Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa
File:                     1-bcRv34_zYTACwjdhgh19MonEBI.roa (raw, json)
Hash identifier:          xjdpV1BjIdx5dBAjL16eAUTp7zsg9SsgorCAfYiUCR8=
Subject key identifier:   F9:B7:11:BF:7E:3F:CD:84:C0:0B:08:DD:86:08:75:F4:CA:27:10:12
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018B44670F0BDA8BA7881A8458C757332FC9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa
Signing time:             Wed 18 Oct 2023 20:08:06 +0000
ROA not before:           Wed 18 Oct 2023 20:08:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212514
IP address blocks:        5.180.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:44:67:0f:0b:da:8b:a7:88:1a:84:58:c7:57:33:2f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Oct 18 20:08:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9b711bf7e3fcd84c00b08dd860875f4ca271012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:14:78:a1:35:21:1f:8c:55:c1:84:04:9c:
                    3c:05:8a:87:5d:7a:5e:fd:fa:30:c8:f1:be:f4:a6:
                    85:16:5e:06:39:8a:b2:cd:c7:1e:83:98:c2:ef:33:
                    3b:19:83:27:9b:62:ea:7a:25:f5:22:24:a6:c1:9f:
                    c5:3a:a1:36:f1:08:69:ed:18:1c:18:62:7d:d8:16:
                    19:b6:b9:0c:ec:be:9c:57:28:2f:fd:c0:97:71:35:
                    7c:b4:92:0c:24:0b:ad:3d:ee:85:9f:e9:30:fd:c0:
                    ef:e4:2c:aa:72:00:d7:fe:24:6b:88:3c:70:15:1d:
                    bc:b1:f8:60:4e:1d:95:39:dc:13:b3:12:9e:f4:e9:
                    1a:0d:7f:9c:f3:37:03:c6:de:3c:b8:63:38:62:e1:
                    0f:94:9c:81:47:d3:90:ff:fc:ba:93:91:e2:e6:1e:
                    c1:8d:64:69:bd:08:47:3f:93:f6:77:4b:8f:58:f4:
                    f5:c6:94:41:e4:e2:81:9e:16:ab:40:e8:5e:c7:5e:
                    6b:17:7f:3f:f2:18:d1:d0:b0:75:9e:78:df:5c:c6:
                    e0:ac:78:cb:19:19:81:af:c8:57:15:9f:f9:65:2a:
                    a0:8e:25:1c:a9:09:dc:e4:42:9c:ea:16:86:4d:b4:
                    ae:29:a1:8c:fb:99:1a:9c:28:a8:93:24:ec:21:9f:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:11:BF:7E:3F:CD:84:C0:0B:08:DD:86:08:75:F4:CA:27:10:12
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-bcRv34_zYTACwjdhgh19MonEBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:a9:ee:84:df:e7:85:c5:c5:96:06:80:50:50:8e:16:32:
         5c:d4:be:9d:70:7a:4a:d3:0f:a9:6d:97:b6:23:ae:c8:31:d1:
         f9:e5:8e:a8:da:f8:75:3b:b9:cb:ba:93:73:1d:04:f5:c1:6c:
         eb:db:54:a9:70:b6:b4:2b:99:12:dd:9c:96:a5:f6:b1:41:46:
         67:c0:ee:2a:66:da:ac:19:42:20:e6:c0:8f:57:5e:3a:23:72:
         67:95:80:3c:1d:5d:26:8c:f1:21:50:6b:3e:73:c4:7f:83:e0:
         5f:37:09:d8:3b:54:58:8f:be:d3:b5:76:82:c6:8c:e8:32:8b:
         73:9d:06:cd:80:3a:d3:99:f9:39:cb:16:b3:11:b6:c8:71:03:
         ea:29:90:67:cc:af:66:ea:f4:40:a6:f8:ba:9f:8c:53:e5:53:
         24:38:27:cd:68:ca:5d:8d:f5:32:4d:a4:6d:d7:10:e6:a0:e6:
         83:24:6f:e4:ec:04:a4:66:8e:96:a6:60:8e:59:6b:73:fa:63:
         73:ec:e2:c3:e0:e8:11:6e:92:a4:91:4a:02:a6:34:5b:27:48:
         2e:7c:3c:23:45:85:f2:50:e2:32:e4:7f:3f:b2:c3:29:75:c6:
         29:43:a6:6f:f0:fb:7c:b2:8f:f2:97:27:90:5c:2d:dc:2a:7a:
         f7:f1:2b:e5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYtEZw8L2ouniBqEWMdXMy/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMxMDE4MjAwODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWI3MTFiZjdlM2ZjZDg0YzAwYjA4ZGQ4NjA4NzVmNGNhMjcxMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWwUeKE1IR+MVcGEBJw8BYqHXXpe
/fowyPG+9KaFFl4GOYqyzcceg5jC7zM7GYMnm2LqeiX1IiSmwZ/FOqE28Qhp7Rgc
GGJ92BYZtrkM7L6cVygv/cCXcTV8tJIMJAutPe6Fn+kw/cDv5CyqcgDX/iRriDxw
FR28sfhgTh2VOdwTsxKe9OkaDX+c8zcDxt48uGM4YuEPlJyBR9OQ//y6k5Hi5h7B
jWRpvQhHP5P2d0uPWPT1xpRB5OKBnharQOhex15rF38/8hjR0LB1nnjfXMbgrHjL
GRmBr8hXFZ/5ZSqgjiUcqQnc5EKc6haGTbSuKaGM+5kanCiokyTsIZ98RwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPm3Eb9+P82EwAsI3YYIdfTKJxASMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMS1iY1J2MzRfellUQUN3amRoZ2gxOU1vbkVCSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjIvNzA0MDcxLThkYzAtNGVkNi05NDU3LWU4NjEyMWM1OTRk
Zi8xL1l2MjJkbFRmWVlUbjFneEJVT3FWTThMUGx3US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW0UzAN
BgkqhkiG9w0BAQsFAAOCAQEAiH2p7oTf54XFxZYGgFBQjhYyXNS+nXB6StMPqW2X
tiOuyDHR+eWOqNr4dTu5y7qTcx0E9cFs69tUqXC2tCuZEt2clqX2sUFGZ8DuKmba
rBlCIObAj1deOiNyZ5WAPB1dJozxIVBrPnPEf4PgXzcJ2DtUWI++07V2gsaM6DKL
c50GzYA605n5OcsWsxG2yHED6imQZ8yvZur0QKb4up+MU+VTJDgnzWjKXY31Mk2k
bdcQ5qDmgyRv5OwEpGaOlqZgjllrc/pjc+ziw+DoEW6SpJFKAqY0WydILnw8I0WF
8lDiMuR/P7LDKXXGKUOmb/D7fLKP8pcnkFwt3Cp69/Er5Q==
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org