Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa
File:                     6LHPY0FozTU2hSS3fcY1BEVdLLc.roa (raw, json)
Hash identifier:          gMBtT9qTa6J6mDr/F8rBD4z7ZSXnzaH6uJCmP0La24o=
Subject key identifier:   E8:B1:CF:63:41:68:CD:35:36:85:24:B7:7D:C6:35:04:45:5D:2C:B7
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       01892C15580241FE95FA03CD4ACF2F593CA3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa
Signing time:             Thu 06 Jul 2023 16:42:23 +0000
ROA not before:           Thu 06 Jul 2023 16:42:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202492
IP address blocks:        83.147.196.0/22 maxlen: 22
                          83.147.195.0/24 maxlen: 24
                          94.241.188.0/22 maxlen: 22
                          83.147.200.0/22 maxlen: 22
                          83.147.204.0/22 maxlen: 22
                          83.147.208.0/24 maxlen: 24
                          83.147.210.0/24 maxlen: 24
                          83.147.211.0/24 maxlen: 24
                          83.147.209.0/24 maxlen: 24
                          83.147.218.0/23 maxlen: 23
                          83.147.220.0/23 maxlen: 23
                          83.147.224.0/22 maxlen: 22
                          83.147.228.0/22 maxlen: 22
                          83.147.236.0/22 maxlen: 22
                          178.253.0.0/21 maxlen: 21
                          94.241.144.0/21 maxlen: 21
                          178.253.14.0/23 maxlen: 23
                          178.253.17.0/24 maxlen: 24
                          178.253.18.0/23 maxlen: 23
                          178.253.20.0/23 maxlen: 23
                          178.253.24.0/23 maxlen: 23
                          178.253.28.0/23 maxlen: 24
                          178.253.30.0/24 maxlen: 24
                          178.253.36.0/23 maxlen: 23
                          178.253.34.0/23 maxlen: 23
                          178.253.46.0/23 maxlen: 23
                          178.253.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2c:15:58:02:41:fe:95:fa:03:cd:4a:cf:2f:59:3c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jul  6 16:42:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8b1cf634168cd35368524b77dc63504455d2cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:1e:2e:6c:d4:66:4a:3b:25:9a:0c:a4:d6:
                    ec:03:75:62:5b:29:dc:3f:b2:a5:1d:1b:54:c7:db:
                    3e:78:89:98:84:cc:b9:cd:ff:d4:0f:82:db:ac:3d:
                    3a:21:c1:20:59:d5:be:f9:45:34:40:d0:15:a3:59:
                    62:43:cb:dc:b1:e3:ce:e2:97:66:33:a6:7e:ad:6c:
                    8d:89:3c:13:6a:99:2e:3b:32:1d:42:ff:e2:c1:27:
                    36:78:9e:dd:19:bb:8b:b8:f4:05:c5:42:91:49:8b:
                    39:4b:6d:bc:1d:aa:d4:a6:5e:65:3e:9c:54:0b:b3:
                    23:f8:05:eb:37:bd:b4:b1:49:1e:6b:11:e1:5c:07:
                    83:03:f8:ac:8c:85:b0:38:7f:8a:0f:e8:ec:3e:ed:
                    7c:4b:96:28:05:49:80:9c:8b:9c:c1:5c:e7:83:87:
                    c9:8b:1d:76:8f:e8:4c:6f:4e:00:34:5f:27:1c:de:
                    91:a8:71:d7:87:65:99:06:c2:b4:c9:54:8d:9e:b1:
                    55:64:3c:95:3d:89:48:1f:2d:f8:2a:dd:e9:4b:33:
                    2a:74:9e:fe:02:1a:3d:39:f4:6b:0c:a9:95:cc:7e:
