Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Zo65dn1qs_0NtQPToWzOydS3URQ.roa
File:                     Zo65dn1qs_0NtQPToWzOydS3URQ.roa (raw, json)
Hash identifier:          Amm2ZWtxM5+wV9k1HwSMkiXf4Yk+4UYIrh1EKycAmOw=
Subject key identifier:   66:8E:B9:76:7D:6A:B3:FD:0D:B5:03:D3:A1:6C:CE:C9:D4:B7:51:14
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       0188C94F19ED1CB4D3A892F2DD53C2D1CCBA
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Zo65dn1qs_0NtQPToWzOydS3URQ.roa
Signing time:             Sat 17 Jun 2023 12:23:04 +0000
ROA not before:           Sat 17 Jun 2023 12:23:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204873
IP address blocks:        193.104.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c9:4f:19:ed:1c:b4:d3:a8:92:f2:dd:53:c2:d1:cc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Jun 17 12:23:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=668eb9767d6ab3fd0db503d3a16ccec9d4b75114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:18:5a:68:5a:a8:07:65:fc:4f:73:19:c6:
                    ee:3c:5b:17:4e:0f:95:26:9b:27:81:3e:3a:0d:5f:
                    8f:fd:ee:00:77:68:23:93:b6:16:2e:4e:be:06:9b:
                    bc:f1:bf:06:a7:df:d6:0c:c8:82:d9:78:5b:54:d1:
                    0e:8a:2d:12:78:cc:40:73:6a:80:ea:5e:0d:d2:84:
                    4e:1e:45:c9:9f:c0:a4:d9:6e:80:12:80:f8:0d:82:
                    90:9a:3b:bf:70:62:9f:8e:f3:1e:0f:bf:db:52:ee:
                    ab:f7:23:3d:2e:02:b8:1d:e4:63:aa:7a:be:0a:45:
                    42:fa:50:e0:27:53:51:91:00:88:78:1b:9e:a5:03:
                    a5:17:be:f0:ce:91:cd:06:5d:9f:76:fb:f5:1c:ca:
                    46:eb:b0:74:69:7b:f8:cf:6d:ae:dd:0a:9b:57:a4:
                    f2:30:52:53:6a:15:74:92:2a:78:a7:27:cd:64:ac:
                    70:10:09:46:2b:8e:d8:10:18:4e:4d:4b:43:bc:cc:
                    b5:37:5f:e4:a2:76:b9:a2:01:57:5e:9a:66:eb:2d:
                    ad:8d:c0:c1:a0:39:d9:52:e0:fc:62:eb:22:fc:62:
                    4c:0c:7d:13:05:e6:3c:d3:3b:8e:cd:44:49:05:92:
                    9a:9c:0a:6b:26:9a:be:3b:7a:70:35:58:83:8b:86:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8E:B9:76:7D:6A:B3:FD:0D:B5:03:D3:A1:6C:CE:C9:D4:B7:51:14
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Zo65dn1qs_0NtQPToWzOydS3URQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:65:b0:d6:af:0e:68:96:7c:5c:a6:29:41:62:f8:65:8f:d3:
         fe:5c:f5:2c:50:0a:83:21:68:e2:08:27:d2:d1:df:a6:71:94:
         ab:0d:f7:a3:7d:23:fe:1b:3b:71:07:72:43:9a:bd:04:33:40:
         d8:75:ea:e1:35:9f:8b:49:4b:6e:27:b2:f3:c9:b2:f5:cd:7a:
         c9:65:45:c4:09:12:6a:74:0c:5d:47:65:d8:8c:fe:9b:af:db:
         0b:ae:60:83:46:f5:a5:d0:04:93:81:de:24:9b:09:e9:b6:90:
         89:39:de:78:b2:59:ec:d8:da:a1:9b:55:0d:bb:cd:5d:e5:2b:
         fd:64:81:52:9e:f7:43:91:d0:8d:74:8f:24:f2:04:cc:f9:b7:
         d5:01:ab:d8:9c:8d:a2:90:ec:1f:f1:91:09:a5:a2:3f:3a:71:
         7c:3a:64:0f:e8:7f:f9:45:0a:c7:e8:39:82:ba:56:4b:92:ed:
         b3:b7:24:45:cf:76:ef:37:c2:d8:8c:5b:f3:f1:f8:16:71:8c:
         c9:08:a7:62:ff:8a:a5:d7:79:ab:29:f3:72:86:30:5a:5f:41:
         3c:03:3a:d8:6a:26:2c:bf:b1:75:1a:24:4a:e7:c8:e5:cd:d3:
         8c:3a:72:c9:bf:4a:f4:8e:a4:77:60:ad:f1:b6:14:b8:06:aa:
         83:54:e8:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjJTxntHLTTqJLy3VPC0cy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2M3NzM2OTQ1YzI5YTc3YmFjZDViMThiMGZmNTg3NTEx
MTdiYWQwHhcNMjMwNjE3MTIyMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjhlYjk3NjdkNmFiM2ZkMGRiNTAzZDNhMTZjY2VjOWQ0Yjc1MTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybAYWmhaqAdl/E9zGcbuPFsXTg+V
JpsngT46DV+P/e4Ad2gjk7YWLk6+Bpu88b8Gp9/WDMiC2XhbVNEOii0SeMxAc2qA
6l4N0oROHkXJn8Ck2W6AEoD4DYKQmju/cGKfjvMeD7/bUu6r9yM9LgK4HeRjqnq+
CkVC+lDgJ1NRkQCIeBuepQOlF77wzpHNBl2fdvv1HMpG67B0aXv4z22u3QqbV6Ty
MFJTahV0kip4pyfNZKxwEAlGK47YEBhOTUtDvMy1N1/kona5ogFXXppm6y2tjcDB
oDnZUuD8Yusi/GJMDH0TBeY80zuOzURJBZKanAprJpq+O3pwNViDi4afxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaOuXZ9arP9DbUD06FszsnUt1EUMB8GA1UdIwQY
MBaAFF58dzaUXCmne6zVsYsP9YdREXutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWIt
ZWVlZGQ5OWI4Y2M0LzEvWm82NWRuMXFzXzBOdFFQVG9Xek95ZFMzVVJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83YmRkMDctNmU1NS00YTA1LTlkMWItZWVlZGQ5OWI4Y2M0
LzEvWG54M05wUmNLYWQ3ck5XeGl3XzFoMUVSZTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjlMA0G
CSqGSIb3DQEBCwUAA4IBAQDQZbDWrw5olnxcpilBYvhlj9P+XPUsUAqDIWjiCCfS
0d+mcZSrDfejfSP+GztxB3JDmr0EM0DYderhNZ+LSUtuJ7LzybL1zXrJZUXECRJq
dAxdR2XYjP6br9sLrmCDRvWl0ASTgd4kmwnptpCJOd54slns2Nqhm1UNu81d5Sv9
ZIFSnvdDkdCNdI8k8gTM+bfVAavYnI2ikOwf8ZEJpaI/OnF8OmQP6H/5RQrH6DmC
ulZLku2ztyRFz3bvN8LYjFvz8fgWcYzJCKdi/4ql13mrKfNyhjBaX0E8AzrYaiYs
v7F1GiRK58jlzdOMOnLJv0r0jqR3YK3xthS4BqqDVOhk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:35 2024 by rpki-client on console-fra.rpki-client.org