Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EZE3Du2gOrp8uARqzl6xAMEav4g.roa
File:                     EZE3Du2gOrp8uARqzl6xAMEav4g.roa (raw, json)
Hash identifier:          VhgYVUpK4aoDgmRq9Puv2tk1rPLz7itnmGOKIQ9evPQ=
Subject key identifier:   11:91:37:0E:ED:A0:3A:BA:7C:B8:04:6A:CE:5E:B1:00:C1:1A:BF:88
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0188E511508A32AB3ECF917242ECB52F184A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EZE3Du2gOrp8uARqzl6xAMEav4g.roa
Signing time:             Thu 22 Jun 2023 21:44:57 +0000
ROA not before:           Thu 22 Jun 2023 21:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205320
IP address blocks:        185.246.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Jul 2023 08:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e5:11:50:8a:32:ab:3e:cf:91:72:42:ec:b5:2f:18:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jun 22 21:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1191370eeda03aba7cb8046ace5eb100c11abf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:7e:dd:90:c2:06:9e:cc:00:c0:fb:b3:8a:
                    b3:82:db:1e:9f:2c:14:8d:4d:9a:a1:39:52:4b:c2:
                    44:bf:c5:e3:bf:e1:d2:f2:a4:e5:09:f6:0d:65:bc:
                    3a:71:35:a8:12:30:43:39:3a:29:b4:57:f9:8e:9d:
                    62:2a:d9:30:1c:f9:0c:1e:1b:39:08:70:84:b6:38:
                    c3:88:30:a6:1a:14:69:91:22:e5:77:b0:07:f2:60:
                    e5:c1:73:9e:13:8e:b8:10:0f:5f:b0:a0:ac:e3:52:
                    96:18:6b:6f:05:18:63:9b:f6:81:3f:bb:69:ad:40:
                    5c:11:29:1b:45:b4:d8:e1:57:af:3f:d8:90:e6:f8:
                    59:84:04:84:00:28:a5:b4:54:a2:00:b2:64:b2:db:
                    1e:b7:10:19:bf:1f:70:7c:6e:16:52:5a:8f:66:b0:
                    d4:b9:e5:a1:8e:a5:03:5e:eb:3f:cf:af:c5:17:08:
                    16:6b:9a:82:14:58:23:b9:f9:8a:af:5f:63:8d:74:
                    d5:34:94:59:1e:d2:69:9d:0e:68:b5:a2:04:2f:2c:
                    91:3c:52:5d:c7:e3:ef:d7:f5:00:1b:4e:8e:7c:5e:
                    34:71:1a:49:71:07:20:02:de:6b:5a:f1:1b:58:0e:
                    61:de:17:de:b4:d4:34:fd:da:3f:34:c8:ed:c8:ff:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:37:0E:ED:A0:3A:BA:7C:B8:04:6A:CE:5E:B1:00:C1:1A:BF:88
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EZE3Du2gOrp8uARqzl6xAMEav4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:03:0a:c2:eb:62:ca:8d:b4:60:56:c2:2a:19:0b:da:f3:c1:
         db:f9:b0:8a:81:58:17:9a:7c:92:5a:61:62:69:de:4b:b0:b4:
         f9:ca:6d:6e:4f:19:0a:16:b7:b9:78:ec:c5:e6:96:1b:9b:94:
         c1:cc:fa:b5:1f:d5:2b:c2:30:8f:0b:a2:5e:05:f2:5f:07:9e:
         19:ae:ba:50:ed:4a:d8:d0:3d:e9:60:b7:21:07:1b:31:b8:ae:
         34:f6:63:39:11:ee:f6:6b:5f:de:a7:b5:62:75:6f:bc:a8:06:
         ff:cb:f2:4f:23:af:ca:57:76:c7:94:f7:76:9f:39:5c:58:bb:
         a5:78:c6:8a:c0:e8:ee:8d:38:b0:8c:45:33:13:35:81:a7:a2:
         17:2d:69:2d:39:4c:6e:89:8b:dd:6f:ba:17:00:03:2e:7b:ef:
         15:f2:5b:cb:0b:85:37:11:5c:79:66:dd:fd:a0:c0:b2:a5:62:
         49:13:66:09:f1:dd:64:af:52:35:34:ea:a2:99:be:e1:9a:83:
         45:4a:08:7c:29:bb:80:6b:b2:36:69:a2:90:e1:3f:f5:09:01:
         08:f8:87:23:38:e4:36:62:68:c1:3c:c0:6f:65:e3:16:c3:88:
         c2:80:06:98:b1:22:b4:3e:06:08:b3:18:0b:4d:5b:45:3b:db:
         1d:6b:0c:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjlEVCKMqs+z5FyQuy1LxhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNjIyMjE0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTkxMzcwZWVkYTAzYWJhN2NiODA0NmFjZTVlYjEwMGMxMWFiZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68R+3ZDCBp7MAMD7s4qzgtsenywU
jU2aoTlSS8JEv8Xjv+HS8qTlCfYNZbw6cTWoEjBDOToptFf5jp1iKtkwHPkMHhs5
CHCEtjjDiDCmGhRpkSLld7AH8mDlwXOeE464EA9fsKCs41KWGGtvBRhjm/aBP7tp
rUBcESkbRbTY4VevP9iQ5vhZhASEACiltFSiALJkstsetxAZvx9wfG4WUlqPZrDU
ueWhjqUDXus/z6/FFwgWa5qCFFgjufmKr19jjXTVNJRZHtJpnQ5otaIELyyRPFJd
x+Pv1/UAG06OfF40cRpJcQcgAt5rWvEbWA5h3hfetNQ0/do/NMjtyP/RIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGRNw7toDq6fLgEas5esQDBGr+IMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvRVpFM0R1MmdPcnA4dUFScXpsNnhBTUVhdjRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZwMA0G
CSqGSIb3DQEBCwUAA4IBAQAVAwrC62LKjbRgVsIqGQva88Hb+bCKgVgXmnySWmFi
ad5LsLT5ym1uTxkKFre5eOzF5pYbm5TBzPq1H9UrwjCPC6JeBfJfB54ZrrpQ7UrY
0D3pYLchBxsxuK409mM5Ee72a1/ep7VidW+8qAb/y/JPI6/KV3bHlPd2nzlcWLul
eMaKwOjujTiwjEUzEzWBp6IXLWktOUxuiYvdb7oXAAMue+8V8lvLC4U3EVx5Zt39
oMCypWJJE2YJ8d1kr1I1NOqimb7hmoNFSgh8KbuAa7I2aaKQ4T/1CQEI+IcjOOQ2
YmjBPMBvZeMWw4jCgAaYsSK0PgYIsxgLTVtFO9sdawy7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org