6:1b:1e:
         64:7d:bd:78:3c:c3:9b:42:f4:bc:ac:87:21:d5:d2:d4:1c:be:
         c3:44:2b:87:5a:67:6b:97:22:7f:5c:b7:32:b1:fa:25:27:4a:
         ee:83:44:d0:98:ee:cd:9c:ec:d0:41:44:f1:18:22:e2:f9:39:
         82:16:f7:1d:68:be:f4:77:8d:6d:27:74:98:78:76:8c:39:7e:
         ca:d5:c0:5c:d9:0c:6f:29:80:eb:54:d3:93:42:c4:5b:53:fa:
         25:95:19:47:2e:cb:26:74:54:ea:d8:c2:19:74:6e:e7:d6:fa:
         e6:5c:0c:56:42:ef:ff:3f:a5:67:50:e7:31:df:7e:a0:8f:c5:
         ba:03:b7:ef:4d:95:d3:49:30:23:c7:eb:57:ae:21:a8:44:22:
         c0:91:8e:db:04:e3:df:90:5f:fa:00:e0:09:67:28:ab:90:44:
         5b:d3:12:3c:b6:ca:1e:36:f0:5d:89:e0:dc:a2:59:f3:7f:82:
         fc:4d:c4:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY92BxLMMumpe5mF0bfpu37MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZGUwZGU3M2U3Mzg3NGJiYzY2NzM4ODA1ZDM3M2NhYjgz
M2I3YTUwHhcNMjQwNTE0MDczNTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTkyMDI5MWI1MmI1YWIwZjJhNWI0MmQ0OTk2ZDBlZjJhMGY0MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQTTckSgK6wW5g+mhJ1ugHdTR2BO
L9CnJDvH8xLgD3s5gpK24mFk1h85HbdaaqNDuaEj87+j9xUaz/+NrgVL8+BqSraB
r3OmVPzkuarf6/tGkkF5mIq8YB3CT/lihLvooz2plWUkf/snur3zcMDaE7l0PqDY
FFfrhBmXy0MG3F2OL6z4x9gL74hqirDa33o6beH1pYLSW2eWuRSQweiCipV1eigR
j375mFQVCBeNhyLc2nC71Z1/v10FwoktlNBgJcvj2AJUsSgfzd77i7HnY/0GodPX
6KNDXli20o3qoQG+NqMk0Am8nWU+lmKPNsEDiVIsNM2kfCWqfOdkjXSW0QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB6SApG1K1qw8qW0LUmW0O8qD0EtMB8GA1UdIwQY
MBaAFOXeDec+c4dLvGZziAXTc8q4M7elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWQ0TjV6NXpoMHU4Wm5PSUJkTnp5cmd6dDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi81NWI5ZDctZjcwMy00NWZlLThiNjMt
MTA1MzRjNjdiYmI4LzEvSHBJQ2tiVXJXckR5cGJRdFNaYlE3eW9QUVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi81NWI5ZDctZjcwMy00NWZlLThiNjMtMTA1MzRjNjdiYmI4
LzEvNWQ0TjV6NXpoMHU4Wm5PSUJkTnp5cmd6dDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYmcMA8E
AgACMAkDBwAqEKEAAAAwDQYJKoZIhvcNAQELBQADggEBAKJG/CmIeweTFofUNibg
FlrRltcTnjwWenUQA7R46ybV537Ns/acKwghRGhy2ZKW2bqeoqBmrU5NKAWPpLWJ
IsQonnGlOOYbHmR9vXg8w5tC9LyshyHV0tQcvsNEK4daZ2uXIn9ctzKx+iUnSu6D
RNCY7s2c7NBBRPEYIuL5OYIW9x1ovvR3jW0ndJh4dow5fsrVwFzZDG8pgOtU05NC
xFtT+iWVGUcuyyZ0VOrYwhl0bufW+uZcDFZC7/8/pWdQ5zHffqCPxboDt+9NldNJ
MCPH61euIahEIsCRjtsE49+QX/oA4AlnKKuQRFvTEjy2yh428F2J4NyiWfN/gvxN
xBs=
-----END CERTIFICATE-----