Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/7tl8dsXNHDT56u6Pd1tWXsrn-K8.roa
File:                     7tl8dsXNHDT56u6Pd1tWXsrn-K8.roa (raw, json)
Hash identifier:          8HF2QdaOYZfjP+Ajh0ebvrS8Iiqkzqrqq5dOk/p6qyU=
Subject key identifier:   EE:D9:7C:76:C5:CD:1C:34:F9:EA:EE:8F:77:5B:56:5E:CA:E7:F8:AF
Certificate issuer:       /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial:       018B6CA5CACF19366B3A3B5B8E47477078A3
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/7tl8dsXNHDT56u6Pd1tWXsrn-K8.roa
Signing time:             Thu 26 Oct 2023 15:41:26 +0000
ROA not before:           Thu 26 Oct 2023 15:41:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205185
IP address blocks:        185.142.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:a5:ca:cf:19:36:6b:3a:3b:5b:8e:47:47:70:78:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
        Validity
            Not Before: Oct 26 15:41:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eed97c76c5cd1c34f9eaee8f775b565ecae7f8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:ce:5a:08:6d:af:48:ca:7f:f4:14:b7:67:
                    29:9a:ec:31:d6:1d:9c:ba:27:cd:0e:d7:05:ed:17:
                    c7:52:ee:6e:3b:bf:f8:2f:ee:1f:bb:f5:b2:56:89:
                    20:00:65:6b:57:c1:90:fa:51:d7:7c:7c:7a:88:3a:
                    00:56:10:54:73:28:58:94:76:bf:cb:c5:cc:79:ba:
                    2a:5a:aa:6c:f6:a8:76:b2:ac:7c:46:46:6e:3b:40:
                    24:e0:bd:d6:d3:d9:bb:33:14:bd:8a:34:41:e3:a7:
                    a9:ef:57:bc:e6:53:e0:72:5d:dc:22:0a:c8:92:da:
                    d9:a6:09:4c:4a:db:4d:e3:b2:9c:31:46:69:58:dc:
                    c6:3a:23:83:9a:a6:4a:75:af:8c:f2:03:68:48:eb:
                    54:5b:dd:54:3b:ef:9a:f7:72:af:c0:4c:c9:89:67:
                    f9:e3:4a:72:5b:b0:0a:09:fe:fd:5f:ce:9b:46:b8:
                    cf:0b:09:2d:54:11:89:dd:f3:a2:a0:33:e3:50:cb:
                    03:a9:47:6a:93:13:d5:34:8d:1e:b5:69:bc:d1:b4:
                    6e:98:28:9c:e7:11:98:fe:fe:f7:fb:78:86:97:a3:
                    64:2e:da:ad:ab:11:a2:1e:d4:02:f4:26:d6:0e:7e:
                    8a:a8:36:b6:b9:eb:45:15:da:c9:d9:32:6c:a6:83:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:7C:76:C5:CD:1C:34:F9:EA:EE:8F:77:5B:56:5E:CA:E7:F8:AF
            X509v3 Authority Key Identifier:
                keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/7tl8dsXNHDT56u6Pd1tWXsrn-K8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:de:e6:15:e7:13:46:5c:24:99:53:36:92:87:23:e8:ac:80:
         bf:31:d7:de:10:fb:f2:77:18:53:f3:c0:d1:3a:7f:40:80:b6:
         66:4d:51:06:35:04:cc:de:a3:5b:30:a9:b2:04:04:7a:0d:7b:
         e9:f4:aa:31:63:d9:96:37:cd:cc:c3:b7:66:b0:5f:90:29:00:
         67:e2:83:f6:10:b3:5b:15:2a:4f:a3:c4:d0:ee:27:ad:e1:31:
         17:cf:47:1b:62:61:61:62:fc:f1:60:6f:57:34:b8:d1:28:92:
         d4:64:5d:11:73:1b:77:34:0c:0c:86:50:33:52:f8:09:62:dd:
         e8:a5:23:d2:46:9b:05:dc:80:24:49:6a:ea:d6:93:36:59:c6:
         e1:fb:cd:b9:74:2a:6f:95:32:26:aa:ff:52:0b:d8:07:b2:0b:
         e5:51:3a:6b:c1:a4:0f:26:a2:ff:1d:ce:1a:4e:81:9f:36:c8:
         46:82:7a:4c:d2:b2:95:0f:0d:06:41:be:bd:7b:7c:10:b3:d1:
         af:03:df:86:ba:95:3c:eb:73:d0:13:13:76:26:82:cb:93:2b:
         52:3d:70:fb:7d:d0:9c:51:c0:82:f1:6a:8e:77:87:33:cf:ab:
         73:4c:5a:d2:47:47:81:fa:3a:ae:27:05:35:8c:0e:97:44:ba:
         08:4e:c9:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtspcrPGTZrOjtbjkdHcHijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5
ODc0MjQwHhcNMjMxMDI2MTU0MTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQ5N2M3NmM1Y2QxYzM0ZjllYWVlOGY3NzViNTY1ZWNhZTdmOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu3OWghtr0jKf/QUt2cpmuwx1h2c
uifNDtcF7RfHUu5uO7/4L+4fu/WyVokgAGVrV8GQ+lHXfHx6iDoAVhBUcyhYlHa/
y8XMeboqWqps9qh2sqx8RkZuO0Ak4L3W09m7MxS9ijRB46ep71e85lPgcl3cIgrI
ktrZpglMSttN47KcMUZpWNzGOiODmqZKda+M8gNoSOtUW91UO++a93KvwEzJiWf5
40pyW7AKCf79X86bRrjPCwktVBGJ3fOioDPjUMsDqUdqkxPVNI0etWm80bRumCic
5xGY/v73+3iGl6NkLtqtqxGiHtQC9CbWDn6KqDa2uetFFdrJ2TJspoNT2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7ZfHbFzRw0+eruj3dbVl7K5/ivMB8GA1UdIwQY
MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt
ZDk0MDA1MGU1NmNhLzEvN3RsOGRzWE5IRFQ1NnU2UGQxdFdYc3JuLUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh
LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY5PMA0G
CSqGSIb3DQEBCwUAA4IBAQAU3uYV5xNGXCSZUzaShyPorIC/MdfeEPvydxhT88DR
On9AgLZmTVEGNQTM3qNbMKmyBAR6DXvp9KoxY9mWN83Mw7dmsF+QKQBn4oP2ELNb
FSpPo8TQ7iet4TEXz0cbYmFhYvzxYG9XNLjRKJLUZF0Rcxt3NAwMhlAzUvgJYt3o
pSPSRpsF3IAkSWrq1pM2Wcbh+825dCpvlTImqv9SC9gHsgvlUTprwaQPJqL/Hc4a
ToGfNshGgnpM0rKVDw0GQb69e3wQs9GvA9+GupU863PQExN2JoLLkytSPXD7fdCc
UcCC8WqOd4czz6tzTFrSR0eB+jquJwU1jA6XRLoITslh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:09 2024 by rpki-client on console-fra.rpki-client.org