                    9b:d8:fa:2c:95:5d:ea:d6:6e:30:24:92:54:dd:11:
                    de:de:3d:7b:6f:15:46:e9:d3:6c:b2:98:dd:a6:15:
                    b5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B1:CF:63:41:68:CD:35:36:85:24:B7:7D:C6:35:04:45:5D:2C:B7
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/6LHPY0FozTU2hSS3fcY1BEVdLLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.195.0-83.147.211.255
                  83.147.218.0-83.147.221.255
                  83.147.224.0/21
                  83.147.236.0/22
                  94.241.144.0/21
                  94.241.188.0/22
                  178.253.0.0/21
                  178.253.14.0/23
                  178.253.17.0-178.253.21.255
                  178.253.24.0/23
                  178.253.28.0-178.253.30.255
                  178.253.34.0-178.253.37.255
                  178.253.46.0/23
                  178.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:fa:02:b7:d6:10:1e:9e:41:6c:2d:b5:75:44:bb:aa:e3:25:
         3a:64:45:d3:03:0b:c2:d5:4a:04:04:b5:6b:82:06:23:f2:f1:
         da:a6:ca:d0:22:f2:20:8d:02:30:a9:6a:19:16:c1:58:43:c2:
         a6:d3:55:5a:4c:3d:32:b9:b4:8f:b4:87:46:29:c7:4d:f5:ba:
         0b:2c:25:c8:37:59:ec:57:8b:bd:e3:91:30:47:22:f1:e8:5a:
         2e:2b:30:2f:f6:4a:b7:a0:0f:12:66:20:5f:b6:48:cf:8b:34:
         7b:b3:1e:8d:18:b8:40:a1:7d:1d:b2:e3:99:04:19:39:f0:ce:
         fe:b5:47:32:8f:d5:ae:76:d3:8e:34:5b:99:71:dd:52:75:45:
         ad:20:fc:66:60:b8:42:65:55:bb:9c:ba:64:ce:05:6f:f4:21:
         7e:e6:3b:56:4a:a4:30:9b:4b:a7:8e:52:34:cc:ae:21:7f:06:
         65:c4:2c:f1:fb:22:c8:ac:76:df:7b:49:e2:e3:97:3d:6f:b0:
         51:c4:6f:50:b5:73:34:8b:5e:53:d4:a4:f4:0d:44:f7:12:67:
         6f:0c:3a:8e:77:2c:8b:f8:4a:d6:a3:47:53:32:24:93:a8:7e:
         02:73:0c:26:30:bd:dd:b0:6a:86:e0:ac:04:ec:e9:8d:f8:1a:
         62:75:28:86
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAYksFVgCQf6V+gPNSs8vWTyjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNzA2MTY0MjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGIxY2Y2MzQxNjhjZDM1MzY4NTI0Yjc3ZGM2MzUwNDQ1NWQyY2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntEeLmzUZko7JZoMpNbsA3ViWync
P7KlHRtUx9s+eImYhMy5zf/UD4LbrD06IcEgWdW++UU0QNAVo1liQ8vcsePO4pdm
M6Z+rWyNiTwTapkuOzIdQv/iwSc2eJ7dGbuLuPQFxUKRSYs5S228HarUpl5lPpxU
C7Mj+AXrN720sUkeaxHhXAeDA/isjIWwOH+KD+jsPu18S5YoBUmAnIucwVzng4fJ
ix12j+hMb04ANF8nHN6RqHHXh2WZBsK0yVSNnrFVZDyVPYlIHy34Kt3pSzMqdJ7+
Aho9OfRrDKmVzH6b2PoslV3q1m4wJJJU3RHe3j17bxVG6dNsspjdphW1AwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFOixz2NBaM01NoUkt33GNQRFXSy3MB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvNkxIUFkwRm96VFUyaFNTM2ZjWTFCRVZkTExjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfDAMAwQA
U5PDAwQCU5PQMAwDBAFTk9oDBAFTk9wDBANTk+ADBAJTk+wDBANe8ZADBAJe8bwD
BAOy/QADBAGy/Q4wDAMEALL9EQMEAbL9FAMEAbL9GDAMAwQCsv0cAwQAsv0eMAwD
BAGy/SIDBAGy/SQDBAGy/S4DBACy/TYwDQYJKoZIhvcNAQELBQADggEBAED6ArfW
EB6eQWwttXVEu6rjJTpkRdMDC8LVSgQEtWuCBiPy8dqmytAi8iCNAjCpahkWwVhD
wqbTVVpMPTK5tI+0h0Ypx031ugssJcg3WexXi73jkTBHIvHoWi4rMC/2SregDxJm
IF+2SM+LNHuzHo0YuEChfR2y45kEGTnwzv61RzKP1a520440W5lx3VJ1Ra0g/GZg
uEJlVbucumTOBW/0IX7mO1ZKpDCbS6eOUjTMriF/BmXELPH7Isisdt97SeLjlz1v
sFHEb1C1czSLXlPUpPQNRPcSZ28MOo53LIv4StajR1MyJJOofgJzDCYwvd2waobg
rATs6Y34GmJ1KIY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org