Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZVVX6OPhpd5Tk_qT8apjtJ0OC90.roa
File:                     ZVVX6OPhpd5Tk_qT8apjtJ0OC90.roa (raw, json)
Hash identifier:          n3dyAWCJWfVHF9JSLFLksNisBYbdPfJFpy4jO/VcqpE=
Subject key identifier:   65:55:57:E8:E3:E1:A5:DE:53:93:FA:93:F1:AA:63:B4:9D:0E:0B:DD
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       018C72B2BF60389206746E4A277E290DDCCE
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZVVX6OPhpd5Tk_qT8apjtJ0OC90.roa
Signing time:             Sat 16 Dec 2023 12:56:06 +0000
ROA not before:           Sat 16 Dec 2023 12:56:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        92.53.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 19 Dec 2023 16:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:72:b2:bf:60:38:92:06:74:6e:4a:27:7e:29:0d:dc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Dec 16 12:56:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=655557e8e3e1a5de5393fa93f1aa63b49d0e0bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:d1:86:bd:e5:27:73:2f:bd:0a:ca:b7:8b:
                    ff:41:2e:90:0c:aa:e1:c7:40:d6:0f:07:2d:fe:85:
                    71:7f:0f:da:0d:49:78:b9:2a:64:57:40:8d:45:dd:
                    97:a1:e0:c6:60:52:05:36:e1:14:b6:70:14:1a:9b:
                    05:c7:2b:9e:bf:65:70:78:77:d4:40:6a:86:6f:3c:
                    c8:92:f2:00:57:ac:bb:96:46:69:3a:cc:90:61:7c:
                    91:ef:66:4a:6f:c4:70:95:04:b0:4e:77:7e:84:a2:
                    85:76:12:96:01:97:4c:16:5d:6e:04:a8:21:de:2c:
                    90:6a:22:c6:9e:e3:48:01:cd:b9:a6:c4:c5:11:15:
                    ce:7c:f2:a0:d4:f7:9f:a4:c5:a9:aa:2b:ae:cf:a3:
                    16:4f:eb:30:c4:b8:4a:f5:f2:72:79:0f:3c:20:53:
                    b4:93:f5:24:4a:b5:60:35:d9:f2:eb:d3:34:53:13:
                    bd:ca:b3:d4:8a:be:dc:d0:b5:90:02:c5:44:33:e7:
                    7f:a0:fd:3f:5a:38:c6:8d:f7:03:ce:84:53:58:ff:
                    25:e6:ab:5e:40:e1:ab:42:fe:fa:dd:75:0d:51:80:
                    fe:d4:2c:db:af:48:97:d3:c0:52:be:15:55:c9:8c:
                    4c:16:4e:47:ab:af:65:f3:49:27:f1:fc:83:e6:71:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:55:57:E8:E3:E1:A5:DE:53:93:FA:93:F1:AA:63:B4:9D:0E:0B:DD
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/ZVVX6OPhpd5Tk_qT8apjtJ0OC90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:a7:7c:86:6b:9d:a0:ec:5c:9f:f2:80:f4:46:76:7e:f9:
         1e:52:82:06:ad:a7:62:25:8e:30:15:08:5f:db:5f:5e:5d:41:
         e4:4a:cb:7f:ad:11:25:d2:77:24:33:59:54:cf:17:53:fd:59:
         8e:65:34:50:0a:51:ec:75:35:54:cf:52:b7:8a:1a:77:84:35:
         02:e9:b9:b8:73:3f:c1:5d:8b:26:6e:d3:fe:45:8b:11:91:00:
         9b:ff:f3:b2:89:4d:9d:f1:89:38:e1:44:b1:1e:42:17:b8:bf:
         a0:21:d5:af:dd:d8:b9:be:73:a9:dd:b3:58:fd:2c:09:f9:7a:
         5d:cf:b9:cf:8e:7f:f7:ce:09:bd:86:66:fa:27:b8:3d:03:ac:
         21:fc:2b:a1:59:3d:ea:e7:40:0c:4c:e2:24:50:85:f5:04:df:
         b2:07:1a:f3:10:13:e8:8f:1e:f4:28:1f:bd:e9:d3:9f:cf:db:
         78:85:b3:c4:bb:27:24:86:63:b6:ba:27:63:d6:0d:9e:45:dd:
         01:3d:c0:ce:af:e2:10:79:d9:5b:10:44:bd:8c:5e:49:88:cf:
         65:aa:23:ed:ec:54:6a:b8:63:90:d1:0b:43:64:81:b1:2b:78:
         47:1e:40:86:26:67:0f:dc:99:c2:c3:b9:5c:24:f8:37:d4:cb:
         11:0e:d7:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxysr9gOJIGdG5KJ34pDdzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjMxMjE2MTI1NjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTU1NTdlOGUzZTFhNWRlNTM5M2ZhOTNmMWFhNjNiNDlkMGUwYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmHRhr3lJ3MvvQrKt4v/QS6QDKrh
x0DWDwct/oVxfw/aDUl4uSpkV0CNRd2XoeDGYFIFNuEUtnAUGpsFxyuev2VweHfU
QGqGbzzIkvIAV6y7lkZpOsyQYXyR72ZKb8RwlQSwTnd+hKKFdhKWAZdMFl1uBKgh
3iyQaiLGnuNIAc25psTFERXOfPKg1PefpMWpqiuuz6MWT+swxLhK9fJyeQ88IFO0
k/UkSrVgNdny69M0UxO9yrPUir7c0LWQAsVEM+d/oP0/WjjGjfcDzoRTWP8l5qte
QOGrQv763XUNUYD+1Czbr0iX08BSvhVVyYxMFk5Hq69l80kn8fyD5nGUZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGVVV+jj4aXeU5P6k/GqY7SdDgvdMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvWlZWWDZPUGhwZDVUa19xVDhhcGp0SjBPQzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDW0MA0G
CSqGSIb3DQEBCwUAA4IBAQBiTKd8hmudoOxcn/KA9EZ2fvkeUoIGradiJY4wFQhf
219eXUHkSst/rREl0nckM1lUzxdT/VmOZTRQClHsdTVUz1K3ihp3hDUC6bm4cz/B
XYsmbtP+RYsRkQCb//OyiU2d8Yk44USxHkIXuL+gIdWv3di5vnOp3bNY/SwJ+Xpd
z7nPjn/3zgm9hmb6J7g9A6wh/CuhWT3q50AMTOIkUIX1BN+yBxrzEBPojx70KB+9
6dOfz9t4hbPEuyckhmO2uidj1g2eRd0BPcDOr+IQedlbEES9jF5JiM9lqiPt7FRq
uGOQ0QtDZIGxK3hHHkCGJmcP3JnCw7lcJPg31MsRDtfT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org