Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/zjMDI0owufVK2Sr-ycawrfeGAAk.roa
File:                     zjMDI0owufVK2Sr-ycawrfeGAAk.roa (raw, json)
Hash identifier:          ULnUTxEBdKT25kXSc8JTyuEJVYv2FwcLDwtsptZvvE4=
Subject key identifier:   CE:33:03:23:4A:30:B9:F5:4A:D9:2A:FE:C9:C6:B0:AD:F7:86:00:09
Certificate issuer:       /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial:       01890700268DBF09BAEE70D2006B3533FBA7
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/zjMDI0owufVK2Sr-ycawrfeGAAk.roa
Signing time:             Thu 29 Jun 2023 11:53:17 +0000
ROA not before:           Thu 29 Jun 2023 11:53:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213200
IP address blocks:        185.179.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Jul 2023 16:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:07:00:26:8d:bf:09:ba:ee:70:d2:00:6b:35:33:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
        Validity
            Not Before: Jun 29 11:53:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce3303234a30b9f54ad92afec9c6b0adf7860009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:86:35:b5:86:ba:c9:05:1e:83:38:b7:13:
                    c7:cc:ad:c8:c7:86:1c:ef:7c:a0:09:a3:f5:ae:18:
                    77:aa:de:83:f6:d7:d5:b8:ff:a1:2c:79:a7:bc:15:
                    89:39:b3:05:01:cb:08:c8:d5:20:39:2d:cd:f4:06:
                    27:5f:95:40:fd:9c:67:5b:dc:c0:69:ae:f0:33:07:
                    d8:f8:49:12:47:e3:cd:56:08:d9:2a:c5:ad:34:de:
                    7c:f1:40:47:4f:f8:b8:60:9d:ee:c9:b4:a1:ac:96:
                    76:07:d5:ac:47:6b:87:46:f7:de:b4:a6:be:88:df:
                    34:e3:b2:33:93:45:0e:f3:99:f9:15:c0:ac:0a:7b:
                    6a:45:d0:6a:59:94:5b:a7:9e:db:84:43:b6:8e:a9:
                    57:dc:54:9f:fd:b0:a0:44:bb:fb:c8:3b:14:02:9f:
                    17:51:d9:05:bb:6a:f4:20:0e:5c:c7:4f:45:f9:f1:
                    98:d9:e8:ab:74:6d:d2:12:76:89:74:0b:85:a3:ae:
                    e1:a5:51:32:96:4a:d6:00:64:ae:74:4c:66:bd:68:
                    93:05:79:e0:d2:bb:5b:ef:9f:55:5b:51:69:a7:14:
                    5f:03:81:77:2a:b8:a6:2f:af:52:1f:70:c6:cf:7b:
                    52:ac:6e:36:f4:28:fa:eb:fa:22:9c:35:6c:61:f4:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:33:03:23:4A:30:B9:F5:4A:D9:2A:FE:C9:C6:B0:AD:F7:86:00:09
            X509v3 Authority Key Identifier:
                keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/zjMDI0owufVK2Sr-ycawrfeGAAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ff:d6:ea:b4:13:2b:b6:ce:ca:4a:51:3f:58:22:fe:90:5c:
         a0:26:3d:d4:49:d2:d4:ee:fa:0b:79:0a:2c:bc:c7:4e:ba:64:
         f1:ef:c5:5b:04:b3:f9:74:b2:ae:73:66:1f:3b:64:2d:ba:b2:
         4f:57:6b:3e:78:45:b8:16:aa:1d:ab:2a:43:7e:39:56:34:4c:
         3d:66:3f:a1:58:54:86:46:99:8d:45:2b:25:89:00:b8:31:7b:
         f8:f9:36:4b:ae:05:71:b8:82:1c:3d:b1:7c:a4:8d:c9:15:b5:
         f6:96:4c:70:21:b3:3f:70:36:06:d7:6f:af:4d:54:01:e8:f7:
         12:3e:18:a0:b3:f1:5e:42:1a:ff:83:4b:2c:bd:c6:65:ed:15:
         2e:ff:38:7c:b2:d8:39:48:9d:0c:20:d7:18:04:f7:c8:b2:49:
         77:2e:5b:bd:6f:b9:a0:7b:e6:25:b2:90:b7:ea:4e:44:42:9f:
         f5:28:b9:6e:cc:30:0d:9b:47:b5:7c:c5:0c:17:11:66:a1:91:
         31:a3:a6:5f:17:b9:f0:c0:7d:f4:77:ae:19:9d:1d:1f:41:18:
         15:d3:88:6a:dc:49:86:7c:3c:b4:dd:7c:88:45:e6:0d:37:f8:
         93:9d:b9:b6:d9:77:a2:ba:c8:27:67:02:08:3f:a4:ef:11:cf:
         d6:c9:dc:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkHACaNvwm67nDSAGs1M/unMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjE1MzE1ZGM3NTBjMDNlNjBmYzM2YTc1MGM1ZTNmZjY2
ZWFjOTQwHhcNMjMwNjI5MTE1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTMzMDMyMzRhMzBiOWY1NGFkOTJhZmVjOWM2YjBhZGY3ODYwMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVKGNbWGuskFHoM4txPHzK3Ix4Yc
73ygCaP1rhh3qt6D9tfVuP+hLHmnvBWJObMFAcsIyNUgOS3N9AYnX5VA/ZxnW9zA
aa7wMwfY+EkSR+PNVgjZKsWtNN588UBHT/i4YJ3uybShrJZ2B9WsR2uHRvfetKa+
iN8047Izk0UO85n5FcCsCntqRdBqWZRbp57bhEO2jqlX3FSf/bCgRLv7yDsUAp8X
UdkFu2r0IA5cx09F+fGY2eirdG3SEnaJdAuFo67hpVEylkrWAGSudExmvWiTBXng
0rtb759VW1FppxRfA4F3KrimL69SH3DGz3tSrG429Cj66/oinDVsYfQccwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM4zAyNKMLn1Stkq/snGsK33hgAJMB8GA1UdIwQY
MBaAFIBhUxXcdQwD5g/DanUMXj/2bqyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgt
ZjhlNWIyZDg2ODBjLzEvempNREkwb3d1ZlZLMlNyLXljYXdyZmVHQUFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZTg0Y2UtZDcwNC00NzY2LWEzODgtZjhlNWIyZDg2ODBj
LzEvZ0dGVEZkeDFEQVBtRDhOcWRReGVQX1p1ckpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubOgMA0G
CSqGSIb3DQEBCwUAA4IBAQBc/9bqtBMrts7KSlE/WCL+kFygJj3USdLU7voLeQos
vMdOumTx78VbBLP5dLKuc2YfO2QturJPV2s+eEW4FqodqypDfjlWNEw9Zj+hWFSG
RpmNRSsliQC4MXv4+TZLrgVxuIIcPbF8pI3JFbX2lkxwIbM/cDYG12+vTVQB6PcS
Phigs/FeQhr/g0ssvcZl7RUu/zh8stg5SJ0MINcYBPfIskl3Llu9b7mge+YlspC3
6k5EQp/1KLluzDANm0e1fMUMFxFmoZExo6ZfF7nwwH30d64ZnR0fQRgV04hq3EmG
fDy03XyIReYNN/iTnbm22XeiusgnZwIIP6TvEc/WydyB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org