Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/UzQv0oQR0QssHpTjlX9c2eD1gnQ.roa
File:                     UzQv0oQR0QssHpTjlX9c2eD1gnQ.roa (raw, json)
Hash identifier:          IL7wh1kuFhwW69HVKYh+Eq+NnOoqktqcrbT/Vqdx480=
Subject key identifier:   53:34:2F:D2:84:11:D1:0B:2C:1E:94:E3:95:7F:5C:D9:E0:F5:82:74
Certificate issuer:       /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial:       01857067550A4819633CCB68D6E0805DC2F2
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/UzQv0oQR0QssHpTjlX9c2eD1gnQ.roa
Signing time:             Mon 02 Jan 2023 02:54:58 +0000
ROA not before:           Mon 02 Jan 2023 02:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9044
IP address blocks:        193.0.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:55:0a:48:19:63:3c:cb:68:d6:e0:80:5d:c2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd482c2bee8460048d82902cec9867205222997
        Validity
            Not Before: Jan  2 02:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53342fd28411d10b2c1e94e3957f5cd9e0f58274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:97:a4:cd:f7:0a:b7:70:85:90:64:1c:9a:
                    ca:e2:a9:cb:b7:04:8b:b4:ff:b1:bb:7c:59:64:23:
                    f4:a1:0b:70:4c:4b:c2:ab:72:f2:39:f8:ab:0b:f5:
                    88:71:e7:5a:67:58:34:15:09:30:45:7e:b4:78:dd:
                    ac:a6:43:c0:bb:36:cb:7e:cb:c7:91:68:d1:3e:fd:
                    cd:dd:39:34:32:68:27:ab:a6:32:1f:2e:ee:6b:a8:
                    1b:fb:be:c8:12:76:c0:db:63:ce:42:89:67:1a:c9:
                    8c:37:f2:8b:c1:7a:46:9f:dc:22:6f:93:a6:cc:ef:
                    ec:c8:a6:89:60:df:bc:73:8d:de:43:4b:cf:97:b1:
                    d3:5f:93:40:db:8e:1c:74:db:df:0d:73:95:13:e0:
                    31:8b:56:6a:02:50:11:7e:cb:75:42:32:ca:31:6d:
                    ba:83:44:81:69:5c:ac:49:96:d9:b1:16:62:a7:70:
                    ed:0e:83:f9:6b:2e:7f:9e:59:cc:75:86:0b:4b:e7:
                    fd:26:ae:70:de:86:8a:73:a1:b7:bb:8e:b9:34:50:
                    50:8b:fc:8f:1a:7a:ae:da:63:46:f0:99:9d:fd:b8:
                    a1:b8:11:8f:64:0c:f7:40:62:ec:7c:7f:3a:20:96:
                    17:b6:87:98:05:da:2e:7b:64:45:fe:2e:a8:27:15:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:34:2F:D2:84:11:D1:0B:2C:1E:94:E3:95:7F:5C:D9:E0:F5:82:74
            X509v3 Authority Key Identifier:
                keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/UzQv0oQR0QssHpTjlX9c2eD1gnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:62:1a:20:20:98:c8:61:93:90:e4:65:a2:ee:48:a1:e7:
         87:09:d1:53:ec:65:c0:65:e3:7d:40:06:46:14:49:59:c6:ac:
         f8:4d:04:28:37:91:49:84:46:a7:09:b8:5e:7d:de:bd:1b:f9:
         fc:c6:2d:85:84:24:6e:ef:d9:83:d4:bc:99:48:80:59:5b:c9:
         20:78:b6:cc:b5:8c:f1:f0:b7:6a:d2:2e:75:fa:fd:f1:1f:17:
         94:fb:00:c4:fb:73:af:7e:62:90:e5:50:ed:60:7b:8e:f3:20:
         51:55:4b:c2:2c:9a:f9:c9:4b:30:0d:96:08:5c:58:e0:24:9f:
         06:a5:f3:e2:29:21:65:ad:b6:7b:a3:5b:bd:2d:68:c9:d0:36:
         84:79:22:e7:46:90:6d:63:cc:55:a3:6d:0f:42:24:dc:31:3c:
         f9:02:49:ad:dc:2f:85:ee:5e:05:b9:e1:3e:c0:ef:88:0c:67:
         e3:7e:8f:b9:6e:ee:3d:7e:cb:41:63:ec:54:53:f5:c7:72:b2:
         80:8e:e1:f6:dd:c8:dd:c5:12:b5:c8:8e:50:5a:b6:0b:62:51:
         46:b7:40:73:d1:01:95:68:0b:40:a4:99:4a:b6:91:05:65:a1:
         46:08:0d:04:99:9a:18:16:52:88:d1:8e:37:aa:40:27:0f:e5:
         ea:69:b6:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ1UKSBljPMto1uCAXcLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZDQ4MmMyYmVlODQ2MDA0OGQ4MjkwMmNlYzk4NjcyMDUy
MjI5OTcwHhcNMjMwMTAyMDI1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzM0MmZkMjg0MTFkMTBiMmMxZTk0ZTM5NTdmNWNkOWUwZjU4Mjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUeXpM33CrdwhZBkHJrK4qnLtwSL
tP+xu3xZZCP0oQtwTEvCq3LyOfirC/WIcedaZ1g0FQkwRX60eN2spkPAuzbLfsvH
kWjRPv3N3Tk0Mmgnq6YyHy7ua6gb+77IEnbA22POQolnGsmMN/KLwXpGn9wib5Om
zO/syKaJYN+8c43eQ0vPl7HTX5NA244cdNvfDXOVE+Axi1ZqAlARfst1QjLKMW26
g0SBaVysSZbZsRZip3DtDoP5ay5/nlnMdYYLS+f9Jq5w3oaKc6G3u465NFBQi/yP
Gnqu2mNG8Jmd/bihuBGPZAz3QGLsfH86IJYXtoeYBdoue2RF/i6oJxXw1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFM0L9KEEdELLB6U45V/XNng9YJ0MB8GA1UdIwQY
MBaAFO3UgsK+6EYASNgpAs7JhnIFIimXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2Ut
OWQ5MDkxYmVkOGQ3LzEvVXpRdjBvUVIwUXNzSHBUamxYOWMyZUQxZ25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNWZkOTUtZDJmMC00Mjk1LTk2Y2UtOWQ5MDkxYmVkOGQ3
LzEvN2RTQ3dyN29SZ0JJMkNrQ3pzbUdjZ1VpS1pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDgMA0G
CSqGSIb3DQEBCwUAA4IBAQDIF2IaICCYyGGTkORlou5IoeeHCdFT7GXAZeN9QAZG
FElZxqz4TQQoN5FJhEanCbhefd69G/n8xi2FhCRu79mD1LyZSIBZW8kgeLbMtYzx
8Ldq0i51+v3xHxeU+wDE+3OvfmKQ5VDtYHuO8yBRVUvCLJr5yUswDZYIXFjgJJ8G
pfPiKSFlrbZ7o1u9LWjJ0DaEeSLnRpBtY8xVo20PQiTcMTz5Akmt3C+F7l4FueE+
wO+IDGfjfo+5bu49fstBY+xUU/XHcrKAjuH23cjdxRK1yI5QWrYLYlFGt0Bz0QGV
aAtApJlKtpEFZaFGCA0EmZoYFlKI0Y43qkAnD+XqabZ7
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:27 2023 by rpki-client on console-fra.rpki-client.org