Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Tu94IAjon5jc5Ub7dv40gcTjOVg.roa
File:                     Tu94IAjon5jc5Ub7dv40gcTjOVg.roa (raw, json)
Hash identifier:          mv8APZRIuRO3JlJ9h7pzrJ73SqtlXG/sJ52FFcyBy5E=
Subject key identifier:   4E:EF:78:20:08:E8:9F:98:DC:E5:46:FB:76:FE:34:81:C4:E3:39:58
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018A2B2CEE4101EBB23DBE3471BE05D2FDC5
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Tu94IAjon5jc5Ub7dv40gcTjOVg.roa
Signing time:             Fri 25 Aug 2023 05:31:19 +0000
ROA not before:           Fri 25 Aug 2023 05:31:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.177.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 02:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2b:2c:ee:41:01:eb:b2:3d:be:34:71:be:05:d2:fd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Aug 25 05:31:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4eef782008e89f98dce546fb76fe3481c4e33958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:c5:86:2b:66:6b:14:25:ed:b8:80:70:bd:
                    e8:f5:0f:0c:90:b2:3b:ce:ec:b3:14:85:e6:58:3c:
                    23:0f:9c:0c:ef:eb:51:33:ba:9b:ac:12:27:59:4a:
                    ca:0c:b3:55:72:b2:18:5a:2b:6f:48:12:48:36:29:
                    29:be:5c:3c:e3:f0:ce:12:50:9e:e3:41:4d:97:57:
                    3a:1f:c4:ee:fa:74:d6:58:06:54:1c:71:14:e2:4a:
                    92:34:33:48:4f:61:67:21:7a:70:c6:1c:cc:91:f5:
                    03:d7:98:06:8d:98:65:0f:de:3f:7a:a3:3d:ce:f3:
                    aa:51:6f:28:d1:a9:43:13:33:0d:87:3b:2e:7c:50:
                    fe:89:6a:2a:60:4a:e2:84:e9:ca:20:1a:ce:19:c4:
                    53:86:4e:d6:eb:72:d4:5a:06:4d:95:59:b4:fb:52:
                    40:7d:ca:8b:60:c2:b8:e2:5d:83:66:37:8c:f4:5c:
                    c8:90:b4:ae:56:54:0a:dd:3e:43:75:b3:a0:d6:fb:
                    b3:ec:fc:b8:8e:fa:fa:0f:cc:e5:52:0e:6d:51:dd:
                    a3:38:65:99:42:c6:f7:22:46:ac:b9:ed:b6:6e:1c:
                    9e:43:90:bb:14:4e:f5:5f:91:ab:19:f4:de:57:24:
                    4d:17:28:90:64:ae:6d:15:6f:9a:36:8e:a3:db:1a:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:78:20:08:E8:9F:98:DC:E5:46:FB:76:FE:34:81:C4:E3:39:58
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Tu94IAjon5jc5Ub7dv40gcTjOVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:79:d0:a2:7f:7f:c8:72:0d:99:76:ae:d7:be:26:6e:9d:f0:
         83:92:a6:0c:ce:dc:10:eb:68:6a:07:20:0c:ad:b8:87:04:e1:
         08:3c:8e:2c:81:4f:51:27:3e:50:f6:e6:d3:e2:f6:f3:7f:cc:
         ef:1d:95:19:20:67:50:c1:cc:1b:80:ae:6b:ce:cc:1e:38:b3:
         e2:8b:9d:90:9e:14:89:21:e5:0f:9f:f5:6d:c8:dc:5c:8f:40:
         4c:89:09:07:32:e6:37:7b:6d:6d:b9:55:d2:83:a6:05:ff:8c:
         3b:07:cb:0a:27:6b:4d:f0:ff:81:0f:93:02:1c:20:3e:ef:4f:
         96:fa:6d:e8:b2:36:f8:33:13:c6:af:3f:2a:5e:52:68:41:ab:
         4b:97:1f:6c:65:67:ec:f0:9b:ac:2b:b0:47:98:9f:71:84:6c:
         77:08:f5:fe:f1:8c:04:40:a5:93:23:44:4c:2e:98:3e:db:25:
         9d:5d:22:6f:73:ac:d1:a9:28:9d:63:b9:be:9c:fe:3c:a9:98:
         e6:e6:4b:78:83:aa:ab:c6:13:29:f2:82:35:69:b0:24:44:34:
         d1:b6:80:66:f4:73:fd:d5:d0:7f:a6:09:92:27:8a:59:07:ae:
         80:74:02:b0:8f:36:39:a6:d5:45:e5:87:45:d3:ba:01:51:68:
         bb:ee:ad:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYorLO5BAeuyPb40cb4F0v3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwODI1MDUzMTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWVmNzgyMDA4ZTg5Zjk4ZGNlNTQ2ZmI3NmZlMzQ4MWM0ZTMzOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppfFhitmaxQl7biAcL3o9Q8MkLI7
zuyzFIXmWDwjD5wM7+tRM7qbrBInWUrKDLNVcrIYWitvSBJINikpvlw84/DOElCe
40FNl1c6H8Tu+nTWWAZUHHEU4kqSNDNIT2FnIXpwxhzMkfUD15gGjZhlD94/eqM9
zvOqUW8o0alDEzMNhzsufFD+iWoqYErihOnKIBrOGcRThk7W63LUWgZNlVm0+1JA
fcqLYMK44l2DZjeM9FzIkLSuVlQK3T5DdbOg1vuz7Py4jvr6D8zlUg5tUd2jOGWZ
Qsb3Ikasue22bhyeQ5C7FE71X5GrGfTeVyRNFyiQZK5tFW+aNo6j2xp7awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7veCAI6J+Y3OVG+3b+NIHE4zlYMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvVHU5NElBam9uNWpjNVViN2R2NDBnY1RqT1ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubEYMA0G
CSqGSIb3DQEBCwUAA4IBAQBCedCif3/Icg2Zdq7XviZunfCDkqYMztwQ62hqByAM
rbiHBOEIPI4sgU9RJz5Q9ubT4vbzf8zvHZUZIGdQwcwbgK5rzsweOLPii52QnhSJ
IeUPn/VtyNxcj0BMiQkHMuY3e21tuVXSg6YF/4w7B8sKJ2tN8P+BD5MCHCA+70+W
+m3osjb4MxPGrz8qXlJoQatLlx9sZWfs8JusK7BHmJ9xhGx3CPX+8YwEQKWTI0RM
Lpg+2yWdXSJvc6zRqSidY7m+nP48qZjm5kt4g6qrxhMp8oI1abAkRDTRtoBm9HP9
1dB/pgmSJ4pZB66AdAKwjzY5ptVF5YdF07oBUWi77q25
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org