Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/N81bMWVvL8ErF3sKiOLnc63KFJw.roa
File:                     N81bMWVvL8ErF3sKiOLnc63KFJw.roa (raw, json)
Hash identifier:          27wy/4atQuFRrQoT/2EK83X5Cj9A14rs1b++zcyROyY=
Subject key identifier:   37:CD:5B:31:65:6F:2F:C1:2B:17:7B:0A:88:E2:E7:73:AD:CA:14:9C
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       0186080C0A871C0F8E58E13B8C0237091085
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/N81bMWVvL8ErF3sKiOLnc63KFJw.roa
Signing time:             Tue 31 Jan 2023 13:37:32 +0000
ROA not before:           Tue 31 Jan 2023 13:37:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        185.255.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 18:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:0c:0a:87:1c:0f:8e:58:e1:3b:8c:02:37:09:10:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jan 31 13:37:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37cd5b31656f2fc12b177b0a88e2e773adca149c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:93:4a:4a:a6:35:56:eb:c0:2c:69:c7:4b:
                    0c:dc:94:1a:1c:06:c3:a1:fe:1f:94:e4:55:e5:cf:
                    61:fc:25:3d:a0:a2:11:cc:11:8a:29:ef:84:64:01:
                    7c:73:3c:81:86:90:44:27:d2:4f:3c:c3:f8:1c:43:
                    16:65:b6:79:ce:ab:ff:97:5d:b1:c9:b8:2f:d8:34:
                    53:28:fb:95:bf:09:83:8a:21:09:f3:96:98:bf:b4:
                    a0:4e:32:cc:83:6e:42:f4:f9:85:63:50:c1:e3:cb:
                    33:b1:71:22:e7:72:ba:77:31:c1:82:f7:21:a0:0f:
                    e9:27:f0:de:e3:e9:b1:41:c9:67:56:21:2d:6b:32:
                    1b:69:f0:79:9b:58:76:6f:25:75:77:e5:a1:ca:36:
                    84:af:bb:36:5c:db:66:d0:12:b7:18:b8:05:4c:37:
                    6a:2f:46:08:c6:cb:68:d7:67:ae:a4:34:ce:38:77:
                    a2:68:93:fe:03:19:8e:dd:c0:6c:38:ce:76:22:ca:
                    72:f2:4a:ba:53:75:d0:b4:47:68:38:5f:25:1b:e3:
                    c8:e7:e4:43:e8:ca:2c:e4:c1:4b:8e:bc:c4:63:8c:
                    dc:65:51:a8:06:50:a0:de:69:9c:28:6b:94:db:fb:
                    a5:8b:e9:7b:02:48:6f:08:73:09:6d:1a:a9:46:e1:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:5B:31:65:6F:2F:C1:2B:17:7B:0A:88:E2:E7:73:AD:CA:14:9C
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/N81bMWVvL8ErF3sKiOLnc63KFJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:33:55:54:ed:d6:95:bb:0d:a0:66:ab:45:27:fb:b2:2c:ba:
         71:69:c8:13:5c:7c:40:3e:ba:26:b6:f6:bc:bf:00:e7:b6:3e:
         80:6d:4a:24:5b:8f:49:11:7d:1b:b1:92:3f:50:72:01:a4:40:
         c8:76:31:a3:90:79:81:0a:61:39:2f:42:7a:09:92:a6:69:6e:
         84:3b:42:79:d0:b4:4b:01:de:9c:2b:b2:27:e4:f8:9c:de:9d:
         87:75:08:9d:f5:70:b3:6c:20:83:2f:6e:03:52:75:29:e0:7e:
         06:7d:9e:4d:3f:62:c1:4a:a8:af:68:20:65:30:10:6a:90:d9:
         40:e9:88:9d:c0:a5:9c:c3:b8:da:63:bb:ea:a3:c7:f2:ec:8e:
         a2:d2:d8:60:4f:2e:ad:b7:77:a0:d5:c8:90:59:0c:6a:b2:69:
         38:63:92:7c:4e:7f:b1:ba:c5:71:4b:65:6e:a5:d4:ba:49:65:
         47:52:35:48:be:78:a0:08:7b:e1:3f:33:d0:78:26:e8:65:0c:
         00:22:71:f5:c0:1c:f8:97:7f:ab:d7:43:d0:fb:42:79:d0:0c:
         86:4e:01:b8:ab:a3:92:09:6f:9e:8d:39:3c:5d:b1:f9:9a:a7:
         c1:13:73:d2:56:ca:be:a0:60:49:4f:3a:bc:53:18:41:c8:87:
         14:af:38:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYIDAqHHA+OWOE7jAI3CRCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjMwMTMxMTMzNzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2NkNWIzMTY1NmYyZmMxMmIxNzdiMGE4OGUyZTc3M2FkY2ExNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ2TSkqmNVbrwCxpx0sM3JQaHAbD
of4flORV5c9h/CU9oKIRzBGKKe+EZAF8czyBhpBEJ9JPPMP4HEMWZbZ5zqv/l12x
ybgv2DRTKPuVvwmDiiEJ85aYv7SgTjLMg25C9PmFY1DB48szsXEi53K6dzHBgvch
oA/pJ/De4+mxQclnViEtazIbafB5m1h2byV1d+WhyjaEr7s2XNtm0BK3GLgFTDdq
L0YIxsto12eupDTOOHeiaJP+AxmO3cBsOM52Ispy8kq6U3XQtEdoOF8lG+PI5+RD
6Mos5MFLjrzEY4zcZVGoBlCg3mmcKGuU2/uli+l7AkhvCHMJbRqpRuEfRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfNWzFlby/BKxd7Coji53OtyhScMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvTjgxYk1XVnZMOEVyRjNzS2lPTG5jNjNLRkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf/GMA0G
CSqGSIb3DQEBCwUAA4IBAQAQM1VU7daVuw2gZqtFJ/uyLLpxacgTXHxAPromtva8
vwDntj6AbUokW49JEX0bsZI/UHIBpEDIdjGjkHmBCmE5L0J6CZKmaW6EO0J50LRL
Ad6cK7In5Pic3p2HdQid9XCzbCCDL24DUnUp4H4GfZ5NP2LBSqivaCBlMBBqkNlA
6YidwKWcw7jaY7vqo8fy7I6i0thgTy6tt3eg1ciQWQxqsmk4Y5J8Tn+xusVxS2Vu
pdS6SWVHUjVIvnigCHvhPzPQeCboZQwAInH1wBz4l3+r10PQ+0J50AyGTgG4q6OS
CW+ejTk8XbH5mqfBE3PSVsq+oGBJTzq8UxhByIcUrzhm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org