Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa
File:                     YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa (raw, json)
Hash identifier:          LPMwoZnrFnPzvFTaCLuepo7zyfJFhsRm4W8l+v4Loj4=
Subject key identifier:   60:8B:93:E8:6A:F4:AA:E5:5A:D5:43:12:3A:F1:D9:C2:EB:92:C4:B3
Certificate issuer:       /CN=94962e2afa7748f45265d89fd15624b584e72466
Certificate serial:       0185737171ACE4D24A39A54AFE1E7131DD29
Authority key identifier: 94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa
Signing time:             Mon 02 Jan 2023 17:04:52 +0000
ROA not before:           Mon 02 Jan 2023 17:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     680
IP address blocks:        131.220.0.0/16 maxlen: 17
                          193.23.254.0/24 maxlen: 24
                          193.30.3.0/24 maxlen: 24
                          2a00:5ba0::/29 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 May 2023 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:71:71:ac:e4:d2:4a:39:a5:4a:fe:1e:71:31:dd:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94962e2afa7748f45265d89fd15624b584e72466
        Validity
            Not Before: Jan  2 17:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=608b93e86af4aae55ad543123af1d9c2eb92c4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:c0:ad:27:15:50:54:78:f6:46:7a:1d:cc:
                    a7:36:32:a3:a3:5b:70:a5:5e:8c:70:90:06:e7:5d:
                    a8:f1:b7:3d:0a:26:d4:f4:10:59:bb:d4:38:69:97:
                    9a:0e:bc:6f:ff:18:fc:74:82:ee:8e:db:66:1e:3e:
                    e8:a0:39:cb:99:42:22:bb:70:7e:d4:bd:3e:f2:04:
                    1b:be:84:20:46:2f:0f:0c:b8:dd:43:94:02:85:cb:
                    f7:8c:af:5d:c1:f0:6b:13:9d:03:47:5d:e7:1c:15:
                    86:70:8a:91:40:22:50:3d:09:ff:6b:47:c0:88:e3:
                    aa:ca:29:d3:9e:46:b8:c7:29:0a:1d:b0:f1:5c:36:
                    b7:40:65:ef:90:c4:c6:3a:a0:26:96:c1:92:41:5a:
                    bc:32:40:1f:5f:b1:45:c6:c4:09:3e:22:94:f7:97:
                    f5:70:54:68:c7:dd:65:5f:d5:7b:40:32:a6:77:4f:
                    dc:78:d1:46:65:c1:0d:3b:b6:5a:a2:68:93:b0:96:
                    f9:49:81:73:5c:d5:61:10:79:a3:f0:7c:32:02:b6:
                    d8:85:1f:22:fa:28:0c:25:02:20:f2:79:ec:f7:47:
                    33:67:ae:eb:e8:b7:ba:75:84:86:eb:82:32:f1:44:
                    d2:41:36:32:bd:36:79:7d:6e:5c:57:62:df:7d:97:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8B:93:E8:6A:F4:AA:E5:5A:D5:43:12:3A:F1:D9:C2:EB:92:C4:B3
            X509v3 Authority Key Identifier:
                keyid:94:96:2E:2A:FA:77:48:F4:52:65:D8:9F:D1:56:24:B5:84:E7:24:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJYuKvp3SPRSZdif0VYktYTnJGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/YIuT6Gr0quVa1UMSOvHZwuuSxLM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2db683-c9e9-4647-823b-cd403bdee4df/1/lJYuKvp3SPRSZdif0VYktYTnJGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.220.0.0/16
