Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/SAYRjIIY8knbay6u7jVUycWy3Ls.roa
File:                     SAYRjIIY8knbay6u7jVUycWy3Ls.roa (raw, json)
Hash identifier:          PVkYW7dlohQExxTYyq7r67szOJz0/FeACPaVk8Razyc=
Subject key identifier:   48:06:11:8C:82:18:F2:49:DB:6B:2E:AE:EE:35:54:C9:C5:B2:DC:BB
Certificate issuer:       /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial:       018619D1DE3E7A54524DE419A7E9A6080175
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/SAYRjIIY8knbay6u7jVUycWy3Ls.roa
Signing time:             Sat 04 Feb 2023 00:27:09 +0000
ROA not before:           Sat 04 Feb 2023 00:27:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211975
IP address blocks:        91.247.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:19:d1:de:3e:7a:54:52:4d:e4:19:a7:e9:a6:08:01:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
        Validity
            Not Before: Feb  4 00:27:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4806118c8218f249db6b2eaeee3554c9c5b2dcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:38:2b:a4:9d:c3:0f:3c:8d:66:1c:5b:92:
                    86:42:e0:75:3f:90:1f:11:02:32:51:a9:2a:f7:c0:
                    0c:e3:f7:96:6d:f2:84:17:2e:90:b3:08:10:eb:d4:
                    46:54:f8:01:33:92:2f:54:c7:fd:90:34:8c:6a:91:
                    d5:be:a7:45:9b:42:21:f1:76:b5:3d:bc:65:e8:1d:
                    00:0e:20:36:8f:bf:22:01:5d:fa:40:a7:fc:ec:36:
                    48:eb:1d:46:58:e0:65:9e:9b:96:0a:22:18:21:b4:
                    e9:2b:4d:3f:af:cc:59:23:53:7d:1f:d4:a7:b8:db:
                    37:5c:22:35:33:d1:3f:c7:4f:2e:8a:55:90:44:31:
                    b8:a2:39:d4:93:a7:a3:cd:71:35:72:cb:bc:65:27:
                    98:b2:c0:92:58:13:fb:3d:35:16:32:d6:19:4b:60:
                    c6:0d:43:f8:df:0f:a3:45:56:c0:f1:35:21:ad:1c:
                    9e:8f:45:e8:84:30:ef:7e:40:03:63:77:62:df:40:
                    13:9e:76:65:61:de:0a:37:0f:1a:75:7a:df:c9:7d:
                    8e:41:53:20:af:ec:9b:56:6d:06:25:4f:92:99:b0:
                    90:d6:96:5a:78:0c:95:63:6f:d2:e8:40:03:3e:94:
                    a6:e2:30:9a:1b:42:0f:6e:51:ac:91:5f:19:d9:1d:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:11:8C:82:18:F2:49:DB:6B:2E:AE:EE:35:54:C9:C5:B2:DC:BB
            X509v3 Authority Key Identifier:
                keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/SAYRjIIY8knbay6u7jVUycWy3Ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f0:f0:05:d5:13:37:94:c2:7a:39:21:4b:ab:fb:b5:13:d8:
         d6:a0:0d:20:df:b4:9e:70:18:1a:b9:c5:ca:fd:85:01:c7:cf:
         de:c3:65:89:72:da:e2:36:12:b9:64:9d:d7:c1:df:b1:3a:f4:
         92:f3:9a:79:bb:67:78:fc:39:90:07:0d:51:48:9f:9c:e2:39:
         33:1a:3c:18:3d:8e:d4:93:58:f5:22:e7:28:42:fe:61:74:a0:
         73:3e:66:32:a6:40:c2:17:e5:a9:22:54:c5:c9:bb:d4:2b:20:
         a3:d1:78:e9:05:4b:45:f0:67:08:4a:6f:68:0e:d5:1d:9d:23:
         ec:a2:36:a3:06:7a:0d:7c:05:d4:28:1c:41:14:53:53:00:17:
         d2:9b:e4:39:c7:c4:db:16:de:e7:45:65:d0:ca:a7:07:c3:42:
         07:bd:0e:26:34:f3:7b:76:e3:d7:64:ec:b9:85:57:40:9f:c6:
         3f:cb:ca:97:06:2a:d7:a8:8d:4e:7f:38:e9:9e:34:26:08:e3:
         0c:6c:b1:fd:87:4f:67:0d:6f:d7:cc:08:cc:43:38:f6:64:47:
         ff:17:92:8e:e8:59:12:31:91:9a:30:e8:78:36:b0:16:d5:e0:
         02:bc:7a:b5:09:39:a0:77:02:c4:ac:08:79:65:80:c7:ea:bc:
         0b:2e:42:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYZ0d4+elRSTeQZp+mmCAF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzdhMzRkODBkZWU3MjQ2YTc1NzhlNTM3YTQwNDkxN2Rk
Y2Y0MDkwHhcNMjMwMjA0MDAyNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA2MTE4YzgyMThmMjQ5ZGI2YjJlYWVlZTM1NTRjOWM1YjJkY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCI4K6Sdww88jWYcW5KGQuB1P5Af
EQIyUakq98AM4/eWbfKEFy6QswgQ69RGVPgBM5IvVMf9kDSMapHVvqdFm0Ih8Xa1
Pbxl6B0ADiA2j78iAV36QKf87DZI6x1GWOBlnpuWCiIYIbTpK00/r8xZI1N9H9Sn
uNs3XCI1M9E/x08uilWQRDG4ojnUk6ejzXE1csu8ZSeYssCSWBP7PTUWMtYZS2DG
DUP43w+jRVbA8TUhrRyej0XohDDvfkADY3di30ATnnZlYd4KNw8adXrfyX2OQVMg
r+ybVm0GJU+SmbCQ1pZaeAyVY2/S6EADPpSm4jCaG0IPblGskV8Z2R15CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgGEYyCGPJJ22suru41VMnFsty7MB8GA1UdIwQY
MBaAFNd3o02A3uckanV45TekBJF93PQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlalRZRGU1eVJxZFhqbE42UUVrWDNjOUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZmVmYTAtZjQ3Ni00Y2MwLWE0MGMt
NWEzOWIwNzRmNmY1LzEvU0FZUmpJSVk4a25iYXk2dTdqVlV5Y1d5M0xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZmVmYTAtZjQ3Ni00Y2MwLWE0MGMtNWEzOWIwNzRmNmY1
LzEvMTNlalRZRGU1eVJxZFhqbE42UUVrWDNjOUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/eyMA0G
CSqGSIb3DQEBCwUAA4IBAQBs8PAF1RM3lMJ6OSFLq/u1E9jWoA0g37SecBgaucXK
/YUBx8/ew2WJctriNhK5ZJ3Xwd+xOvSS85p5u2d4/DmQBw1RSJ+c4jkzGjwYPY7U
k1j1IucoQv5hdKBzPmYypkDCF+WpIlTFybvUKyCj0XjpBUtF8GcISm9oDtUdnSPs
ojajBnoNfAXUKBxBFFNTABfSm+Q5x8TbFt7nRWXQyqcHw0IHvQ4mNPN7duPXZOy5
hVdAn8Y/y8qXBirXqI1OfzjpnjQmCOMMbLH9h09nDW/XzAjMQzj2ZEf/F5KO6FkS
MZGaMOh4NrAW1eACvHq1CTmgdwLErAh5ZYDH6rwLLkIp
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org