Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa
File:                     uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa (raw, json)
Hash identifier:          JkMp2V0xW6YbAyYwJg6maWUg23lzsZYWE4HFKA+T/5I=
Subject key identifier:   B8:22:24:1E:8F:A8:7B:21:A2:AF:A9:2A:77:2E:AF:8C:5A:69:D4:AC
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       01856ECB82F12830ADAAAA46566C6419FC9A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa
Signing time:             Sun 01 Jan 2023 19:25:08 +0000
ROA not before:           Sun 01 Jan 2023 19:25:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210718
IP address blocks:        93.115.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:82:f1:28:30:ad:aa:aa:46:56:6c:64:19:fc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  1 19:25:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b822241e8fa87b21a2afa92a772eaf8c5a69d4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:57:9f:90:11:da:a4:4d:49:ba:30:8c:1c:
                    92:d6:f0:7c:45:c8:30:48:e1:d8:bf:70:16:f2:8a:
                    4f:5a:b6:f6:9c:62:fd:cc:1a:6b:3d:1d:cd:c3:a3:
                    3c:93:0f:16:f4:79:bf:c3:95:4f:95:e2:85:78:8f:
                    cb:fe:80:70:78:a1:43:67:31:ce:8d:15:d1:bb:e3:
                    4a:2a:21:cb:1d:55:59:5c:b3:bf:e1:b7:15:36:f9:
                    b6:f5:4d:18:44:c6:eb:6f:72:2f:9c:dc:f3:38:fc:
                    71:17:76:2a:95:69:74:5c:89:6f:a3:be:6c:47:f4:
                    76:31:2d:ac:e1:53:4f:10:89:20:5c:84:72:7f:16:
                    50:77:bd:b8:64:51:b4:93:26:47:4a:5b:1c:2f:cc:
                    f7:4d:fa:6c:ad:db:04:86:2c:cf:da:46:c7:d6:1c:
                    ee:d6:33:8c:5c:d6:f9:64:3c:c5:17:3b:da:67:a6:
                    27:79:9e:0c:69:0d:30:ed:96:2c:d0:c2:81:65:de:
                    e9:77:ad:34:c4:65:93:ab:99:2e:04:3d:a0:99:7e:
                    15:f3:12:2e:2b:1d:00:85:a9:0c:1a:31:77:5c:06:
                    27:af:1a:12:91:fe:2b:91:3a:9d:ca:22:e7:8e:78:
                    70:80:a4:6d:f1:94:88:5d:d5:cf:85:57:49:a3:0f:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:22:24:1E:8F:A8:7B:21:A2:AF:A9:2A:77:2E:AF:8C:5A:69:D4:AC
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/uCIkHo-oeyGir6kqdy6vjFpp1Kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:9c:11:28:17:a1:0c:e9:74:da:b2:ec:91:a4:b2:1a:bb:
         52:2d:18:cd:13:35:c1:a2:0b:3b:c4:8a:a2:ac:f1:c6:a1:b4:
         30:e1:36:2f:97:f6:d1:b3:8d:72:76:94:25:b3:45:f0:b3:f2:
         fe:a4:fb:85:6e:f2:d5:dc:aa:5c:17:a4:c7:27:57:3f:0f:bb:
         e6:da:23:c1:23:34:15:5f:06:b8:fe:f1:03:61:bf:43:26:84:
         00:74:1e:35:0e:79:b5:5c:08:50:4a:cd:89:d9:62:d1:1b:9b:
         5b:8d:fc:4f:b1:90:bc:da:bc:76:91:15:bf:77:55:e1:0c:32:
         ad:0b:af:80:ba:e4:2c:9f:c5:98:c6:9f:b0:bc:de:17:4e:38:
         3e:c9:3c:7f:78:e3:27:9f:bd:24:d3:03:49:fe:25:43:bd:ba:
         c9:5b:28:bb:ce:b3:77:30:30:fe:46:9a:49:e6:9e:52:41:90:
         d5:99:b8:75:3b:20:db:c8:fd:68:4d:08:8e:15:25:cd:81:24:
         df:aa:89:6b:da:b9:66:fe:97:b1:7e:99:16:fa:85:38:1b:ec:
         7f:98:fe:4f:c2:7f:7a:a1:31:08:b6:35:44:f4:a0:60:7d:e3:
         70:d6:84:97:f7:19:3a:3f:b9:f1:ce:97:64:2c:f2:5a:8c:31:
         6e:40:f0:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuy4LxKDCtqqpGVmxkGfyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwMTAxMTkyNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODIyMjQxZThmYTg3YjIxYTJhZmE5MmE3NzJlYWY4YzVhNjlkNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ZXn5AR2qRNSbowjByS1vB8Rcgw
SOHYv3AW8opPWrb2nGL9zBprPR3Nw6M8kw8W9Hm/w5VPleKFeI/L/oBweKFDZzHO
jRXRu+NKKiHLHVVZXLO/4bcVNvm29U0YRMbrb3IvnNzzOPxxF3YqlWl0XIlvo75s
R/R2MS2s4VNPEIkgXIRyfxZQd724ZFG0kyZHSlscL8z3TfpsrdsEhizP2kbH1hzu
1jOMXNb5ZDzFFzvaZ6YneZ4MaQ0w7ZYs0MKBZd7pd600xGWTq5kuBD2gmX4V8xIu
Kx0AhakMGjF3XAYnrxoSkf4rkTqdyiLnjnhwgKRt8ZSIXdXPhVdJow9aVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgiJB6PqHshoq+pKncur4xaadSsMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvdUNJa0hvLW9leUdpcjZrcWR5NnZqRnBwMUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXNlMA0G
CSqGSIb3DQEBCwUAA4IBAQB4jZwRKBehDOl02rLskaSyGrtSLRjNEzXBogs7xIqi
rPHGobQw4TYvl/bRs41ydpQls0Xws/L+pPuFbvLV3KpcF6THJ1c/D7vm2iPBIzQV
Xwa4/vEDYb9DJoQAdB41Dnm1XAhQSs2J2WLRG5tbjfxPsZC82rx2kRW/d1XhDDKt
C6+AuuQsn8WYxp+wvN4XTjg+yTx/eOMnn70k0wNJ/iVDvbrJWyi7zrN3MDD+RppJ
5p5SQZDVmbh1OyDbyP1oTQiOFSXNgSTfqolr2rlm/pexfpkW+oU4G+x/mP5Pwn96
oTEItjVE9KBgfeNw1oSX9xk6P7nxzpdkLPJajDFuQPDX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org