                  193.23.254.0/24
                  193.30.3.0/24
                IPv6:
                  2a00:5ba0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:8b:bc:14:14:db:39:60:c3:0e:4d:dc:2f:e7:b9:99:ad:
         58:de:36:a6:dd:cf:00:d4:c9:ab:12:db:5e:d1:07:59:7c:94:
         b4:8e:de:bc:e0:9c:5d:ca:40:c8:31:20:55:9c:e4:39:36:71:
         54:78:97:f2:1f:23:bd:04:9f:5f:bf:53:b1:01:18:35:72:a3:
         14:ca:53:73:4e:9a:30:84:28:6a:db:49:9f:06:e8:82:1a:02:
         c3:10:3b:6e:e3:44:f3:e1:83:a1:24:19:92:6f:e4:f2:42:ae:
         38:88:1f:64:2d:94:eb:79:bd:37:6b:3b:2d:8f:d9:98:79:2d:
         2e:91:40:8f:59:68:d6:b2:88:6e:bc:c2:6f:d6:ba:c7:96:e2:
         73:a9:15:55:3c:9b:69:ed:69:88:13:59:ec:df:29:e0:23:7f:
         01:53:01:cd:e5:e2:b3:98:30:3e:31:46:68:7d:43:85:81:fb:
         d5:8a:8a:f4:f3:27:21:a7:cb:0f:01:30:73:c7:80:35:7a:8c:
         e4:4a:84:b9:fd:4a:8c:cb:00:bc:6b:18:80:31:d5:5b:10:f5:
         aa:c8:e9:96:83:b4:1f:41:cc:52:bb:b3:81:a6:89:27:51:fe:
         54:e0:ce:e1:4c:31:42:a8:b9:96:68:cc:c8:e6:9c:7d:65:e4:
         7b:eb:16:e3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVzcXGs5NJKOaVK/h5xMd0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTYyZTJhZmE3NzQ4ZjQ1MjY1ZDg5ZmQxNTYyNGI1ODRl
NzI0NjYwHhcNMjMwMTAyMTcwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDhiOTNlODZhZjRhYWU1NWFkNTQzMTIzYWYxZDljMmViOTJjNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxXArScVUFR49kZ6HcynNjKjo1tw
pV6McJAG512o8bc9CibU9BBZu9Q4aZeaDrxv/xj8dILujttmHj7ooDnLmUIiu3B+
1L0+8gQbvoQgRi8PDLjdQ5QChcv3jK9dwfBrE50DR13nHBWGcIqRQCJQPQn/a0fA
iOOqyinTnka4xykKHbDxXDa3QGXvkMTGOqAmlsGSQVq8MkAfX7FFxsQJPiKU95f1
cFRox91lX9V7QDKmd0/ceNFGZcENO7ZaomiTsJb5SYFzXNVhEHmj8HwyArbYhR8i
+igMJQIg8nns90czZ67r6Le6dYSG64Iy8UTSQTYyvTZ5fW5cV2LffZfmjQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGCLk+hq9KrlWtVDEjrx2cLrksSzMB8GA1UdIwQY
MBaAFJSWLir6d0j0UmXYn9FWJLWE5yRmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2It
Y2Q0MDNiZGVlNGRmLzEvWUl1VDZHcjBxdVZhMVVNU092SFp3dXVTeExNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yZGI2ODMtYzllOS00NjQ3LTgyM2ItY2Q0MDNiZGVlNGRm
LzEvbEpZdUt2cDNTUFJTWmRpZjBWWWt0WVRuSkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMAg9wDBADB
F/4DBADBHgMwDQQCAAIwBwMFAyoAW6AwDQYJKoZIhvcNAQELBQADggEBAI9ni7wU
FNs5YMMOTdwv57mZrVjeNqbdzwDUyasS217RB1l8lLSO3rzgnF3KQMgxIFWc5Dk2
cVR4l/IfI70En1+/U7EBGDVyoxTKU3NOmjCEKGrbSZ8G6IIaAsMQO27jRPPhg6Ek
GZJv5PJCrjiIH2QtlOt5vTdrOy2P2Zh5LS6RQI9ZaNayiG68wm/WuseW4nOpFVU8
m2ntaYgTWezfKeAjfwFTAc3l4rOYMD4xRmh9Q4WB+9WKivTzJyGnyw8BMHPHgDV6
jORKhLn9SozLALxrGIAx1VsQ9arI6ZaDtB9BzFK7s4GmiSdR/lTgzuFMMUKouZZo
zMjmnH1l5HvrFuM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:29 2024 by rpki-client on console-ams.rpki-client.org