Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Pe-p5LKHU4NTqjcyqbttYjHQqbA.roa
File:                     Pe-p5LKHU4NTqjcyqbttYjHQqbA.roa (raw, json)
Hash identifier:          9rnpN8YMysLUkDRt4ISGF3OsCdQA25U0NVe4KFa7cvY=
Subject key identifier:   3D:EF:A9:E4:B2:87:53:83:53:AA:37:32:A9:BB:6D:62:31:D0:A9:B0
Certificate issuer:       /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial:       01880191275ACDF5DBCE034B5ECAF0C97770
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Pe-p5LKHU4NTqjcyqbttYjHQqbA.roa
Signing time:             Tue 09 May 2023 17:31:09 +0000
ROA not before:           Tue 09 May 2023 17:31:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        193.228.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:01:91:27:5a:cd:f5:db:ce:03:4b:5e:ca:f0:c9:77:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
        Validity
            Not Before: May  9 17:31:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3defa9e4b287538353aa3732a9bb6d6231d0a9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:06:c1:ce:76:e7:52:e9:da:8f:b2:df:41:e9:
                    e8:08:70:92:7c:aa:c9:40:26:83:6f:36:41:da:6b:
                    4a:67:ff:48:be:45:a6:ee:a9:d2:ea:71:4d:a1:97:
                    1d:10:54:ae:47:2c:d1:14:0c:c5:ae:5f:56:9c:f0:
                    6a:fe:38:e3:c6:03:43:dc:c4:ff:8c:e9:68:ed:fd:
                    e8:fa:c5:6b:83:ae:23:52:10:34:6f:c6:58:30:f2:
                    3c:a1:71:05:9d:76:55:37:f2:cd:5e:df:4a:64:75:
                    8c:4f:fa:3f:d9:34:78:56:5d:c6:07:ba:ed:b7:40:
                    5d:53:54:c8:2f:24:6c:b3:87:47:ff:cd:c0:6c:5f:
                    08:4f:75:bd:ea:0a:3f:8a:2e:26:e9:12:10:e8:18:
                    1f:af:c3:cb:6d:e1:73:a9:71:62:4e:5d:d7:6f:1d:
                    84:b6:11:9a:08:48:ee:b3:99:f7:9f:42:e6:2a:e7:
                    ce:d3:83:74:e4:37:4f:ff:86:91:06:1a:bf:e2:21:
                    28:c5:af:fd:e0:99:e4:8d:35:e2:2b:da:c5:1a:84:
                    91:84:b8:79:ec:26:0c:63:f0:08:01:a3:fd:16:93:
                    54:8c:6c:82:52:0d:57:10:16:34:f7:65:da:08:b8:
                    6f:f1:b6:56:3e:a4:e5:4e:a5:f1:87:36:51:f7:a1:
                    52:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EF:A9:E4:B2:87:53:83:53:AA:37:32:A9:BB:6D:62:31:D0:A9:B0
            X509v3 Authority Key Identifier:
                keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/Pe-p5LKHU4NTqjcyqbttYjHQqbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:c5:3a:39:95:4f:39:12:7f:b2:4d:a2:2e:2b:09:32:af:
         11:c2:94:29:e4:da:55:4f:df:63:46:52:c4:bc:b1:aa:a8:74:
         2b:95:9a:e2:99:02:e6:ef:80:70:bd:fb:79:9a:39:af:c6:e4:
         68:a4:4f:41:dc:c4:2c:32:37:ce:b8:34:df:0f:44:b0:f7:aa:
         f4:c1:b3:52:51:94:41:b8:95:10:5e:7e:32:2e:dd:c3:99:19:
         ab:a4:ab:53:29:c8:d6:01:b1:87:f2:44:f8:7d:32:2c:23:76:
         08:2b:89:10:d1:37:a7:24:ae:b5:9e:5e:bd:c9:02:4b:ec:4b:
         be:e2:98:4f:a3:eb:2d:a3:5c:c3:b7:01:70:1d:3c:8a:a1:d5:
         70:9e:c7:5a:c9:b0:ad:a7:52:f6:34:7b:21:c0:d9:7f:8c:03:
         60:5e:98:17:1d:07:17:0f:24:12:eb:7a:1e:8f:02:4d:33:3a:
         c2:42:65:06:a1:50:eb:63:e3:48:d6:ba:d2:66:68:3e:c5:a7:
         2d:eb:e2:44:b5:66:54:80:09:1d:62:e9:e1:b6:a4:1f:ec:f5:
         38:52:4b:cd:81:80:7f:11:45:75:db:98:9c:8f:d7:b2:50:a5:
         04:24:a7:3f:99:cb:82:59:09:e5:72:17:4c:5e:47:5b:80:53:
         04:b7:bb:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgBkSdazfXbzgNLXsrwyXdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I3YWIwNjJiYzgyOGIzNDhkMDUzMDZlNjUzNTQ3NDhi
OWQ2ZDYwHhcNMjMwNTA5MTczMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGVmYTllNGIyODc1MzgzNTNhYTM3MzJhOWJiNmQ2MjMxZDBhOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwbBznbnUunaj7LfQenoCHCSfKrJ
QCaDbzZB2mtKZ/9IvkWm7qnS6nFNoZcdEFSuRyzRFAzFrl9WnPBq/jjjxgND3MT/
jOlo7f3o+sVrg64jUhA0b8ZYMPI8oXEFnXZVN/LNXt9KZHWMT/o/2TR4Vl3GB7rt
t0BdU1TILyRss4dH/83AbF8IT3W96go/ii4m6RIQ6Bgfr8PLbeFzqXFiTl3Xbx2E
thGaCEjus5n3n0LmKufO04N05DdP/4aRBhq/4iEoxa/94JnkjTXiK9rFGoSRhLh5
7CYMY/AIAaP9FpNUjGyCUg1XEBY092XaCLhv8bZWPqTlTqXxhzZR96FS+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3vqeSyh1ODU6o3Mqm7bWIx0KmwMB8GA1UdIwQY
MBaAFCF7erBivIKLNI0FMG5lNUdIudbWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYt
NTViNjU5Y2Q4MmJiLzEvUGUtcDVMS0hVNE5UcWpjeXFidHRZakhRcWJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hOGRhZGMtNjExYi00MDYzLWFkYjYtNTViNjU5Y2Q4MmJi
LzEvSVh0NnNHSzhnb3MwalFVd2JtVTFSMGk1MXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweSAMA0G
CSqGSIb3DQEBCwUAA4IBAQAao8U6OZVPORJ/sk2iLisJMq8RwpQp5NpVT99jRlLE
vLGqqHQrlZrimQLm74Bwvft5mjmvxuRopE9B3MQsMjfOuDTfD0Sw96r0wbNSUZRB
uJUQXn4yLt3DmRmrpKtTKcjWAbGH8kT4fTIsI3YIK4kQ0TenJK61nl69yQJL7Eu+
4phPo+sto1zDtwFwHTyKodVwnsdaybCtp1L2NHshwNl/jANgXpgXHQcXDyQS63oe
jwJNMzrCQmUGoVDrY+NI1rrSZmg+xact6+JEtWZUgAkdYunhtqQf7PU4UkvNgYB/
EUV125icj9eyUKUEJKc/mcuCWQnlchdMXkdbgFMEt7sb
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:34 2024 by rpki-client on console-fra.rpki-client.org