Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa
File:                     KWe6y_xDhepFTR29NQAh0WaTiNo.roa (raw, json)
Hash identifier:          mQyoAUHtT2W+7nnO64arQtgvIROdPS2gVkm85iJd7OQ=
Subject key identifier:   29:67:BA:CB:FC:43:85:EA:45:4D:1D:BD:35:00:21:D1:66:93:88:DA
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       01857082B8799EA70F0E45D3B85C72A8F703
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa
Signing time:             Mon 02 Jan 2023 03:24:53 +0000
ROA not before:           Mon 02 Jan 2023 03:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     789
IP address blocks:        193.48.100.0/24 maxlen: 24
                          193.48.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:b8:79:9e:a7:0f:0e:45:d3:b8:5c:72:a8:f7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  2 03:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2967bacbfc4385ea454d1dbd350021d1669388da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:fb:57:ac:96:0e:35:5e:f0:e7:b7:a8:fc:
                    13:ab:6a:c8:82:25:35:6f:7d:28:d1:db:99:77:19:
                    56:16:8e:b6:92:5b:16:b3:dd:08:a9:31:15:26:fe:
                    45:02:03:94:61:ed:85:fc:e0:5a:1e:a7:ed:59:4e:
                    6f:81:31:58:17:a9:a4:b0:12:2c:31:a1:c8:55:83:
                    3c:65:e2:1d:9d:a9:76:2e:38:46:80:2a:9c:7a:46:
                    9d:a6:4e:e3:6d:f6:82:90:a8:17:42:bb:37:30:21:
                    73:e9:5b:98:6a:fe:2d:cc:b1:96:75:c4:72:37:d1:
                    2b:e6:b5:13:23:60:14:67:ae:d7:d1:f0:20:60:f4:
                    1b:c5:57:a8:84:0a:66:91:89:06:2b:80:5f:c7:8f:
                    5a:a8:3f:9a:65:8f:55:a0:c7:9d:5d:c9:42:d6:a8:
                    ef:b1:be:d8:b0:60:f0:9c:fb:30:30:92:6d:a3:92:
                    f4:8f:3f:af:b7:1a:40:95:12:c7:76:51:7d:fb:b8:
                    11:28:63:31:f6:e7:d3:dd:60:0f:fa:4d:b6:d0:83:
                    94:f4:a9:e0:d9:e4:a4:15:bd:9f:40:c1:bf:eb:2b:
                    35:1a:f1:39:65:95:9b:56:d7:96:64:4b:e5:12:52:
                    ff:1f:79:a9:e4:d0:43:99:73:97:3d:0a:85:a3:68:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:BA:CB:FC:43:85:EA:45:4D:1D:BD:35:00:21:D1:66:93:88:DA
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/KWe6y_xDhepFTR29NQAh0WaTiNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.48.99.0-193.48.100.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:e3:e0:37:2a:b5:4f:38:ee:e0:ff:a0:a0:78:75:0e:32:8b:
         9b:06:63:8d:45:6e:d1:e4:db:d6:db:c1:af:7a:24:5e:fa:9d:
         37:0e:2e:36:97:3c:d0:fb:5b:93:93:2c:37:ae:c4:c7:3f:cd:
         86:dd:b3:37:98:8e:f1:75:23:fc:76:c4:c0:85:67:fa:ca:dc:
         30:81:39:7a:96:e9:d7:cc:d6:55:63:65:1e:4e:c7:cc:68:be:
         6b:1c:c5:dc:ff:9d:01:47:ce:f5:c8:e7:44:f9:1a:90:ab:2f:
         d5:4c:39:df:db:bb:0d:e2:eb:b7:62:cf:33:31:6e:25:ee:58:
         53:7b:37:62:72:47:e0:4e:c4:b4:bb:ad:5b:06:06:bf:ab:b4:
         06:f7:65:2c:6b:b8:93:54:4c:21:be:d9:39:49:b3:3a:58:62:
         7e:26:26:b7:2c:fe:34:08:1e:52:35:36:a3:df:d6:7a:60:d1:
         8f:41:0b:41:e7:d1:14:86:21:78:4d:79:4a:ae:a5:9c:13:0e:
         d9:41:99:74:50:ea:4c:1f:43:f8:aa:09:ff:20:3a:55:6c:7c:
         20:65:b1:97:43:c6:14:b2:31:1f:de:03:80:e2:e1:0a:a2:62:
         67:f6:a1:e5:e1:16:6f:90:a3:51:ec:61:fd:66:ab:5d:c2:06:
         41:4d:eb:9d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwgrh5nqcPDkXTuFxyqPcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjMwMTAyMDMyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTY3YmFjYmZjNDM4NWVhNDU0ZDFkYmQzNTAwMjFkMTY2OTM4OGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPb7V6yWDjVe8Oe3qPwTq2rIgiU1
b30o0duZdxlWFo62klsWs90IqTEVJv5FAgOUYe2F/OBaHqftWU5vgTFYF6mksBIs
MaHIVYM8ZeIdnal2LjhGgCqcekadpk7jbfaCkKgXQrs3MCFz6VuYav4tzLGWdcRy
N9Er5rUTI2AUZ67X0fAgYPQbxVeohApmkYkGK4Bfx49aqD+aZY9VoMedXclC1qjv
sb7YsGDwnPswMJJto5L0jz+vtxpAlRLHdlF9+7gRKGMx9ufT3WAP+k220IOU9Kng
2eSkFb2fQMG/6ys1GvE5ZZWbVteWZEvlElL/H3mp5NBDmXOXPQqFo2hG5QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFClnusv8Q4XqRU0dvTUAIdFmk4jaMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvS1dlNnlfeERoZXBGVFIyOU5RQWgwV2FUaU5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBMGMD
BADBMGQwDQYJKoZIhvcNAQELBQADggEBADvj4DcqtU847uD/oKB4dQ4yi5sGY41F
btHk29bbwa96JF76nTcOLjaXPND7W5OTLDeuxMc/zYbdszeYjvF1I/x2xMCFZ/rK
3DCBOXqW6dfM1lVjZR5Ox8xovmscxdz/nQFHzvXI50T5GpCrL9VMOd/buw3i67di
zzMxbiXuWFN7N2JyR+BOxLS7rVsGBr+rtAb3ZSxruJNUTCG+2TlJszpYYn4mJrcs
/jQIHlI1NqPf1npg0Y9BC0Hn0RSGIXhNeUqupZwTDtlBmXRQ6kwfQ/iqCf8gOlVs
fCBlsZdDxhSyMR/eA4Di4QqiYmf2oeXhFm+Qo1HsYf1mq13CBkFN650=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:27 2024 by rpki-client on console-fra.rpki-client.org