Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/I84yI6o7yBAaa2ZPnunY8ZoBoCI.roa
File:                     I84yI6o7yBAaa2ZPnunY8ZoBoCI.roa (raw, json)
Hash identifier:          GQJhK/aQGKdfcW8JmGR8UlveUoxHlNK3jGgwWMZt6CE=
Subject key identifier:   23:CE:32:23:AA:3B:C8:10:1A:6B:66:4F:9E:E9:D8:F1:9A:01:A0:22
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       0189928C2AF2620301E9B8126FDC69C92156
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/I84yI6o7yBAaa2ZPnunY8ZoBoCI.roa
Signing time:             Wed 26 Jul 2023 14:13:26 +0000
ROA not before:           Wed 26 Jul 2023 14:13:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25446
IP address blocks:        93.183.104.0/24 maxlen: 24
                          93.183.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:92:8c:2a:f2:62:03:01:e9:b8:12:6f:dc:69:c9:21:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Jul 26 14:13:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23ce3223aa3bc8101a6b664f9ee9d8f19a01a022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:b2:05:85:96:73:f5:5d:c5:b1:04:6a:6c:
                    f6:06:8c:f4:57:49:d4:cf:90:34:0f:0e:98:a7:25:
                    0e:7d:1e:ca:95:17:77:52:5b:0f:cd:e8:5f:e7:ec:
                    a9:b0:eb:60:7e:88:5a:4b:fa:6a:91:ca:89:82:e3:
                    8b:87:b3:b5:53:81:45:da:c2:0d:e3:2c:e2:82:1f:
                    47:8b:30:b1:32:15:97:a8:bf:89:28:07:8e:a4:70:
                    ca:3c:ef:47:db:d7:26:50:b9:c2:2d:4c:52:73:30:
                    28:01:8d:e6:79:5e:81:6f:d8:76:36:0c:bf:ec:08:
                    f0:8f:07:8d:46:3c:0b:d4:37:c2:8f:5a:04:58:cc:
                    98:d5:0a:6d:d6:5c:36:6e:23:24:29:a6:93:a9:23:
                    a1:18:81:4f:57:15:63:85:ec:70:b2:18:c7:5a:ad:
                    5d:b5:ca:11:46:b5:0a:a5:57:e6:c9:44:24:6d:67:
                    4c:a4:51:8e:09:09:22:b8:df:b1:86:5a:3a:49:f7:
                    5d:5b:82:1f:ab:2d:e8:99:67:b7:6b:3e:35:a9:c4:
                    c2:05:85:7e:10:f9:f9:74:31:3e:3a:b6:06:1a:8e:
                    7a:f9:61:81:47:77:46:a0:c7:73:81:d1:92:39:13:
                    11:1d:1a:a4:a1:52:a8:4b:c0:83:2c:fc:67:fa:be:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CE:32:23:AA:3B:C8:10:1A:6B:66:4F:9E:E9:D8:F1:9A:01:A0:22
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/I84yI6o7yBAaa2ZPnunY8ZoBoCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.183.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:2b:89:8d:1e:3e:db:67:a6:64:d8:67:64:a0:6e:31:1e:0c:
         2c:6d:0b:e0:1b:80:b7:0f:86:2c:d5:b6:cd:0c:e2:b6:7c:29:
         66:e3:d4:d3:1d:bc:3c:4a:d9:c0:f7:70:d7:45:a4:69:cf:00:
         14:41:3c:a1:e1:54:65:3c:47:07:6a:c2:c1:10:2a:85:47:bd:
         3a:51:3f:ad:b0:73:e7:a8:07:ee:de:3a:fe:84:88:dc:d6:b4:
         a0:8c:b2:fe:78:f4:da:0a:f9:22:19:08:83:db:20:3f:5b:56:
         c4:71:88:b4:a2:25:9e:cb:e6:20:c2:5e:be:6b:bc:64:52:2a:
         cc:6f:e5:2a:14:a2:5b:ad:96:86:41:0e:1d:86:82:c3:9c:a8:
         2d:52:f5:0c:cb:83:53:bb:b8:3b:10:6d:aa:0e:6b:ca:55:3c:
         fb:a9:68:f8:24:17:ff:fd:14:b8:31:e3:29:e2:ab:1d:45:85:
         b5:13:a2:a4:5c:da:43:7a:e8:b1:c3:34:77:98:b7:c6:b2:9f:
         d4:23:3c:26:be:2c:2d:3e:c7:a3:7b:39:24:d9:59:35:ec:93:
         0e:c8:70:e2:5c:96:43:12:81:9b:14:f0:34:43:93:9f:0f:ae:
         8c:c5:5b:31:c4:e4:63:5d:fe:5f:50:31:1a:05:09:b1:c7:b4:
         b1:b9:d6:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmSjCryYgMB6bgSb9xpySFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjMwNzI2MTQxMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2NlMzIyM2FhM2JjODEwMWE2YjY2NGY5ZWU5ZDhmMTlhMDFhMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv+yBYWWc/VdxbEEamz2Boz0V0nU
z5A0Dw6YpyUOfR7KlRd3UlsPzehf5+ypsOtgfohaS/pqkcqJguOLh7O1U4FF2sIN
4yzigh9HizCxMhWXqL+JKAeOpHDKPO9H29cmULnCLUxSczAoAY3meV6Bb9h2Ngy/
7AjwjweNRjwL1DfCj1oEWMyY1Qpt1lw2biMkKaaTqSOhGIFPVxVjhexwshjHWq1d
tcoRRrUKpVfmyUQkbWdMpFGOCQkiuN+xhlo6SfddW4Ifqy3omWe3az41qcTCBYV+
EPn5dDE+OrYGGo56+WGBR3dGoMdzgdGSORMRHRqkoVKoS8CDLPxn+r6a+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPOMiOqO8gQGmtmT57p2PGaAaAiMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvSTg0eUk2bzd5QkFhYTJaUG51blk4Wm9Cb0NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbdoMA0G
CSqGSIb3DQEBCwUAA4IBAQA5K4mNHj7bZ6Zk2GdkoG4xHgwsbQvgG4C3D4Ys1bbN
DOK2fClm49TTHbw8StnA93DXRaRpzwAUQTyh4VRlPEcHasLBECqFR706UT+tsHPn
qAfu3jr+hIjc1rSgjLL+ePTaCvkiGQiD2yA/W1bEcYi0oiWey+Ygwl6+a7xkUirM
b+UqFKJbrZaGQQ4dhoLDnKgtUvUMy4NTu7g7EG2qDmvKVTz7qWj4JBf//RS4MeMp
4qsdRYW1E6KkXNpDeuixwzR3mLfGsp/UIzwmviwtPsejezkk2Vk17JMOyHDiXJZD
EoGbFPA0Q5OfD66MxVsxxORjXf5fUDEaBQmxx7SxudbM
-----END CERTIFICATE-----
Generated at Wed Oct 11 06:36:39 2023 by rpki-client on console-fra.rpki-client.org