Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa
File:                     1vYEdDGACaJXwO1edXq5z6y1ito.roa (raw, json)
Hash identifier:          01aXWtRrhmCXmKoIZta1smYxlpMPK4Kz7P9zEyXAWDc=
Subject key identifier:   D6:F6:04:74:31:80:09:A2:57:C0:ED:5E:75:7A:B9:CF:AC:B5:8A:DA
Certificate issuer:       /CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
Certificate serial:       01856DB885F677336F1C53BF90A41F339288
Authority key identifier: 91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa
Signing time:             Sun 01 Jan 2023 14:24:47 +0000
ROA not before:           Sun 01 Jan 2023 14:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.178.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:b8:85:f6:77:33:6f:1c:53:bf:90:a4:1f:33:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91189e6edf53e40672c9b5f1f3519728291ec2ee
        Validity
            Not Before: Jan  1 14:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6f60474318009a257c0ed5e757ab9cfacb58ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:f8:a8:75:2d:34:0d:be:8b:36:5e:1e:7c:
                    89:1a:0b:e0:e1:2a:c9:c7:5d:90:43:ca:44:da:ec:
                    54:fc:09:f8:d2:96:41:6f:5a:d5:16:e8:b9:4f:ee:
                    0f:dc:8c:58:d0:34:30:5b:17:65:ce:80:e8:b6:2b:
                    32:89:37:1b:99:f6:e0:9c:39:53:3d:04:5c:af:8e:
                    fb:f5:95:60:87:2a:57:f0:89:22:84:99:3c:8d:dd:
                    76:48:57:4f:ce:2a:c5:58:ed:91:f7:15:b1:89:24:
                    38:36:40:d0:e8:9b:1f:b5:f6:18:cb:07:36:67:92:
                    78:72:f7:0d:d7:ee:39:f7:b1:a8:2a:2c:e0:55:2b:
                    aa:84:29:65:86:a3:b3:39:98:60:c0:fc:6e:8f:7f:
                    84:f4:0b:00:da:2c:b8:5e:82:8a:a8:6f:35:e4:fc:
                    30:23:da:05:3c:1b:3d:2f:3e:1f:93:1a:af:39:0d:
                    4d:7e:a1:5e:50:89:dd:1f:05:4d:84:2a:aa:3e:64:
                    0c:59:63:1f:51:ea:d9:c4:3e:b6:e6:f6:f4:00:40:
                    24:4d:19:e8:b4:d2:d3:a3:27:a1:86:f1:d4:f4:df:
                    75:fc:aa:d3:52:9b:73:8c:63:97:54:b9:9b:6b:c2:
                    93:7d:61:38:9f:b1:9f:08:23:f6:08:1d:78:4d:29:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F6:04:74:31:80:09:A2:57:C0:ED:5E:75:7A:B9:CF:AC:B5:8A:DA
            X509v3 Authority Key Identifier:
                keyid:91:18:9E:6E:DF:53:E4:06:72:C9:B5:F1:F3:51:97:28:29:1E:C2:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiebt9T5AZyybXx81GXKCkewu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/1vYEdDGACaJXwO1edXq5z6y1ito.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c1d4a2-7c4e-4adc-8f65-b148d4f066ce/1/kRiebt9T5AZyybXx81GXKCkewu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a0:90:ca:0a:b9:10:7e:f9:10:bc:fb:0d:ee:33:6f:ce:59:
         12:c6:ae:7e:2f:35:2d:ea:da:8b:8f:ea:84:34:14:f3:34:67:
         30:16:97:cc:8a:45:66:20:08:c8:42:45:cd:77:e4:62:1e:80:
         10:57:20:0f:53:ee:26:5d:60:23:78:2f:9f:4b:7a:c7:7e:6a:
         23:7f:70:b6:57:41:24:e3:3f:57:a7:dd:78:a5:dd:96:8e:e7:
         79:d8:4d:f1:90:7c:b4:e2:0e:3d:28:08:e3:00:87:16:d6:c5:
         f1:c7:bb:ce:a9:0a:f8:cd:f3:f0:0b:cb:cc:3c:fa:27:b2:61:
         da:8a:5f:eb:75:d5:6f:ee:f8:43:52:81:8b:76:c9:b4:78:89:
         10:5d:a9:51:85:1a:d4:09:5b:49:a5:56:76:02:a4:93:18:cc:
         a2:a2:fd:c9:ad:f9:3c:6a:93:4b:90:34:1c:ca:60:2a:a3:f6:
         4e:29:fe:f0:b8:a6:ff:a6:76:d1:8c:c5:05:aa:28:6b:77:36:
         03:0e:72:70:43:12:dc:c7:b7:97:36:ff:75:cd:c8:c3:9e:bc:
         3d:fe:1b:b3:15:8c:1b:2f:8f:22:a5:40:b5:36:61:f1:4d:97:
         41:4d:01:ab:f5:fc:71:b9:6c:04:5a:f3:ae:f0:25:96:5a:68:
         70:f1:26:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtuIX2dzNvHFO/kKQfM5KIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTg5ZTZlZGY1M2U0MDY3MmM5YjVmMWYzNTE5NzI4Mjkx
ZWMyZWUwHhcNMjMwMTAxMTQyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmY2MDQ3NDMxODAwOWEyNTdjMGVkNWU3NTdhYjljZmFjYjU4YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtT4qHUtNA2+izZeHnyJGgvg4SrJ
x12QQ8pE2uxU/An40pZBb1rVFui5T+4P3IxY0DQwWxdlzoDotisyiTcbmfbgnDlT
PQRcr4779ZVghypX8IkihJk8jd12SFdPzirFWO2R9xWxiSQ4NkDQ6JsftfYYywc2
Z5J4cvcN1+4597GoKizgVSuqhCllhqOzOZhgwPxuj3+E9AsA2iy4XoKKqG815Pww
I9oFPBs9Lz4fkxqvOQ1NfqFeUIndHwVNhCqqPmQMWWMfUerZxD625vb0AEAkTRno
tNLToyehhvHU9N91/KrTUptzjGOXVLmba8KTfWE4n7GfCCP2CB14TSmsqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNb2BHQxgAmiV8DtXnV6uc+stYraMB8GA1UdIwQY
MBaAFJEYnm7fU+QGcsm18fNRlygpHsLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JpZWJ0OVQ1QVp5eWJYeDgxR1hLQ2tld3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMWQ0YTItN2M0ZS00YWRjLThmNjUt
YjE0OGQ0ZjA2NmNlLzEvMXZZRWRER0FDYUpYd08xZWRYcTV6NnkxaXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMWQ0YTItN2M0ZS00YWRjLThmNjUtYjE0OGQ0ZjA2NmNl
LzEva1JpZWJ0OVQ1QVp5eWJYeDgxR1hLQ2tld3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKGMA0G
CSqGSIb3DQEBCwUAA4IBAQCEoJDKCrkQfvkQvPsN7jNvzlkSxq5+LzUt6tqLj+qE
NBTzNGcwFpfMikVmIAjIQkXNd+RiHoAQVyAPU+4mXWAjeC+fS3rHfmojf3C2V0Ek
4z9Xp914pd2Wjud52E3xkHy04g49KAjjAIcW1sXxx7vOqQr4zfPwC8vMPPonsmHa
il/rddVv7vhDUoGLdsm0eIkQXalRhRrUCVtJpVZ2AqSTGMyiov3Jrfk8apNLkDQc
ymAqo/ZOKf7wuKb/pnbRjMUFqihrdzYDDnJwQxLcx7eXNv91zcjDnrw9/huzFYwb
L48ipUC1NmHxTZdBTQGr9fxxuWwEWvOu8CWWWmhw8SZN
-----END CERTIFICATE-----
Generated at Mon Oct 2 09:28:53 2023 by rpki-client on console-fra.rpki-client.org