Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/W5q00wiieTPIz6bnUnOOdQe00Fo.roa
File:                     W5q00wiieTPIz6bnUnOOdQe00Fo.roa (raw, json)
Hash identifier:          ojNC6+UkrpnsgKGHMksBfCUlolzrPXU+qAp1mWppb0o=
Subject key identifier:   5B:9A:B4:D3:08:A2:79:33:C8:CF:A6:E7:52:73:8E:75:07:B4:D0:5A
Certificate issuer:       /CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Certificate serial:       0186C1199DDEA8F51605643F46600C18BA2C
Authority key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/W5q00wiieTPIz6bnUnOOdQe00Fo.roa
Signing time:             Wed 08 Mar 2023 12:02:06 +0000
ROA not before:           Wed 08 Mar 2023 12:02:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211448
IP address blocks:        193.30.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:19:9d:de:a8:f5:16:05:64:3f:46:60:0c:18:ba:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
        Validity
            Not Before: Mar  8 12:02:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b9ab4d308a27933c8cfa6e752738e7507b4d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:c4:53:8e:d9:ec:24:10:df:92:47:f6:6b:
                    93:7b:75:cd:44:73:52:68:58:23:60:c4:64:ea:48:
                    9e:1c:a3:d4:d2:c6:45:a4:4f:85:b9:62:92:90:de:
                    c1:76:4f:8c:a2:f5:5c:f5:cc:bb:bd:2c:60:d6:3d:
                    e5:e8:c4:c6:9e:6b:34:35:a7:27:81:98:b7:e0:dc:
                    19:87:c8:5c:bc:de:f4:8f:2c:e8:1e:e2:da:2f:df:
                    fe:c5:cb:3b:03:2a:06:a0:89:e7:ea:c3:7c:42:b9:
                    09:83:47:fd:57:ee:a7:4e:8c:94:66:ed:dd:dd:ec:
                    f2:03:a1:8e:cf:cf:93:27:f0:c4:a8:2c:ab:84:4f:
                    48:16:e8:2a:ae:4a:9b:85:df:f2:94:10:4e:49:7a:
                    39:92:ea:e3:e6:57:38:23:05:d0:a2:a4:ba:b9:47:
                    e0:b7:66:01:76:25:da:91:41:7d:a5:fd:75:bf:f3:
                    ad:f3:2d:d6:9f:a0:d0:c0:93:bc:78:a7:c7:60:b7:
                    2b:a8:69:f5:fd:6f:41:68:59:e0:f5:17:52:3d:b4:
                    69:28:1d:8a:fd:cf:53:90:6f:ab:8b:a0:0a:ba:e9:
                    df:b0:82:14:01:71:f7:b1:42:5f:08:5a:1c:fa:3f:
                    dc:71:6b:93:de:09:a8:23:43:91:94:4f:2c:11:31:
                    e0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:B4:D3:08:A2:79:33:C8:CF:A6:E7:52:73:8E:75:07:B4:D0:5A
            X509v3 Authority Key Identifier:
                keyid:21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/W5q00wiieTPIz6bnUnOOdQe00Fo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:3e:8a:20:62:38:ed:a6:52:fd:07:46:48:63:dd:a1:07:
         ee:19:4f:bb:3d:23:1d:8d:ec:d9:5d:47:6d:53:ec:5a:56:86:
         83:24:36:89:35:5f:3c:4f:89:d2:cc:cc:7b:55:9e:9f:00:f6:
         5f:be:2e:6f:ac:d6:fe:e8:e3:cf:e5:8b:1b:af:18:f3:1e:bd:
         59:ad:a6:6d:12:0d:6c:47:1a:8b:c2:57:0d:63:6d:39:5e:ed:
         e3:77:9f:d8:ca:58:e1:1d:2b:a0:98:da:92:95:21:82:86:0b:
         8f:ec:af:66:8b:73:bd:9b:3c:e1:3e:f5:f1:e2:cb:0c:1b:dd:
         0a:d1:57:fb:21:98:c9:4f:f5:18:20:51:c6:99:24:6a:c1:27:
         85:5b:cf:c2:1e:c8:de:b1:73:9b:e6:db:f3:2a:73:85:73:d0:
         ac:34:40:f8:86:be:d7:f8:d4:6b:0f:69:ec:49:dc:f3:73:31:
         db:96:5d:19:45:25:36:d4:8a:d7:8d:ab:5b:5f:9c:a9:3b:e7:
         24:e4:d0:b0:a3:0a:df:cb:de:b9:22:ef:45:87:b9:84:e4:07:
         a0:31:66:3e:6e:a0:18:1f:07:a1:01:34:ef:5f:b5:19:1b:ab:
         7f:8d:96:3e:3f:0d:2d:cf:28:ee:bc:da:12:4a:0a:0c:ee:04:
         3f:3e:d5:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbBGZ3eqPUWBWQ/RmAMGLosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODZjNDZlM2IxODI2Yjc4MmQyM2U2MzA0ZTUwZjEzMDE0
OTRmYzcwHhcNMjMwMzA4MTIwMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjlhYjRkMzA4YTI3OTMzYzhjZmE2ZTc1MjczOGU3NTA3YjRkMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjHEU47Z7CQQ35JH9muTe3XNRHNS
aFgjYMRk6kieHKPU0sZFpE+FuWKSkN7Bdk+MovVc9cy7vSxg1j3l6MTGnms0Nacn
gZi34NwZh8hcvN70jyzoHuLaL9/+xcs7AyoGoInn6sN8QrkJg0f9V+6nToyUZu3d
3ezyA6GOz8+TJ/DEqCyrhE9IFugqrkqbhd/ylBBOSXo5kurj5lc4IwXQoqS6uUfg
t2YBdiXakUF9pf11v/Ot8y3Wn6DQwJO8eKfHYLcrqGn1/W9BaFng9RdSPbRpKB2K
/c9TkG+ri6AKuunfsIIUAXH3sUJfCFoc+j/ccWuT3gmoI0ORlE8sETHgdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuatNMIonkzyM+m51JzjnUHtNBaMB8GA1UdIwQY
MBaAFCGGxG47GCa3gtI+YwTlDxMBSU/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVliRWJqc1lKcmVDMGo1akJPVVBFd0ZKVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80NzQwMTYtNmJmMi00MGIyLTliYTct
MjdjZTg1ZWY3NDc3LzEvVzVxMDB3aWllVFBJejZiblVuT09kUWUwMEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80NzQwMTYtNmJmMi00MGIyLTliYTctMjdjZTg1ZWY3NDc3
LzEvSVliRWJqc1lKcmVDMGo1akJPVVBFd0ZKVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5/MA0G
CSqGSIb3DQEBCwUAA4IBAQCQzz6KIGI47aZS/QdGSGPdoQfuGU+7PSMdjezZXUdt
U+xaVoaDJDaJNV88T4nSzMx7VZ6fAPZfvi5vrNb+6OPP5YsbrxjzHr1ZraZtEg1s
RxqLwlcNY205Xu3jd5/YyljhHSugmNqSlSGChguP7K9mi3O9mzzhPvXx4ssMG90K
0Vf7IZjJT/UYIFHGmSRqwSeFW8/CHsjesXOb5tvzKnOFc9CsNED4hr7X+NRrD2ns
SdzzczHbll0ZRSU21IrXjatbX5ypO+ck5NCwowrfy965Iu9Fh7mE5AegMWY+bqAY
HwehATTvX7UZG6t/jZY+Pw0tzyjuvNoSSgoM7gQ/PtXB
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:18 2024 by rpki-client on console-fra.rpki-client.org