Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eH2ahCkPfIbIN-4r-00rtT6O0rM.roa
File:                     eH2ahCkPfIbIN-4r-00rtT6O0rM.roa (raw, json)
Hash identifier:          g0PcCjy46kLH8t7TYPoP6J50tbkAC3AwHbhUU8B2rts=
Subject key identifier:   78:7D:9A:84:29:0F:7C:86:C8:37:EE:2B:FB:4D:2B:B5:3E:8E:D2:B3
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       018826207B4A732746A47CFF54F84C041302
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eH2ahCkPfIbIN-4r-00rtT6O0rM.roa
Signing time:             Tue 16 May 2023 19:54:02 +0000
ROA not before:           Tue 16 May 2023 19:54:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209260
IP address blocks:        80.246.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:26:20:7b:4a:73:27:46:a4:7c:ff:54:f8:4c:04:13:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: May 16 19:54:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=787d9a84290f7c86c837ee2bfb4d2bb53e8ed2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f9:c8:69:84:61:25:47:9c:e1:0a:76:29:c5:
                    42:7a:42:b7:e1:56:be:5e:43:aa:62:4b:9a:50:0c:
                    a5:54:50:47:71:d3:d6:10:67:5b:6d:67:f8:04:4e:
                    99:8c:73:af:ab:c7:92:d0:6b:4e:bf:44:a2:a5:48:
                    11:29:da:23:65:aa:5e:de:64:36:4d:fd:ee:d2:26:
                    32:07:17:4a:03:06:07:0a:7e:d6:10:84:fe:99:16:
                    18:54:ce:20:1b:82:e9:a9:bf:3d:80:fd:73:ef:06:
                    6b:3e:88:a7:68:df:84:a1:4c:a0:b1:36:c1:ea:62:
                    8d:59:f9:98:a1:10:01:b5:ea:52:ac:81:f7:8a:b7:
                    95:be:a0:15:52:27:81:89:1a:e1:3f:c6:a5:11:d9:
                    1b:29:b7:c7:08:75:0a:51:40:5b:aa:41:77:5a:77:
                    29:b0:07:d0:48:47:3f:5f:29:b9:8a:12:0a:aa:79:
                    25:e6:3b:3e:b2:d2:64:25:ca:88:65:00:0a:64:e3:
                    ff:c3:43:fb:cb:32:2e:8d:55:0c:51:a4:88:16:e4:
                    02:14:d6:aa:d5:19:38:b6:99:33:e8:7d:c4:f3:a4:
                    e1:e4:35:b5:21:22:dc:20:16:cd:d3:f3:c3:de:ef:
                    42:19:ad:e5:44:67:db:03:14:80:f7:30:84:8a:a3:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7D:9A:84:29:0F:7C:86:C8:37:EE:2B:FB:4D:2B:B5:3E:8E:D2:B3
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eH2ahCkPfIbIN-4r-00rtT6O0rM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3d:a7:af:06:6b:e6:a1:bc:51:24:7d:84:3d:bc:8d:c1:7e:
         bc:75:57:1b:be:91:55:30:be:98:58:c9:42:23:a0:23:21:18:
         6d:b9:f7:10:85:76:df:60:c3:c2:0f:15:99:70:ba:4b:d1:4c:
         a7:74:9d:74:8f:52:6d:8d:fc:a8:2f:2a:ca:fb:02:16:c8:cb:
         39:67:1f:86:f5:ce:34:61:00:e6:db:21:2e:b8:52:7e:79:a3:
         50:4b:5c:35:d8:59:0a:7d:38:28:cb:2c:14:59:6b:10:5a:0f:
         20:8d:c5:54:3f:d2:c2:85:cc:2c:30:3e:9c:1c:dd:af:a2:cf:
         8d:49:4e:db:00:60:65:f7:0b:e0:78:a5:02:f3:1c:80:11:0a:
         8b:15:e4:d5:2e:3f:a5:c9:7f:7a:89:dd:4b:8a:a1:63:29:3e:
         60:f5:8c:8e:d2:76:8d:c0:76:37:15:7c:a4:9e:8c:de:42:d2:
         29:62:48:85:8f:1a:04:d0:05:6e:ff:d0:1e:4a:c0:34:18:88:
         cf:13:06:14:b7:f5:67:40:34:be:ea:4b:87:1b:cd:12:87:02:
         6b:7c:54:60:12:37:d7:9b:0d:e9:d8:6a:57:5e:ae:12:e1:72:
         a8:53:4d:71:55:f0:c5:22:3b:1a:9f:9d:4c:6b:71:b7:7b:36:
         35:46:52:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgmIHtKcydGpHz/VPhMBBMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwNTE2MTk1NDAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODdkOWE4NDI5MGY3Yzg2YzgzN2VlMmJmYjRkMmJiNTNlOGVkMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvnIaYRhJUec4Qp2KcVCekK34Va+
XkOqYkuaUAylVFBHcdPWEGdbbWf4BE6ZjHOvq8eS0GtOv0SipUgRKdojZape3mQ2
Tf3u0iYyBxdKAwYHCn7WEIT+mRYYVM4gG4Lpqb89gP1z7wZrPoinaN+EoUygsTbB
6mKNWfmYoRABtepSrIH3ireVvqAVUieBiRrhP8alEdkbKbfHCHUKUUBbqkF3Wncp
sAfQSEc/Xym5ihIKqnkl5js+stJkJcqIZQAKZOP/w0P7yzIujVUMUaSIFuQCFNaq
1Rk4tpkz6H3E86Th5DW1ISLcIBbN0/PD3u9CGa3lRGfbAxSA9zCEiqNvBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHh9moQpD3yGyDfuK/tNK7U+jtKzMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvZUgyYWhDa1BmSWJJTi00ci0wMHJ0VDZPMHJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPbrMA0G
CSqGSIb3DQEBCwUAA4IBAQBDPaevBmvmobxRJH2EPbyNwX68dVcbvpFVML6YWMlC
I6AjIRhtufcQhXbfYMPCDxWZcLpL0UyndJ10j1JtjfyoLyrK+wIWyMs5Zx+G9c40
YQDm2yEuuFJ+eaNQS1w12FkKfTgoyywUWWsQWg8gjcVUP9LChcwsMD6cHN2vos+N
SU7bAGBl9wvgeKUC8xyAEQqLFeTVLj+lyX96id1LiqFjKT5g9YyO0naNwHY3FXyk
nozeQtIpYkiFjxoE0AVu/9AeSsA0GIjPEwYUt/VnQDS+6kuHG80ShwJrfFRgEjfX
mw3p2GpXXq4S4XKoU01xVfDFIjsan51Ma3G3ezY1RlJ6
-----END CERTIFICATE-----
Generated at Sun Sep 17 19:37:59 2023 by rpki-client on console-ams.rpki-client.org