Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Zie1qZWugIjqhDElqcuIHvhBNPk.roa
File:                     Zie1qZWugIjqhDElqcuIHvhBNPk.roa (raw, json)
Hash identifier:          uqqc3hh4VUdcmvsyPDs/jgjs5F59T0jfGDtgKAGxFpE=
Subject key identifier:   66:27:B5:A9:95:AE:80:88:EA:84:31:25:A9:CB:88:1E:F8:41:34:F9
Certificate issuer:       /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial:       0189C50BE35B6D046C33B98B3EFB5C83829E
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Zie1qZWugIjqhDElqcuIHvhBNPk.roa
Signing time:             Sat 05 Aug 2023 09:33:57 +0000
ROA not before:           Sat 05 Aug 2023 09:33:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43754
IP address blocks:        212.23.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c5:0b:e3:5b:6d:04:6c:33:b9:8b:3e:fb:5c:83:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
        Validity
            Not Before: Aug  5 09:33:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6627b5a995ae8088ea843125a9cb881ef84134f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:be:9b:be:be:e5:42:0d:3a:b9:e4:28:8a:
                    3f:b0:a0:9e:7f:5c:9a:50:d4:ce:9e:0c:6f:cd:67:
                    44:95:44:4d:1b:1c:6b:07:1b:5b:3d:7f:c8:b4:b2:
                    72:4c:d8:11:81:dc:6d:6c:7a:67:57:c3:32:be:a9:
                    48:01:e2:cd:40:32:e4:05:02:17:c0:3b:db:1c:e7:
                    0e:e3:83:cb:72:a5:cb:ca:d4:e2:5b:11:17:98:07:
                    91:e0:b2:7f:03:83:e1:12:dd:89:49:99:89:57:bb:
                    0f:c3:36:06:85:61:43:f7:56:24:d6:bf:cd:1b:5e:
                    a4:a7:39:3c:b8:98:83:3e:d8:24:44:ea:59:24:a9:
                    5f:ab:ad:45:b0:e9:f1:96:38:8e:24:f5:fb:dd:0d:
                    3b:19:30:b0:4d:62:64:36:f2:af:80:11:dd:61:99:
                    06:ad:43:c6:87:71:b1:75:4c:a8:bb:49:3e:c5:63:
                    aa:42:d7:3f:71:fc:48:0a:04:31:24:f4:b3:45:a4:
                    cf:ae:17:3f:48:f2:8d:16:4d:c3:62:97:a4:18:e5:
                    da:8a:d0:ad:41:e4:99:f7:86:38:0e:de:16:46:da:
                    a8:7c:1d:9d:9e:e8:73:38:5c:e8:a0:3a:18:0c:e4:
                    0c:8b:66:50:c4:8c:ea:0d:c5:57:a9:b7:a7:e8:67:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:27:B5:A9:95:AE:80:88:EA:84:31:25:A9:CB:88:1E:F8:41:34:F9
            X509v3 Authority Key Identifier:
                keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/Zie1qZWugIjqhDElqcuIHvhBNPk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:09:fa:c7:65:6e:17:1f:32:7d:35:bc:72:79:b6:93:25:96:
         82:58:f3:56:e9:4f:7d:e0:9b:54:f1:72:9c:27:e3:cd:20:ba:
         16:4b:5b:af:1b:3c:aa:7c:14:9c:20:96:a2:a8:f0:ad:de:6e:
         19:a9:c6:49:0e:ab:e2:98:ac:ba:5f:96:1a:2e:dc:b1:b0:a7:
         63:95:3f:8d:b5:79:b0:8c:19:44:a5:d7:2d:4f:c0:6b:0e:12:
         ce:4f:f7:33:27:7d:5b:e7:2a:27:92:db:42:c2:6f:a4:87:3a:
         c2:cc:3a:07:9e:76:85:d5:bf:4d:fd:21:ba:c7:87:18:c2:82:
         da:d3:4e:ac:83:17:12:fc:8d:d0:41:51:f4:e1:cc:53:67:f2:
         fe:b3:af:ad:ab:eb:13:9c:c5:03:f2:f5:f6:0a:62:6e:11:5c:
         8e:70:2e:78:35:72:5d:5d:7e:21:53:ed:b4:5c:07:19:7d:4c:
         8d:0b:bf:48:63:a7:13:ec:11:d8:ec:5f:e5:45:4e:07:d1:37:
         84:e3:df:04:da:4a:36:9b:5b:7d:ed:d4:1e:29:5e:61:2c:6f:
         da:04:56:33:ba:39:d9:90:a6:6e:86:82:0b:35:ab:97:7c:1d:
         ee:1b:3f:4b:9a:52:d8:b2:ef:39:4d:af:3d:47:4c:07:e3:26:
         72:8e:a8:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnFC+NbbQRsM7mLPvtcg4KeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjMwODA1MDkzMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjI3YjVhOTk1YWU4MDg4ZWE4NDMxMjVhOWNiODgxZWY4NDEzNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAW+m76+5UINOrnkKIo/sKCef1ya
UNTOngxvzWdElURNGxxrBxtbPX/ItLJyTNgRgdxtbHpnV8MyvqlIAeLNQDLkBQIX
wDvbHOcO44PLcqXLytTiWxEXmAeR4LJ/A4PhEt2JSZmJV7sPwzYGhWFD91Yk1r/N
G16kpzk8uJiDPtgkROpZJKlfq61FsOnxljiOJPX73Q07GTCwTWJkNvKvgBHdYZkG
rUPGh3GxdUyou0k+xWOqQtc/cfxICgQxJPSzRaTPrhc/SPKNFk3DYpekGOXaitCt
QeSZ94Y4Dt4WRtqofB2dnuhzOFzooDoYDOQMi2ZQxIzqDcVXqben6Gfs/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGYntamVroCI6oQxJanLiB74QTT5MB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvWmllMXFaV3VnSWpxaERFbHFjdUlIdmhCTlBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfYMA0G
CSqGSIb3DQEBCwUAA4IBAQAJCfrHZW4XHzJ9NbxyebaTJZaCWPNW6U994JtU8XKc
J+PNILoWS1uvGzyqfBScIJaiqPCt3m4ZqcZJDqvimKy6X5YaLtyxsKdjlT+NtXmw
jBlEpdctT8BrDhLOT/czJ31b5yonkttCwm+khzrCzDoHnnaF1b9N/SG6x4cYwoLa
006sgxcS/I3QQVH04cxTZ/L+s6+tq+sTnMUD8vX2CmJuEVyOcC54NXJdXX4hU+20
XAcZfUyNC79IY6cT7BHY7F/lRU4H0TeE498E2ko2m1t97dQeKV5hLG/aBFYzujnZ
kKZuhoILNauXfB3uGz9LmlLYsu85Ta89R0wH4yZyjqju
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:45 2024 by rpki-client on console-ams.rpki-client.org