Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wZNT_gqvxJAn45ZKlmnRofKfSxk.roa
File:                     wZNT_gqvxJAn45ZKlmnRofKfSxk.roa (raw, json)
Hash identifier:          elIK4E5I95e692rA57RXjOd9JD/KO7KHUNuZNSVtpTg=
Subject key identifier:   C1:93:53:FE:0A:AF:C4:90:27:E3:96:4A:96:69:D1:A1:F2:9F:4B:19
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       018BFE89BCB70D9BE1C0011BC77C5EE7C733
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wZNT_gqvxJAn45ZKlmnRofKfSxk.roa
Signing time:             Thu 23 Nov 2023 23:35:21 +0000
ROA not before:           Thu 23 Nov 2023 23:35:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        147.185.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Nov 2023 15:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fe:89:bc:b7:0d:9b:e1:c0:01:1b:c7:7c:5e:e7:c7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Nov 23 23:35:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c19353fe0aafc49027e3964a9669d1a1f29f4b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:a5:a9:57:14:fb:f2:0c:a7:f1:0a:fb:40:
                    e4:b5:6e:ff:0e:32:51:94:b4:a7:be:05:de:8e:bf:
                    c2:67:6a:e4:d9:14:d0:31:f1:98:f3:bc:4d:1e:d6:
                    92:51:2a:08:49:64:8e:6a:65:c2:bc:4f:e8:c8:db:
                    f3:c3:c2:9b:fd:2e:96:72:9c:27:f7:cb:df:14:97:
                    52:70:a5:81:28:12:96:9e:0c:a4:3e:3c:93:ad:35:
                    53:b1:e7:92:c0:41:e2:bd:33:06:a7:82:4d:4a:c6:
                    7d:3a:68:a2:cc:b5:38:11:f4:1b:a9:a1:cc:af:90:
                    76:7a:c2:ef:14:93:db:66:17:1d:68:7a:5b:82:cc:
                    8f:d2:35:3e:23:76:7e:20:5c:5b:18:e6:95:63:f8:
                    e4:89:d8:66:be:21:d9:81:47:45:7b:82:9d:6f:14:
                    da:06:03:53:de:1d:21:3a:2b:99:11:ba:16:c4:5b:
                    1b:ac:bf:50:b2:e2:fa:c2:4e:38:91:41:8c:56:15:
                    a1:61:97:5e:ae:9e:1c:64:82:3b:ee:19:0f:82:fd:
                    dc:23:7a:67:37:1d:cb:da:0e:7f:e8:5b:c4:90:ec:
                    a0:35:bf:a3:93:91:56:01:4c:b5:98:fa:b2:4f:03:
                    85:0c:8a:85:56:5c:81:4e:f4:92:a6:5a:8e:a6:5a:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:53:FE:0A:AF:C4:90:27:E3:96:4A:96:69:D1:A1:F2:9F:4B:19
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wZNT_gqvxJAn45ZKlmnRofKfSxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:b2:14:70:45:10:7a:93:d2:da:ad:72:12:b5:6c:da:0d:
         54:07:99:b3:13:c1:6a:90:38:37:1d:5d:5f:e9:e0:a5:41:76:
         7b:0b:0a:fb:30:c9:8a:c1:ec:f1:43:83:de:c7:25:58:2e:e7:
         15:d4:87:82:c8:72:0b:b2:b7:d5:67:48:f0:79:cd:35:8d:f1:
         55:cd:95:ed:79:60:26:18:e4:4b:dc:a5:47:46:fb:93:58:ee:
         73:05:d2:eb:16:4a:9c:47:4f:0c:aa:cd:67:d5:ae:dd:d1:05:
         5d:e9:1f:61:91:4f:fc:2d:69:0a:d6:d0:17:9f:6c:e1:38:64:
         d0:2a:62:04:06:2c:41:cc:56:1b:ca:53:57:81:f9:77:4f:22:
         de:1d:c2:fa:65:c7:9e:a8:d7:f2:34:f8:a3:b1:e8:27:3a:be:
         34:87:4a:eb:c4:9e:0e:a8:46:99:cc:dc:bd:54:ac:74:a7:51:
         ad:52:7d:c2:1c:8c:33:94:0c:56:9a:1d:b4:7c:c4:d8:a9:f6:
         03:1c:30:56:60:c4:2d:e7:51:9f:c2:0c:23:53:07:91:84:d8:
         42:48:f5:80:b4:07:4d:78:d9:96:0c:52:48:48:93:85:09:f0:
         d2:10:fc:dc:b6:df:99:36:00:ff:7c:92:fa:40:72:db:81:8d:
         09:0a:f0:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv+iby3DZvhwAEbx3xe58czMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjMxMTIzMjMzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTkzNTNmZTBhYWZjNDkwMjdlMzk2NGE5NjY5ZDFhMWYyOWY0YjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/6lqVcU+/IMp/EK+0DktW7/DjJR
lLSnvgXejr/CZ2rk2RTQMfGY87xNHtaSUSoISWSOamXCvE/oyNvzw8Kb/S6Wcpwn
98vfFJdScKWBKBKWngykPjyTrTVTseeSwEHivTMGp4JNSsZ9OmiizLU4EfQbqaHM
r5B2esLvFJPbZhcdaHpbgsyP0jU+I3Z+IFxbGOaVY/jkidhmviHZgUdFe4KdbxTa
BgNT3h0hOiuZEboWxFsbrL9QsuL6wk44kUGMVhWhYZderp4cZII77hkPgv3cI3pn
Nx3L2g5/6FvEkOygNb+jk5FWAUy1mPqyTwOFDIqFVlyBTvSSplqOplqrtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGTU/4Kr8SQJ+OWSpZp0aHyn0sZMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvd1pOVF9ncXZ4SkFuNDVaS2xtblJvZktmU3hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk7lqMA0G
CSqGSIb3DQEBCwUAA4IBAQA3urIUcEUQepPS2q1yErVs2g1UB5mzE8FqkDg3HV1f
6eClQXZ7Cwr7MMmKwezxQ4PexyVYLucV1IeCyHILsrfVZ0jwec01jfFVzZXteWAm
GORL3KVHRvuTWO5zBdLrFkqcR08Mqs1n1a7d0QVd6R9hkU/8LWkK1tAXn2zhOGTQ
KmIEBixBzFYbylNXgfl3TyLeHcL6ZceeqNfyNPijsegnOr40h0rrxJ4OqEaZzNy9
VKx0p1GtUn3CHIwzlAxWmh20fMTYqfYDHDBWYMQt51GfwgwjUweRhNhCSPWAtAdN
eNmWDFJISJOFCfDSEPzctt+ZNgD/fJL6QHLbgY0JCvDz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org