Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/7W4m2_B0cUFeHQ3HgexJqhlGsGE.roa
File:                     7W4m2_B0cUFeHQ3HgexJqhlGsGE.roa (raw, json)
Hash identifier:          s9kFs6zOviwF1oA3iQTQ7KO9cYG5BOl20Fp2QD1LgNE=
Subject key identifier:   ED:6E:26:DB:F0:74:71:41:5E:1D:0D:C7:81:EC:49:AA:19:46:B0:61
Certificate issuer:       /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial:       01857230E233345221279454F6B956FF7C66
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/7W4m2_B0cUFeHQ3HgexJqhlGsGE.roa
Signing time:             Mon 02 Jan 2023 11:14:44 +0000
ROA not before:           Mon 02 Jan 2023 11:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212269
IP address blocks:        194.37.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:30:e2:33:34:52:21:27:94:54:f6:b9:56:ff:7c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
        Validity
            Not Before: Jan  2 11:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed6e26dbf07471415e1d0dc781ec49aa1946b061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:4e:69:47:ee:c6:70:d9:27:44:4e:5b:39:
                    cc:3f:08:da:fd:a1:48:94:b3:bc:4c:57:d6:b1:6f:
                    f5:82:e0:ed:2c:1e:9f:05:50:44:1d:0a:36:a7:e8:
                    6d:a3:c5:ea:b6:25:53:6e:c1:4e:46:20:6f:d0:5d:
                    29:21:b6:93:fa:6e:67:fe:cc:3d:db:b5:fe:2d:e5:
                    b9:2f:56:33:53:f0:ed:85:b7:a8:55:41:63:d1:ae:
                    4c:f6:a1:d8:14:cf:76:c0:90:53:98:5f:bc:5b:6a:
                    ab:b8:b4:28:10:fa:fb:4c:b3:90:04:2e:af:cf:f7:
                    3c:f9:44:cc:50:5d:74:b1:32:7d:a3:19:85:cf:84:
                    cf:b0:6d:26:43:ae:a3:81:71:d7:17:a6:93:10:bb:
                    3a:a7:96:9e:12:7d:d9:e3:96:c2:a9:0c:90:b7:a5:
                    e3:7f:65:75:24:31:aa:4e:41:1b:df:b1:f6:e8:df:
                    9c:bd:98:8a:b8:7c:91:c1:b6:45:c4:00:63:c7:8c:
                    9d:99:d5:78:db:c4:74:18:d8:e5:0f:d6:37:ad:5d:
                    55:a5:10:da:e6:da:68:0c:89:2b:59:89:67:b4:28:
                    52:d8:0c:bf:dc:c5:fd:1f:a3:96:d9:ed:2b:72:1c:
                    91:31:72:e8:8d:ff:e0:86:32:d1:8a:97:c4:6e:a7:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:26:DB:F0:74:71:41:5E:1D:0D:C7:81:EC:49:AA:19:46:B0:61
            X509v3 Authority Key Identifier:
                keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/7W4m2_B0cUFeHQ3HgexJqhlGsGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.37.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:38:ed:62:fd:ee:08:ce:8a:95:32:72:94:0c:ff:fc:c3:
         5c:26:c5:c8:ae:12:c2:32:66:6c:57:29:40:a6:a1:26:46:60:
         3c:48:85:27:37:4e:cf:49:0e:8c:ac:7e:8c:44:bd:98:cb:4d:
         0a:4d:07:38:82:d1:6c:15:1b:46:89:e0:7a:09:12:fd:74:7e:
         dc:c4:fd:fa:11:22:ef:fd:f3:1a:d6:4f:73:96:85:1b:eb:4d:
         65:c9:90:7e:a5:05:55:83:cb:78:c5:da:ac:ee:12:32:8a:86:
         ab:a4:ba:09:98:7b:07:bf:e3:7b:9c:ea:07:f7:26:6b:5a:73:
         b3:f2:88:b1:50:1e:78:a7:7a:7c:d4:e8:1b:63:ca:f9:6c:dc:
         4c:9c:2d:cb:55:78:48:53:e2:e0:a3:91:e6:a5:0c:a1:dd:d2:
         f8:2d:46:1e:ab:c8:87:6c:1a:9e:f0:97:f8:aa:fc:90:e0:ac:
         a5:47:af:88:c1:f3:3f:16:45:61:db:58:93:b2:03:cf:51:07:
         3e:e3:f6:1f:71:12:12:43:22:53:91:c8:e7:4f:bc:c8:35:e3:
         48:a4:6f:b2:44:bb:46:5b:2e:ff:17:32:f2:b1:bf:40:ad:c6:
         b0:a5:18:9d:96:88:79:85:2e:0d:d5:e8:21:90:7f:8b:00:b5:
         9b:a3:e4:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMOIzNFIhJ5RU9rlW/3xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjMwMTAyMTExNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDZlMjZkYmYwNzQ3MTQxNWUxZDBkYzc4MWVjNDlhYTE5NDZiMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg45OaUfuxnDZJ0ROWznMPwja/aFI
lLO8TFfWsW/1guDtLB6fBVBEHQo2p+hto8XqtiVTbsFORiBv0F0pIbaT+m5n/sw9
27X+LeW5L1YzU/DthbeoVUFj0a5M9qHYFM92wJBTmF+8W2qruLQoEPr7TLOQBC6v
z/c8+UTMUF10sTJ9oxmFz4TPsG0mQ66jgXHXF6aTELs6p5aeEn3Z45bCqQyQt6Xj
f2V1JDGqTkEb37H26N+cvZiKuHyRwbZFxABjx4ydmdV428R0GNjlD9Y3rV1VpRDa
5tpoDIkrWYlntChS2Ay/3MX9H6OW2e0rchyRMXLojf/ghjLRipfEbqdH3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1uJtvwdHFBXh0Nx4HsSaoZRrBhMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvN1c0bTJfQjBjVUZlSFEzSGdleEpxaGxHc0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiVeMA0G
CSqGSIb3DQEBCwUAA4IBAQCU8TjtYv3uCM6KlTJylAz//MNcJsXIrhLCMmZsVylA
pqEmRmA8SIUnN07PSQ6MrH6MRL2Yy00KTQc4gtFsFRtGieB6CRL9dH7cxP36ESLv
/fMa1k9zloUb601lyZB+pQVVg8t4xdqs7hIyioarpLoJmHsHv+N7nOoH9yZrWnOz
8oixUB54p3p81OgbY8r5bNxMnC3LVXhIU+Lgo5HmpQyh3dL4LUYeq8iHbBqe8Jf4
qvyQ4KylR6+IwfM/FkVh21iTsgPPUQc+4/YfcRISQyJTkcjnT7zINeNIpG+yRLtG
Wy7/FzLysb9ArcawpRidloh5hS4N1eghkH+LALWbo+T/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:13 2024 by rpki-client on console-fra.rpki-client.org