Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/sQRawxFBTH1VKoRJE4UuAz15JkI.roa
File:                     sQRawxFBTH1VKoRJE4UuAz15JkI.roa (raw, json)
Hash identifier:          t339EWyU/i+5NTMhxUt3RT2SpuOHr5AsN38E2pxcV+4=
Subject key identifier:   B1:04:5A:C3:11:41:4C:7D:55:2A:84:49:13:85:2E:03:3D:79:26:42
Certificate issuer:       /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial:       018570E7424E723220C551B78D3BFA1F6C6B
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/sQRawxFBTH1VKoRJE4UuAz15JkI.roa
Signing time:             Mon 02 Jan 2023 05:14:42 +0000
ROA not before:           Mon 02 Jan 2023 05:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208770
IP address blocks:        195.80.32.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 May 2023 14:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:42:4e:72:32:20:c5:51:b7:8d:3b:fa:1f:6c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
        Validity
            Not Before: Jan  2 05:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1045ac311414c7d552a844913852e033d792642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:f5:75:29:04:79:cf:9d:e1:46:6a:bf:37:
                    fe:6b:93:03:76:87:ba:1e:ea:eb:aa:23:b0:27:fc:
                    6d:80:f0:8b:6e:4a:c8:ed:6a:11:e7:5a:3c:74:e1:
                    4c:54:e1:12:c5:b2:d2:f5:cd:ed:80:82:c0:e1:32:
                    0e:74:9b:19:d6:5d:53:28:44:c0:22:32:2a:47:bc:
                    04:10:82:6b:55:63:bf:03:0e:19:72:bd:7e:26:ec:
                    94:0a:3e:fc:e3:13:4b:0b:54:2a:35:9d:24:97:27:
                    ac:fe:54:bd:6c:90:6c:84:20:97:8c:6a:24:2e:f8:
                    e3:f5:c9:18:44:1f:93:5a:8e:71:cd:a5:df:42:85:
                    18:35:7f:7d:39:50:46:68:8e:b7:97:48:6c:16:d3:
                    27:50:cf:47:a0:92:4c:90:6f:75:04:62:0a:8a:9d:
                    29:b5:99:06:ea:24:bf:8d:3f:45:f0:f3:ad:2b:1c:
                    df:50:ba:c6:b2:f0:57:ed:28:06:89:1d:33:41:77:
                    c4:a4:69:62:b5:45:b4:38:8a:e7:d7:7a:6c:d1:43:
                    55:4a:f8:00:5e:c4:9a:ba:e6:67:d9:81:f6:85:39:
                    a6:1b:65:a0:f2:6e:f9:ab:66:b7:2f:34:47:77:ab:
                    ac:2e:95:b8:b7:3a:19:79:cd:d5:95:9c:6e:ae:7b:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:5A:C3:11:41:4C:7D:55:2A:84:49:13:85:2E:03:3D:79:26:42
            X509v3 Authority Key Identifier:
                keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/sQRawxFBTH1VKoRJE4UuAz15JkI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.80.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:9a:6c:92:aa:e0:82:fe:d4:81:24:d5:a8:a1:57:55:f4:ae:
         a8:54:78:e4:23:17:e3:4c:e3:67:36:e2:b0:29:a5:82:13:89:
         af:56:1a:59:83:83:03:9b:62:52:f2:39:64:17:bc:e5:6a:d5:
         d1:38:1b:3f:3b:0b:d5:fa:a5:8a:cf:81:4d:f1:55:5f:f7:0e:
         58:d1:4a:f4:da:db:b2:60:36:e1:7d:8f:b7:ce:9b:82:c7:8a:
         14:d7:46:9c:d7:a0:3f:e6:c6:fe:ae:1f:b7:b4:93:71:ed:b7:
         55:05:dc:0a:2f:14:64:1e:2c:2b:64:2d:25:c1:65:cc:a2:96:
         c6:fb:d9:af:1f:ea:66:34:30:24:44:28:8f:94:10:59:0c:ba:
         85:e7:cb:98:6c:10:b8:d7:92:a1:60:b7:d9:d9:06:f6:02:a6:
         ed:16:9f:69:3f:7b:ef:31:82:7e:5f:8d:44:f1:cf:8e:25:2e:
         00:d3:b2:58:0c:9e:27:8d:e7:4d:46:65:6e:0c:75:ef:ef:06:
         0e:81:d6:b5:ff:26:34:9e:6b:a6:08:20:ac:42:c6:f9:8c:c9:
         68:77:b9:70:51:fc:eb:28:dc:88:1d:e8:c0:76:a5:79:18:72:
         f7:94:bd:13:f5:20:b9:08:ff:c4:5f:74:b6:a5:3d:d5:c7:f8:
         b7:31:ff:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw50JOcjIgxVG3jTv6H2xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YmQwZDlhYThjNzQzY2RhMTgyZjAwNjY4NTgzYTQ2ZTYw
MGMzMmQwHhcNMjMwMTAyMDUxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTA0NWFjMzExNDE0YzdkNTUyYTg0NDkxMzg1MmUwMzNkNzkyNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhH1dSkEec+d4UZqvzf+a5MDdoe6
HurrqiOwJ/xtgPCLbkrI7WoR51o8dOFMVOESxbLS9c3tgILA4TIOdJsZ1l1TKETA
IjIqR7wEEIJrVWO/Aw4Zcr1+JuyUCj784xNLC1QqNZ0klyes/lS9bJBshCCXjGok
Lvjj9ckYRB+TWo5xzaXfQoUYNX99OVBGaI63l0hsFtMnUM9HoJJMkG91BGIKip0p
tZkG6iS/jT9F8POtKxzfULrGsvBX7SgGiR0zQXfEpGlitUW0OIrn13ps0UNVSvgA
XsSauuZn2YH2hTmmG2Wg8m75q2a3LzRHd6usLpW4tzoZec3VlZxurntxywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEEWsMRQUx9VSqESROFLgM9eSZCMB8GA1UdIwQY
MBaAFOi9DZqox0PNoYLwBmhYOkbmAMMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMt
ODg5MjQzODY5Njc5LzEvc1FSYXd4RkJUSDFWS29SSkU0VXVBejE1SmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jODI0ZDEtOGNmZS00NDBlLTliNWMtODg5MjQzODY5Njc5
LzEvNkwwTm1xakhRODJoZ3ZBR2FGZzZSdVlBd3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw1AgMA0G
CSqGSIb3DQEBCwUAA4IBAQCImmySquCC/tSBJNWooVdV9K6oVHjkIxfjTONnNuKw
KaWCE4mvVhpZg4MDm2JS8jlkF7zlatXROBs/OwvV+qWKz4FN8VVf9w5Y0Ur02tuy
YDbhfY+3zpuCx4oU10ac16A/5sb+rh+3tJNx7bdVBdwKLxRkHiwrZC0lwWXMopbG
+9mvH+pmNDAkRCiPlBBZDLqF58uYbBC415KhYLfZ2Qb2AqbtFp9pP3vvMYJ+X41E
8c+OJS4A07JYDJ4njedNRmVuDHXv7wYOgda1/yY0nmumCCCsQsb5jMlod7lwUfzr
KNyIHejAdqV5GHL3lL0T9SC5CP/EX3S2pT3Vx/i3Mf/1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:42 2024 by rpki-client on console-ams.rpki-client.org