Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/s56q4IAHkse_zypGNyb5byYzxHo.roa
File:                     s56q4IAHkse_zypGNyb5byYzxHo.roa (raw, json)
Hash identifier:          W92rk99n/8AOII6irb68I9ekmebnZv+iXOFY228VvgI=
Subject key identifier:   B3:9E:AA:E0:80:07:92:C7:BF:CF:2A:46:37:26:F9:6F:26:33:C4:7A
Certificate issuer:       /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial:       019109C9C89650FA48D45811983C8FD87C8F
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/s56q4IAHkse_zypGNyb5byYzxHo.roa
Signing time:             Wed 31 Jul 2024 17:15:04 +0000
ROA not before:           Wed 31 Jul 2024 17:15:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215133
IP address blocks:        193.178.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Aug 2024 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:09:c9:c8:96:50:fa:48:d4:58:11:98:3c:8f:d8:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
        Validity
            Not Before: Jul 31 17:15:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b39eaae0800792c7bfcf2a463726f96f2633c47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:70:28:16:72:91:77:b5:6f:77:22:f5:9a:35:
                    a1:56:9c:cc:05:e3:29:34:28:ed:e4:84:95:cd:7d:
                    bd:86:e8:07:65:79:ba:c3:c2:d7:f6:80:c0:40:b3:
                    37:4f:19:cb:46:b0:dd:ba:49:2f:6a:5e:5f:5c:cc:
                    e4:49:9a:e3:0a:6b:2c:b3:e9:09:a1:13:bb:81:7f:
                    78:e4:fb:8b:13:87:cc:b0:73:a9:91:08:bb:ab:df:
                    df:e2:c1:b6:38:15:37:9f:24:f3:36:a4:08:3c:bd:
                    74:7f:db:72:02:84:e0:3e:7f:8b:13:7d:ed:7c:35:
                    a3:ef:4d:c3:41:de:bd:f0:14:18:4f:3a:3d:83:5b:
                    79:09:e7:49:b7:10:8d:2d:2c:df:82:a5:36:ab:3b:
                    6f:47:a7:87:0e:b6:f1:d3:fe:75:20:6f:1f:06:bc:
                    ee:44:54:e9:86:5d:a6:65:fb:eb:3b:76:54:2a:98:
                    0f:bb:3b:a6:e7:92:46:59:b4:79:66:7e:88:a1:16:
                    a9:a7:d8:16:83:89:5e:c2:e4:91:1c:0a:c4:a3:33:
                    67:02:fa:6e:f1:6b:00:97:46:3d:e9:98:be:81:9a:
                    e5:56:f0:13:c6:74:cd:fb:5c:d7:27:da:2a:0e:d9:
                    9c:34:c8:50:83:a2:df:d1:b7:ab:12:2d:7c:77:6c:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:AA:E0:80:07:92:C7:BF:CF:2A:46:37:26:F9:6F:26:33:C4:7A
            X509v3 Authority Key Identifier:
                keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/s56q4IAHkse_zypGNyb5byYzxHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:1c:b6:42:b4:69:11:e8:85:76:08:ae:cc:07:c0:86:1a:
         56:d2:81:cb:96:91:15:4e:03:44:48:9f:4b:c0:22:e8:62:5d:
         48:4a:90:22:74:14:63:0c:06:79:5d:d8:c8:8c:88:d5:77:79:
         d0:b3:5f:fc:c2:e9:ac:e8:ff:0a:2d:43:eb:a6:b4:f8:83:f8:
         bf:31:ae:ee:0a:5a:0b:f2:bc:f0:d0:5f:0f:ed:5e:3d:96:66:
         30:9b:48:d8:c5:e2:f6:f8:f2:9f:40:c9:50:d1:f1:00:19:46:
         5c:1e:bc:03:9a:4c:f5:3a:ed:69:da:5b:8c:93:4b:39:81:b5:
         6d:28:8a:cf:ff:4c:8e:26:e4:2f:62:f1:2b:2e:02:0a:f2:fa:
         50:b9:f0:fd:fd:fe:50:6f:36:d7:13:d6:15:51:9d:5b:f2:12:
         74:6a:91:97:29:0f:82:fe:40:f5:80:b7:68:8e:67:f1:c6:d2:
         a8:0f:c2:80:10:ff:d4:08:9b:cc:24:da:e1:4f:0a:42:51:b5:
         d7:0b:da:b0:d4:fc:ba:a8:5f:f1:d5:03:59:1f:40:9b:a6:b1:
         7c:43:0e:73:17:f9:d6:14:bf:2e:4a:f9:ab:2c:02:2d:ab:9b:
         2a:0a:6f:34:ee:63:f0:9c:b2:a7:35:a1:a5:b6:f8:f3:87:8c:
         63:23:02:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEJyciWUPpI1FgRmDyP2HyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMzQ4N2RhNjVlODVlODdiZGFjNGY1ZjY3NThkYzZjMjBl
Zjk3NjMwHhcNMjQwNzMxMTcxNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzllYWFlMDgwMDc5MmM3YmZjZjJhNDYzNzI2Zjk2ZjI2MzNjNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HAoFnKRd7VvdyL1mjWhVpzMBeMp
NCjt5ISVzX29hugHZXm6w8LX9oDAQLM3TxnLRrDdukkval5fXMzkSZrjCmsss+kJ
oRO7gX945PuLE4fMsHOpkQi7q9/f4sG2OBU3nyTzNqQIPL10f9tyAoTgPn+LE33t
fDWj703DQd698BQYTzo9g1t5CedJtxCNLSzfgqU2qztvR6eHDrbx0/51IG8fBrzu
RFTphl2mZfvrO3ZUKpgPuzum55JGWbR5Zn6IoRapp9gWg4lewuSRHArEozNnAvpu
8WsAl0Y96Zi+gZrlVvATxnTN+1zXJ9oqDtmcNMhQg6Lf0berEi18d2y5eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOequCAB5LHv88qRjcm+W8mM8R6MB8GA1UdIwQY
MBaAFC40h9pl6F6HvaxPX2dY3Gwg75djMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAt
ZDBhZWNkNWQ3MDQyLzEvczU2cTRJQUhrc2VfenlwR055YjVieVl6eEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yZmUwOTQtMzczYy00NGY2LTkzZTAtZDBhZWNkNWQ3MDQy
LzEvTGpTSDJtWG9Yb2U5ckU5ZloxamNiQ0R2bDJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbLiMA0G
CSqGSIb3DQEBCwUAA4IBAQBX5By2QrRpEeiFdgiuzAfAhhpW0oHLlpEVTgNESJ9L
wCLoYl1ISpAidBRjDAZ5XdjIjIjVd3nQs1/8wums6P8KLUPrprT4g/i/Ma7uCloL
8rzw0F8P7V49lmYwm0jYxeL2+PKfQMlQ0fEAGUZcHrwDmkz1Ou1p2luMk0s5gbVt
KIrP/0yOJuQvYvErLgIK8vpQufD9/f5QbzbXE9YVUZ1b8hJ0apGXKQ+C/kD1gLdo
jmfxxtKoD8KAEP/UCJvMJNrhTwpCUbXXC9qw1Py6qF/x1QNZH0CbprF8Qw5zF/nW
FL8uSvmrLAItq5sqCm807mPwnLKnNaGltvjzh4xjIwK8
Generated at Wed Aug 7 23:33:37 2024 by rpki-client on console-fra.rpki-client.org