Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa
File:                     VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa (raw, json)
Hash identifier:          1nkIvR2NPMj2WGgS6rYqRsWb/82jnIC23Ps1x5AbL10=
Subject key identifier:   54:44:FD:EB:2E:D8:1A:BF:1A:27:96:2D:6C:2F:8D:5E:C6:74:24:21
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       018934054F435EDBB6A6E96D45260B55C635
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa
Signing time:             Sat 08 Jul 2023 05:41:50 +0000
ROA not before:           Sat 08 Jul 2023 05:41:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        85.237.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 07 Oct 2023 07:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:34:05:4f:43:5e:db:b6:a6:e9:6d:45:26:0b:55:c6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jul  8 05:41:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5444fdeb2ed81abf1a27962d6c2f8d5ec6742421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:04:73:fc:7f:24:18:93:6a:3d:fd:c1:37:
                    fa:0e:b7:ee:ff:6d:d1:4d:65:74:98:dc:38:95:f2:
                    f3:00:dd:0b:74:2e:44:6f:74:9f:cd:40:f5:af:e3:
                    84:33:c6:af:4a:1f:2a:23:d3:eb:14:d5:52:f0:52:
                    7b:ab:75:64:ed:9e:ef:56:3b:88:f5:b6:2e:ff:e0:
                    e7:00:e7:68:ea:66:c2:bb:8d:cd:ed:79:d4:1b:21:
                    17:d8:01:6b:12:3f:f8:1b:61:7d:77:56:2a:84:cf:
                    6f:93:2a:91:9f:e3:c5:cb:ac:eb:c6:ad:97:39:79:
                    eb:07:61:ff:26:aa:69:c2:15:da:4c:d6:bb:6c:64:
                    7b:f8:d2:67:59:6a:d4:dd:9e:25:0a:ac:17:39:24:
                    32:38:ea:c6:26:47:c5:2d:e5:e0:cb:8f:ea:b8:7c:
                    df:39:cd:88:fd:9c:ac:f6:4b:4a:56:7c:d7:5c:26:
                    cf:c5:86:17:90:5c:3a:f7:aa:d5:dc:71:e3:d2:b0:
                    ec:31:40:d0:d5:fc:a1:3d:7d:6d:ae:eb:11:9e:b1:
                    92:5f:3c:df:ba:f1:ae:c8:ad:06:c2:9c:47:c3:f8:
                    39:c6:7e:5d:ea:6e:6a:d9:d8:a7:72:66:bf:6c:73:
                    d8:40:52:b7:06:d7:16:09:c2:71:83:db:56:4a:dc:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:FD:EB:2E:D8:1A:BF:1A:27:96:2D:6C:2F:8D:5E:C6:74:24:21
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:a5:f4:46:e5:6a:b6:7e:9b:d7:10:39:fc:9f:f8:3c:d2:9b:
         ae:61:c7:30:2b:2b:6a:9f:93:25:17:ac:0d:fc:3c:c8:92:8a:
         ec:2a:0d:dd:d4:53:cd:89:a3:67:1b:ad:fd:2a:99:f2:82:41:
         7c:44:76:5b:8d:a6:47:ac:3c:49:3a:99:3c:74:2b:16:9d:73:
         bb:8b:c4:27:63:f1:db:08:d6:cf:00:a4:e6:12:66:ff:ec:2b:
         49:9a:23:6d:27:29:4e:d2:16:88:9f:2c:b2:0f:3b:23:2d:d4:
         a9:e7:c9:3a:b7:a7:17:f4:70:8d:45:64:65:f0:d2:da:51:c2:
         40:1b:c5:a6:05:cd:76:43:0e:de:da:7a:76:8c:70:03:36:a7:
         f3:0f:ea:03:e5:bd:05:e8:08:d7:45:8e:a1:a4:6c:d3:c1:5d:
         f3:86:86:51:6f:a4:62:a1:30:38:45:37:f7:46:76:27:77:fe:
         ee:97:99:fd:5e:59:27:eb:37:6a:1a:17:57:17:16:e4:a7:4a:
         24:f1:96:50:91:01:aa:61:d0:8e:bb:f4:87:01:65:95:2d:ff:
         97:eb:8d:23:99:e1:18:c3:41:54:bc:ed:8f:98:1e:10:58:25:
         1b:c4:b9:d6:c6:9e:30:2a:2c:41:9d:73:af:02:28:ad:a6:77:
         09:77:72:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk0BU9DXtu2pultRSYLVcY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwNzA4MDU0MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ0ZmRlYjJlZDgxYWJmMWEyNzk2MmQ2YzJmOGQ1ZWM2NzQyNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzigEc/x/JBiTaj39wTf6Drfu/23R
TWV0mNw4lfLzAN0LdC5Eb3SfzUD1r+OEM8avSh8qI9PrFNVS8FJ7q3Vk7Z7vVjuI
9bYu/+DnAOdo6mbCu43N7XnUGyEX2AFrEj/4G2F9d1YqhM9vkyqRn+PFy6zrxq2X
OXnrB2H/JqppwhXaTNa7bGR7+NJnWWrU3Z4lCqwXOSQyOOrGJkfFLeXgy4/quHzf
Oc2I/Zys9ktKVnzXXCbPxYYXkFw696rV3HHj0rDsMUDQ1fyhPX1trusRnrGSXzzf
uvGuyK0GwpxHw/g5xn5d6m5q2dincma/bHPYQFK3BtcWCcJxg9tWStzABwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRE/esu2Bq/GieWLWwvjV7GdCQhMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvVkVUOTZ5N1lHcjhhSjVZdGJDLU5Yc1owSkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1QMA0G
CSqGSIb3DQEBCwUAA4IBAQCDpfRG5Wq2fpvXEDn8n/g80puuYccwKytqn5MlF6wN
/DzIkorsKg3d1FPNiaNnG639KpnygkF8RHZbjaZHrDxJOpk8dCsWnXO7i8QnY/Hb
CNbPAKTmEmb/7CtJmiNtJylO0haInyyyDzsjLdSp58k6t6cX9HCNRWRl8NLaUcJA
G8WmBc12Qw7e2np2jHADNqfzD+oD5b0F6AjXRY6hpGzTwV3zhoZRb6RioTA4RTf3
RnYnd/7ul5n9Xlkn6zdqGhdXFxbkp0ok8ZZQkQGqYdCOu/SHAWWVLf+X640jmeEY
w0FUvO2PmB4QWCUbxLnWxp4wKixBnXOvAiitpncJd3J2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org