Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Nkzx86fnqxfF2IVD_UtELRcRit4.roa
File:                     Nkzx86fnqxfF2IVD_UtELRcRit4.roa (raw, json)
Hash identifier:          Pw7X0dyxSjnCX0AARibwLBGnUes+ZdUKGzRQDPD+CG4=
Subject key identifier:   36:4C:F1:F3:A7:E7:AB:17:C5:D8:85:43:FD:4B:44:2D:17:11:8A:DE
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       0187749B02E51D32982AD8A26F6043E812B0
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Nkzx86fnqxfF2IVD_UtELRcRit4.roa
Signing time:             Wed 12 Apr 2023 08:35:28 +0000
ROA not before:           Wed 12 Apr 2023 08:35:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56534
IP address blocks:        92.255.96.0/21 maxlen: 21
                          93.174.72.0/21 maxlen: 21
                          185.47.52.0/22 maxlen: 22
                          185.47.54.0/24 maxlen: 24
                          92.255.60.0/24 maxlen: 24
                          89.223.80.0/21 maxlen: 21
                          92.255.88.0/21 maxlen: 32
                          2a04:ac00::/29 maxlen: 48

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 07:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:9b:02:e5:1d:32:98:2a:d8:a2:6f:60:43:e8:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Apr 12 08:35:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=364cf1f3a7e7ab17c5d88543fd4b442d17118ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:e2:e9:5d:e2:91:8e:b9:09:d6:92:1c:32:
                    9b:b5:49:a4:b6:d6:f4:a9:ec:3e:3e:45:0c:26:15:
                    a9:a7:c5:7d:48:50:38:50:a8:7a:fc:00:fb:2f:d6:
                    cc:a4:35:23:cc:4c:b9:49:bc:8e:be:b6:ca:a2:91:
                    b6:84:e9:f0:16:3e:b3:88:3c:9e:04:ac:da:3c:2a:
                    56:8a:8f:91:81:81:4d:07:31:17:ca:d5:98:63:77:
                    c1:56:8c:87:3b:e4:3b:d5:48:f7:3b:7b:08:c9:c5:
                    64:ee:f4:f8:a0:89:aa:34:a9:46:a6:29:37:c9:38:
                    e7:0d:8d:4c:cb:7c:40:20:30:db:be:fe:f9:31:06:
                    70:70:be:3c:6a:b2:74:22:ac:d8:dc:96:71:a1:e5:
                    a5:98:dc:57:f5:5e:7c:0f:ac:5b:34:97:e3:ec:43:
                    92:c4:cf:69:d9:90:a8:0f:8c:72:d2:ca:19:ed:24:
                    57:8a:24:90:d9:a0:4b:ee:8a:9f:4d:4b:5f:16:d7:
                    a7:0e:08:86:37:b4:b9:8e:e8:e7:95:72:33:ad:5e:
                    f9:15:e3:23:ca:cf:fe:08:84:5f:64:3a:cf:4c:7e:
                    be:f2:ac:43:dc:8d:fd:7f:42:fc:74:90:4f:7d:00:
                    03:ea:8c:9e:e2:98:6f:bd:90:23:9e:f7:f6:9d:00:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4C:F1:F3:A7:E7:AB:17:C5:D8:85:43:FD:4B:44:2D:17:11:8A:DE
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Nkzx86fnqxfF2IVD_UtELRcRit4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.223.80.0/21
                  92.255.60.0/24
                  92.255.88.0-92.255.103.255
                  93.174.72.0/21
                  185.47.52.0/22
                IPv6:
                  2a04:ac00::/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:db:45:c7:6c:3b:cc:6c:3e:4d:82:c9:be:2e:d0:aa:38:
         b0:f5:ef:4c:59:d6:f2:f2:91:bb:05:37:e4:04:d0:c5:ab:9b:
         c3:43:09:f0:91:48:03:d9:3d:bc:74:fe:c5:dd:0d:d7:88:57:
         a9:8a:f9:6d:3b:c4:5c:b1:6b:9a:15:8c:6c:02:ec:13:88:31:
         57:ed:42:12:2d:3e:df:0f:51:ec:b8:ce:55:aa:cf:d1:ae:0b:
         f5:66:23:84:0d:85:6e:9e:1e:42:dd:32:c7:e0:1e:2b:b9:af:
         e3:42:7a:14:9d:7b:ab:50:fd:15:84:67:81:4a:39:ee:2d:f4:
         06:f2:ea:fe:55:50:d4:c1:73:90:6d:90:df:3b:7c:71:5e:b1:
         23:bb:ce:57:4c:21:e8:b1:d3:94:74:62:01:66:d1:c9:89:29:
         7a:a0:e5:e9:0a:76:a3:82:e2:e3:96:cb:fe:bb:a9:0d:6a:3b:
         75:d7:16:f7:75:64:04:5e:cb:fe:d7:28:e6:5f:90:53:a5:f2:
         03:68:e3:2e:1f:26:25:f1:ba:5a:16:a7:eb:29:ff:6a:6e:db:
         42:27:12:f1:02:38:14:5e:0e:f5:be:90:89:57:71:20:cd:aa:
         6f:7d:19:d2:4f:60:7d:3f:27:ff:28:a2:dc:5a:41:03:58:8d:
         d4:1b:9e:3f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYd0mwLlHTKYKtiib2BD6BKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjMwNDEyMDgzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjRjZjFmM2E3ZTdhYjE3YzVkODg1NDNmZDRiNDQyZDE3MTE4YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuji6V3ikY65CdaSHDKbtUmkttb0
qew+PkUMJhWpp8V9SFA4UKh6/AD7L9bMpDUjzEy5SbyOvrbKopG2hOnwFj6ziDye
BKzaPCpWio+RgYFNBzEXytWYY3fBVoyHO+Q71Uj3O3sIycVk7vT4oImqNKlGpik3
yTjnDY1My3xAIDDbvv75MQZwcL48arJ0IqzY3JZxoeWlmNxX9V58D6xbNJfj7EOS
xM9p2ZCoD4xy0soZ7SRXiiSQ2aBL7oqfTUtfFtenDgiGN7S5jujnlXIzrV75FeMj
ys/+CIRfZDrPTH6+8qxD3I39f0L8dJBPfQAD6oye4phvvZAjnvf2nQDV+QIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFDZM8fOn56sXxdiFQ/1LRC0XEYreMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvTmt6eDg2Zm5xeGZGMklWRF9VdEVMUmNSaXQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDWd9QAwQA
XP88MAwDBANc/1gDBANc/2ADBANdrkgDBAK5LzQwDQQCAAIwBwMFAyoErAAwDQYJ
KoZIhvcNAQELBQADggEBACvU20XHbDvMbD5Ngsm+LtCqOLD170xZ1vLykbsFN+QE
0MWrm8NDCfCRSAPZPbx0/sXdDdeIV6mK+W07xFyxa5oVjGwC7BOIMVftQhItPt8P
Uey4zlWqz9GuC/VmI4QNhW6eHkLdMsfgHiu5r+NCehSde6tQ/RWEZ4FKOe4t9Aby
6v5VUNTBc5BtkN87fHFesSO7zldMIeix05R0YgFm0cmJKXqg5ekKdqOC4uOWy/67
qQ1qO3XXFvd1ZARey/7XKOZfkFOl8gNo4y4fJiXxuloWp+sp/2pu20InEvECOBRe
DvW+kIlXcSDNqm99GdJPYH0/J/8ootxaQQNYjdQbnj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org