Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SvpSQzTRsyu0x2Y3GjwLb7A0S1E.roa
File:                     SvpSQzTRsyu0x2Y3GjwLb7A0S1E.roa (raw, json)
Hash identifier:          Np2Hc6A7w5JAUXMUVQy3Z2gPk7zpqqULDvdeJ+h49nQ=
Subject key identifier:   4A:FA:52:43:34:D1:B3:2B:B4:C7:66:37:1A:3C:0B:6F:B0:34:4B:51
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018A98290B74D2E1C4FC4CDED5F45E9AB3CC
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SvpSQzTRsyu0x2Y3GjwLb7A0S1E.roa
Signing time:             Fri 15 Sep 2023 09:25:41 +0000
ROA not before:           Fri 15 Sep 2023 09:25:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199577
IP address blocks:        80.233.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:29:0b:74:d2:e1:c4:fc:4c:de:d5:f4:5e:9a:b3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Sep 15 09:25:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4afa524334d1b32bb4c766371a3c0b6fb0344b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:14:5f:1e:1b:23:26:23:5d:75:a3:04:7c:1d:
                    4f:59:53:61:54:71:55:28:6d:82:fa:0e:71:01:84:
                    23:9e:1c:0d:6a:48:f4:7b:dc:04:db:5d:98:07:71:
                    a3:fe:9f:a1:86:5d:f4:42:9c:74:dd:bb:50:f7:ef:
                    70:eb:b0:1f:85:48:50:a1:5a:d6:84:fe:c7:75:84:
                    cc:9f:e9:45:9f:e5:53:64:5a:6f:94:d0:6b:80:bd:
                    7c:34:31:2c:98:80:30:82:3f:7d:6a:4e:65:c3:8f:
                    4e:94:d3:3b:f4:98:7f:cb:eb:7f:79:39:46:4a:04:
                    6a:ae:7f:c0:1d:e5:3c:4d:a8:bd:2d:bd:49:16:31:
                    35:e0:bf:07:af:e1:9e:cf:dd:fc:42:0b:2b:96:b0:
                    c7:f3:0d:c7:09:0b:43:c3:fc:b3:f5:53:86:b1:aa:
                    fc:f9:ba:9f:e2:83:3a:88:8e:81:8b:e0:26:b5:72:
                    8c:c1:10:e3:f4:66:d4:9f:a0:d5:f9:3d:0b:ef:58:
                    88:59:aa:7e:5f:a6:97:31:76:13:0d:8a:1a:58:95:
                    a8:3a:96:b4:b1:96:91:63:82:50:c0:9b:8e:5e:cb:
                    36:fd:be:64:70:79:e8:61:d9:ea:9b:2f:82:e8:4f:
                    69:72:44:7d:7b:fd:a6:45:7d:d5:1e:a9:0e:b5:83:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:52:43:34:D1:B3:2B:B4:C7:66:37:1A:3C:0B:6F:B0:34:4B:51
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/SvpSQzTRsyu0x2Y3GjwLb7A0S1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:43:86:c6:a3:8d:a2:cf:97:ae:fc:22:c7:47:d7:32:2d:19:
         98:7f:df:ce:29:f1:dd:00:3c:db:02:47:5f:8e:4a:1d:81:a2:
         5b:dc:19:00:ca:1d:14:f1:01:40:9c:f8:80:7d:13:a7:35:39:
         80:79:b5:6e:bc:b3:59:6f:d8:16:49:fb:57:6f:26:03:34:df:
         1a:e0:25:ea:95:ec:33:4d:09:16:03:eb:93:ac:f9:5b:96:78:
         22:67:d8:8b:3f:5a:e1:54:bf:55:ad:a1:84:1f:43:ab:ab:e8:
         ff:76:57:26:2b:99:90:5a:1f:05:71:30:13:f0:f6:f1:cd:0c:
         88:3d:b7:d1:5e:38:38:74:a6:ff:68:f5:24:fd:de:f3:62:07:
         de:dc:e7:a5:e1:a1:0a:40:be:a0:c6:ed:2f:71:76:08:c3:90:
         a0:0e:3f:4e:68:a2:77:41:3f:91:d7:a3:af:d4:64:e8:7e:79:
         95:bb:7f:49:26:65:d7:3a:06:15:7a:c7:38:62:a6:cc:bd:43:
         88:2e:f9:f3:ca:07:51:8b:ef:79:e9:83:2e:b2:00:39:03:00:
         17:c2:9d:7a:54:36:d6:be:02:67:c6:61:0d:be:8b:34:37:51:
         74:f8:25:e8:8f:f8:2d:88:78:14:fa:eb:dd:61:37:2e:91:59:
         93:dc:f5:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqYKQt00uHE/Eze1fRemrPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwOTE1MDkyNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWZhNTI0MzM0ZDFiMzJiYjRjNzY2MzcxYTNjMGI2ZmIwMzQ0YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxRfHhsjJiNddaMEfB1PWVNhVHFV
KG2C+g5xAYQjnhwNakj0e9wE212YB3Gj/p+hhl30Qpx03btQ9+9w67AfhUhQoVrW
hP7HdYTMn+lFn+VTZFpvlNBrgL18NDEsmIAwgj99ak5lw49OlNM79Jh/y+t/eTlG
SgRqrn/AHeU8Tai9Lb1JFjE14L8Hr+Gez938QgsrlrDH8w3HCQtDw/yz9VOGsar8
+bqf4oM6iI6Bi+AmtXKMwRDj9GbUn6DV+T0L71iIWap+X6aXMXYTDYoaWJWoOpa0
sZaRY4JQwJuOXss2/b5kcHnoYdnqmy+C6E9pckR9e/2mRX3VHqkOtYNIlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEr6UkM00bMrtMdmNxo8C2+wNEtRMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvU3ZwU1F6VFJzeXUweDJZM0dqd0xiN0EwUzFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOm7MA0G
CSqGSIb3DQEBCwUAA4IBAQCTQ4bGo42iz5eu/CLHR9cyLRmYf9/OKfHdADzbAkdf
jkodgaJb3BkAyh0U8QFAnPiAfROnNTmAebVuvLNZb9gWSftXbyYDNN8a4CXqlewz
TQkWA+uTrPlblngiZ9iLP1rhVL9VraGEH0Orq+j/dlcmK5mQWh8FcTAT8PbxzQyI
PbfRXjg4dKb/aPUk/d7zYgfe3Oel4aEKQL6gxu0vcXYIw5CgDj9OaKJ3QT+R16Ov
1GTofnmVu39JJmXXOgYVesc4YqbMvUOILvnzygdRi+956YMusgA5AwAXwp16VDbW
vgJnxmENvos0N1F0+CXoj/gtiHgU+uvdYTcukVmT3PWl
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org