Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa
File:                     GWteL4INAFvjrMjVvY14NL0XM6w.roa (raw, json)
Hash identifier:          ZaUWkzXl3PU+oWdfWeGe6fy4GEDxOQEFJnETmtGtdUM=
Subject key identifier:   19:6B:5E:2F:82:0D:00:5B:E3:AC:C8:D5:BD:8D:78:34:BD:17:33:AC
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       018F4D3E36B1AEA724358132064CFA5D9CDD
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa
Signing time:             Mon 06 May 2024 09:31:13 +0000
ROA not before:           Mon 06 May 2024 09:31:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198381
IP address blocks:        80.84.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 10:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:3e:36:b1:ae:a7:24:35:81:32:06:4c:fa:5d:9c:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: May  6 09:31:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=196b5e2f820d005be3acc8d5bd8d7834bd1733ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:72:74:5e:fd:c5:f3:80:c0:da:fd:39:b7:
                    ef:0c:ad:7e:64:16:01:a4:b5:8a:b2:4c:91:b3:b8:
                    fc:b2:18:f0:7a:3c:ad:61:56:1f:7f:dd:84:45:a5:
                    bc:0b:84:c3:79:f5:3b:5b:1a:17:a4:70:f6:42:51:
                    a3:6d:6e:96:f6:7c:61:33:37:b1:22:bc:e0:db:56:
                    65:b0:40:ba:aa:d3:4c:76:87:bf:1e:db:a1:b8:49:
                    2f:85:26:ac:ab:33:81:0b:4a:a1:32:90:9e:c5:87:
                    02:7d:ad:d0:a2:01:be:d8:0c:d2:64:14:d4:78:48:
                    43:36:2a:4a:bf:e8:51:0c:22:ed:a4:5c:7c:d7:1f:
                    a0:00:cd:88:90:31:65:24:a9:2d:52:ea:ff:91:9e:
                    1b:4e:9a:a0:17:27:81:e9:a4:07:55:92:c7:5d:50:
                    1a:31:d3:57:d5:f6:bf:61:07:86:29:13:44:5f:50:
                    dd:75:e1:c9:3f:a0:f3:7c:f2:a6:b1:be:e3:77:a8:
                    94:93:76:4c:ae:07:fe:38:b9:28:9f:72:2d:d9:51:
                    8b:5f:cc:42:39:10:b7:61:98:22:4b:2b:85:2a:42:
                    b9:dd:5b:e7:8d:09:66:61:c2:ac:d5:89:6e:11:86:
                    6e:9d:f0:e3:e5:82:f3:88:7a:b7:6a:ba:a9:92:41:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:5E:2F:82:0D:00:5B:E3:AC:C8:D5:BD:8D:78:34:BD:17:33:AC
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/GWteL4INAFvjrMjVvY14NL0XM6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.84.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:61:86:89:1c:ba:c6:cb:8b:88:36:2f:ec:94:1a:51:dc:
         43:b7:b7:a2:ec:16:a4:cc:f7:32:c7:b3:ee:54:23:12:3f:7e:
         87:81:37:c7:c4:13:a2:b2:46:74:3b:99:93:20:f1:09:1a:f5:
         0e:16:cc:3d:e6:5b:61:21:5e:96:9c:4f:5d:67:fc:37:d1:8b:
         52:58:68:89:a0:19:cd:46:44:d3:62:12:75:0a:31:0d:e8:19:
         11:e5:7b:b7:29:e5:10:0c:78:39:c3:88:04:af:46:0a:92:3f:
         9a:56:a7:17:e0:17:b7:4f:c2:3f:86:b2:e9:d0:8a:79:0c:53:
         66:5d:43:ee:a5:e6:aa:73:22:f6:97:62:e0:1d:53:b9:e9:56:
         b6:fc:b0:cb:98:c8:22:69:8e:04:fa:1e:42:9b:5d:c9:48:49:
         18:3a:9c:b9:07:60:9b:96:7f:c8:26:a0:ef:e7:96:93:3b:c7:
         5e:71:22:6c:09:fa:0d:5f:64:97:cd:c6:1b:78:1b:ca:d5:57:
         29:a1:94:e1:b2:c4:c7:fe:d5:e3:50:bc:4c:dd:8a:ff:f0:57:
         c7:fb:42:04:6c:06:c4:29:02:a5:68:2d:a9:bc:c9:80:ac:c8:
         de:99:2a:89:4d:be:3d:1b:8f:c6:e2:46:ff:6a:48:99:bb:17:
         31:8e:94:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9NPjaxrqckNYEyBkz6XZzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2
NDE2ZjkwHhcNMjQwNTA2MDkzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTZiNWUyZjgyMGQwMDViZTNhY2M4ZDViZDhkNzgzNGJkMTczM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIxydF79xfOAwNr9ObfvDK1+ZBYB
pLWKskyRs7j8shjwejytYVYff92ERaW8C4TDefU7WxoXpHD2QlGjbW6W9nxhMzex
Irzg21ZlsEC6qtNMdoe/HtuhuEkvhSasqzOBC0qhMpCexYcCfa3QogG+2AzSZBTU
eEhDNipKv+hRDCLtpFx81x+gAM2IkDFlJKktUur/kZ4bTpqgFyeB6aQHVZLHXVAa
MdNX1fa/YQeGKRNEX1DddeHJP6DzfPKmsb7jd6iUk3ZMrgf+OLkon3It2VGLX8xC
ORC3YZgiSyuFKkK53VvnjQlmYcKs1YluEYZunfDj5YLziHq3arqpkkEGjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlrXi+CDQBb46zI1b2NeDS9FzOsMB8GA1UdIwQY
MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt
MzkyYjg2M2M5ZjAzLzEvR1d0ZUw0SU5BRnZqck1qVnZZMTROTDBYTTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUtMzkyYjg2M2M5ZjAz
LzEvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFSRMA0G
CSqGSIb3DQEBCwUAA4IBAQArRWGGiRy6xsuLiDYv7JQaUdxDt7ei7BakzPcyx7Pu
VCMSP36HgTfHxBOiskZ0O5mTIPEJGvUOFsw95lthIV6WnE9dZ/w30YtSWGiJoBnN
RkTTYhJ1CjEN6BkR5Xu3KeUQDHg5w4gEr0YKkj+aVqcX4Be3T8I/hrLp0Ip5DFNm
XUPupeaqcyL2l2LgHVO56Va2/LDLmMgiaY4E+h5Cm13JSEkYOpy5B2Cbln/IJqDv
55aTO8decSJsCfoNX2SXzcYbeBvK1VcpoZThssTH/tXjULxM3Yr/8FfH+0IEbAbE
KQKlaC2pvMmArMjemSqJTb49G4/G4kb/akiZuxcxjpRj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:43 2024 by rpki-client on console-fra.rpki-client.org