Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UcW7qhnu9xbEyXmrDnWh_8RRYpo.roa
File:                     UcW7qhnu9xbEyXmrDnWh_8RRYpo.roa (raw, json)
Hash identifier:          VDvkJdY6JGsdzMoA5wvt1Jqsaj/9GJpZHH2ZcUlphSE=
Subject key identifier:   51:C5:BB:AA:19:EE:F7:16:C4:C9:79:AB:0E:75:A1:FF:C4:51:62:9A
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       018B8EB6F2E52ACC209AF2E456AC8EBD557A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UcW7qhnu9xbEyXmrDnWh_8RRYpo.roa
Signing time:             Thu 02 Nov 2023 06:27:16 +0000
ROA not before:           Thu 02 Nov 2023 06:27:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199439
IP address blocks:        93.113.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8e:b6:f2:e5:2a:cc:20:9a:f2:e4:56:ac:8e:bd:55:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Nov  2 06:27:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51c5bbaa19eef716c4c979ab0e75a1ffc451629a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:bf:3c:fc:d4:30:66:0f:35:44:44:b3:db:
                    68:22:a1:f1:70:44:b5:91:fd:58:23:1b:40:9f:9d:
                    ec:e5:6e:d9:77:cf:fb:0f:85:22:bc:69:e8:14:23:
                    d9:89:83:84:36:34:dd:98:7e:80:32:8c:08:fb:4a:
                    7b:bd:61:ea:14:6a:1b:e3:7c:39:8a:5b:c8:1c:7a:
                    5b:44:ce:cf:b6:62:3c:40:95:13:f2:3a:40:76:1f:
                    c5:e2:d9:c3:eb:4f:c5:28:1d:75:cc:99:25:18:fe:
                    ff:5e:53:84:8e:9e:17:58:ec:0a:f5:03:90:01:c8:
                    8a:ad:cf:60:84:66:53:7c:97:a6:0f:b1:b6:df:93:
                    92:f2:fb:67:e3:10:70:10:be:1a:fd:53:56:83:d3:
                    82:e3:88:70:29:f3:49:9a:3f:33:51:12:a6:67:c2:
                    2d:24:a2:95:70:e0:94:05:f2:98:90:e1:4f:5e:58:
                    80:b4:a0:21:1c:18:82:9e:2f:c8:ff:69:61:90:fc:
                    48:20:ea:fe:c4:14:ba:9f:f4:aa:cd:8d:de:d3:d8:
                    d9:2d:9a:69:a8:e5:8f:ec:55:d3:8f:a6:3f:42:7d:
                    3b:43:93:4a:6f:1d:6b:ec:e9:ff:50:4f:b0:60:74:
                    c9:4d:94:85:b3:ce:fd:cc:34:ab:84:f2:c4:fe:66:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C5:BB:AA:19:EE:F7:16:C4:C9:79:AB:0E:75:A1:FF:C4:51:62:9A
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/UcW7qhnu9xbEyXmrDnWh_8RRYpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:67:76:bb:a4:1c:9f:2a:80:e2:7f:12:00:ad:db:17:20:7a:
         f7:b5:10:f6:56:8c:00:5e:a3:6b:99:0b:eb:d9:ae:d9:34:cf:
         54:8e:27:66:40:68:60:09:9f:59:8f:81:30:19:5f:4f:96:0a:
         69:af:dc:9f:4b:c1:88:c0:06:5e:ba:0b:f4:84:71:fa:c0:4d:
         53:8d:1e:ca:9b:7f:91:af:5b:bc:73:05:b0:f2:96:c7:cc:61:
         66:7a:b3:55:d2:de:62:f3:b6:d5:10:b1:0d:d7:bd:93:15:01:
         f3:b3:ab:62:b5:99:43:f6:ce:2c:05:39:1e:46:c4:14:90:6c:
         ee:6e:75:bf:c4:8e:af:5e:ea:cf:6c:40:9c:ed:8b:86:aa:6d:
         88:7a:51:cb:db:c4:bf:7e:3a:6b:6d:50:14:dc:f1:da:4d:7a:
         32:6c:c6:90:54:3d:23:74:71:85:e9:4f:99:30:41:4b:67:56:
         c0:71:f1:f5:90:cc:ba:9f:8e:03:fd:d8:7d:e2:99:3f:e1:9e:
         1d:45:b9:4f:71:79:b8:e7:b0:8c:f9:8d:6d:dd:f0:71:58:ff:
         23:bc:c0:b5:28:32:37:65:5b:ee:11:f8:0e:bf:ac:75:00:4b:
         90:15:b5:b2:fa:b5:60:77:d6:24:10:cc:a5:68:9c:91:4a:0b:
         c7:81:67:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuOtvLlKswgmvLkVqyOvVV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMxMTAyMDYyNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM1YmJhYTE5ZWVmNzE2YzRjOTc5YWIwZTc1YTFmZmM0NTE2MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6+/PPzUMGYPNUREs9toIqHxcES1
kf1YIxtAn53s5W7Zd8/7D4UivGnoFCPZiYOENjTdmH6AMowI+0p7vWHqFGob43w5
ilvIHHpbRM7PtmI8QJUT8jpAdh/F4tnD60/FKB11zJklGP7/XlOEjp4XWOwK9QOQ
AciKrc9ghGZTfJemD7G235OS8vtn4xBwEL4a/VNWg9OC44hwKfNJmj8zURKmZ8It
JKKVcOCUBfKYkOFPXliAtKAhHBiCni/I/2lhkPxIIOr+xBS6n/SqzY3e09jZLZpp
qOWP7FXTj6Y/Qn07Q5NKbx1r7On/UE+wYHTJTZSFs879zDSrhPLE/ma4RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFHFu6oZ7vcWxMl5qw51of/EUWKaMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVWNXN3FobnU5eGJFeVhtckRuV2hfOFJSWXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXG2MA0G
CSqGSIb3DQEBCwUAA4IBAQB4Z3a7pByfKoDifxIArdsXIHr3tRD2VowAXqNrmQvr
2a7ZNM9UjidmQGhgCZ9Zj4EwGV9Plgppr9yfS8GIwAZeugv0hHH6wE1TjR7Km3+R
r1u8cwWw8pbHzGFmerNV0t5i87bVELEN172TFQHzs6titZlD9s4sBTkeRsQUkGzu
bnW/xI6vXurPbECc7YuGqm2IelHL28S/fjprbVAU3PHaTXoybMaQVD0jdHGF6U+Z
MEFLZ1bAcfH1kMy6n44D/dh94pk/4Z4dRblPcXm457CM+Y1t3fBxWP8jvMC1KDI3
ZVvuEfgOv6x1AEuQFbWy+rVgd9YkEMylaJyRSgvHgWcU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org