Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zodU1m9Bc_ThYwIYaUUTQxzs0Js.roa
File:                     zodU1m9Bc_ThYwIYaUUTQxzs0Js.roa (raw, json)
Hash identifier:          Np87IM/WNT77TMB9bWS2xDIMQ1JNDjVDe41o94DIE+k=
Subject key identifier:   CE:87:54:D6:6F:41:73:F4:E1:63:02:18:69:45:13:43:1C:EC:D0:9B
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0187FB0965519E27B690B56B1B33BE78EE5F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zodU1m9Bc_ThYwIYaUUTQxzs0Js.roa
Signing time:             Mon 08 May 2023 11:05:09 +0000
ROA not before:           Mon 08 May 2023 11:05:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60240
IP address blocks:        185.214.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jul 2023 21:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fb:09:65:51:9e:27:b6:90:b5:6b:1b:33:be:78:ee:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: May  8 11:05:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce8754d66f4173f4e1630218694513431cecd09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a1:f3:74:7a:e4:c7:10:ee:f9:80:f2:57:08:
                    bc:00:e1:a0:1d:e7:9e:07:03:80:a8:a5:28:37:92:
                    df:2e:7d:5b:ab:0d:0f:a9:b6:99:dd:e8:54:61:e7:
                    8e:c8:5c:e7:6c:24:08:92:fe:79:c0:66:4c:64:77:
                    86:d0:0a:e2:38:e4:35:ed:3a:10:9a:69:d8:fb:8b:
                    02:e7:ee:db:7a:7a:50:b8:a4:50:78:1e:84:71:55:
                    21:ea:51:b4:e5:9a:9d:b8:4b:eb:a2:66:20:82:eb:
                    67:25:67:ac:28:bd:3c:c3:9e:82:9d:36:5a:34:a8:
                    6f:0c:87:e2:47:14:a9:62:62:27:01:f7:df:40:65:
                    b0:37:31:9c:8d:fc:01:7e:6d:3e:a1:a6:cf:c4:81:
                    ac:84:bc:cf:45:55:7b:ec:98:d7:dd:60:b6:30:1f:
                    79:44:31:79:ab:e7:6b:39:87:fb:c5:12:68:44:44:
                    37:b6:d6:18:06:36:be:45:1b:c6:a8:16:b2:65:bc:
                    33:07:0e:82:e9:cc:ba:7f:91:44:d7:1d:65:c0:dd:
                    25:b4:02:bb:26:48:93:a2:1d:02:47:30:cb:f0:ee:
                    8b:c6:bb:30:bc:16:c6:7b:be:52:c4:3b:a9:9a:ce:
                    7f:e6:a1:36:db:7b:7f:60:78:39:52:54:bf:63:d4:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:54:D6:6F:41:73:F4:E1:63:02:18:69:45:13:43:1C:EC:D0:9B
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/zodU1m9Bc_ThYwIYaUUTQxzs0Js.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9f:01:02:4d:70:2d:d5:42:b1:67:ac:71:ad:45:e6:7d:10:
         46:3e:77:e4:bb:2c:4a:dc:91:4c:27:c8:2d:8c:c3:d0:e6:20:
         50:30:6e:17:b1:5c:7c:f9:d1:23:19:ff:75:b6:15:a5:c2:9f:
         d9:0b:44:24:84:b0:fa:99:ce:ee:10:ac:e8:35:c8:cc:7b:b7:
         8e:40:c2:e3:44:3d:ba:cd:b6:8b:75:cb:65:a3:d6:07:25:0d:
         f5:61:aa:ae:4e:e0:92:57:a0:00:2a:72:96:87:54:e6:da:e9:
         e0:a6:92:de:6f:13:f3:86:76:69:5e:46:bc:74:e3:6a:59:d2:
         5a:01:bc:12:36:27:2b:ef:10:67:77:9d:9d:4d:e1:91:df:2a:
         e6:09:c1:a9:ef:24:52:5b:bb:14:5c:e8:6f:52:1b:8e:27:30:
         46:11:26:7a:ca:5c:6e:b3:06:4a:9e:36:02:c2:99:8e:68:c4:
         aa:78:cb:10:f8:ef:36:e9:02:6a:91:88:0b:d3:fd:62:6d:ed:
         18:db:09:f3:f0:28:48:32:f5:d1:c5:6c:ff:e2:4f:a0:46:ce:
         52:ee:ab:be:21:61:e7:3c:03:46:d6:41:ed:92:26:fa:0f:02:
         91:b2:18:9c:64:c4:72:1f:cf:04:36:57:04:36:e2:18:06:9b:
         39:93:b4:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf7CWVRnie2kLVrGzO+eO5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNTA4MTEwNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTg3NTRkNjZmNDE3M2Y0ZTE2MzAyMTg2OTQ1MTM0MzFjZWNkMDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaHzdHrkxxDu+YDyVwi8AOGgHeee
BwOAqKUoN5LfLn1bqw0PqbaZ3ehUYeeOyFznbCQIkv55wGZMZHeG0AriOOQ17ToQ
mmnY+4sC5+7benpQuKRQeB6EcVUh6lG05ZqduEvromYggutnJWesKL08w56CnTZa
NKhvDIfiRxSpYmInAfffQGWwNzGcjfwBfm0+oabPxIGshLzPRVV77JjX3WC2MB95
RDF5q+drOYf7xRJoREQ3ttYYBja+RRvGqBayZbwzBw6C6cy6f5FE1x1lwN0ltAK7
JkiToh0CRzDL8O6LxrswvBbGe75SxDupms5/5qE223t/YHg5UlS/Y9QO9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6HVNZvQXP04WMCGGlFE0Mc7NCbMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvem9kVTFtOUJjX1RoWXdJWWFVVVRReHpzMEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZsMA0G
CSqGSIb3DQEBCwUAA4IBAQA3nwECTXAt1UKxZ6xxrUXmfRBGPnfkuyxK3JFMJ8gt
jMPQ5iBQMG4XsVx8+dEjGf91thWlwp/ZC0QkhLD6mc7uEKzoNcjMe7eOQMLjRD26
zbaLdctlo9YHJQ31YaquTuCSV6AAKnKWh1Tm2ungppLebxPzhnZpXka8dONqWdJa
AbwSNicr7xBnd52dTeGR3yrmCcGp7yRSW7sUXOhvUhuOJzBGESZ6ylxuswZKnjYC
wpmOaMSqeMsQ+O826QJqkYgL0/1ibe0Y2wnz8ChIMvXRxWz/4k+gRs5S7qu+IWHn
PANG1kHtkib6DwKRshicZMRyH88ENlcENuIYBps5k7Sc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org