Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IsbBx__4RSDqcHSOl_XHvvgta6Y.roa
File:                     IsbBx__4RSDqcHSOl_XHvvgta6Y.roa (raw, json)
Hash identifier:          PAOI9J/VcWAiCpVx8r5K3fg78WPG5RownR0ufdDXGpg=
Subject key identifier:   22:C6:C1:C7:FF:F8:45:20:EA:70:74:8E:97:F5:C7:BE:F8:2D:6B:A6
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0191195B13778A0A3424A49697EBBFA8A33F
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IsbBx__4RSDqcHSOl_XHvvgta6Y.roa
Signing time:             Sat 03 Aug 2024 17:48:04 +0000
ROA not before:           Sat 03 Aug 2024 17:48:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48147
IP address blocks:        85.133.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 28 Sep 2024 13:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:19:5b:13:77:8a:0a:34:24:a4:96:97:eb:bf:a8:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Aug  3 17:48:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=22c6c1c7fff84520ea70748e97f5c7bef82d6ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:f3:0f:70:49:46:46:92:86:63:1d:cd:97:
                    a4:c6:f9:38:e5:2f:d4:f6:60:7f:a7:4b:5c:83:fe:
                    f3:34:a3:f6:33:8a:a4:f4:a3:ee:0e:31:14:1b:72:
                    fb:c2:de:99:0d:27:fc:00:eb:46:e4:b6:c6:c5:24:
                    89:bb:0b:3b:3f:fd:1f:c0:55:1b:7b:99:88:07:3b:
                    11:e3:b5:fa:4c:56:c3:dd:08:30:77:37:41:07:9b:
                    ff:f2:e8:97:8c:59:cf:85:07:2f:d4:ef:e0:e9:a8:
                    ce:f9:8e:f0:2d:25:be:10:11:d5:c3:d4:9f:dc:ce:
                    96:d8:db:8c:23:e7:57:f4:3c:aa:0f:49:ad:77:29:
                    aa:f9:30:45:96:14:b6:4f:a6:ad:c7:51:d7:3c:81:
                    7d:94:5d:b0:bf:fe:22:d3:df:da:3b:ba:9d:64:a5:
                    1d:a6:cb:66:c3:a5:a1:d4:23:b6:eb:48:e5:a3:3b:
                    5b:c9:93:de:b5:63:b1:a8:bb:08:58:3d:34:f1:79:
                    17:46:91:8d:9e:f0:56:bf:15:b5:6e:c1:0e:56:12:
                    b7:b2:cb:84:ed:23:ee:25:fc:af:24:8e:ba:06:d6:
                    03:f1:a0:7f:6a:56:a9:eb:16:33:6a:0c:0b:23:ca:
                    27:d0:eb:dd:31:49:e1:bc:47:e0:5e:be:16:e1:19:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C6:C1:C7:FF:F8:45:20:EA:70:74:8E:97:F5:C7:BE:F8:2D:6B:A6
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/IsbBx__4RSDqcHSOl_XHvvgta6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:03:22:fa:92:8e:61:b7:ae:e1:57:12:c5:9c:90:6e:a8:b0:
         8f:d8:db:5f:6d:58:83:a2:7b:c5:03:c8:03:44:c8:89:c7:82:
         f1:0a:81:ca:3e:34:be:e9:79:a3:43:70:fe:a6:0c:ae:14:71:
         6e:2e:57:7c:5d:5e:1e:83:c8:c3:a0:af:5e:3d:33:93:6f:f8:
         4b:3b:01:d7:3d:92:90:44:9c:6b:86:14:63:c5:78:1c:f2:1d:
         55:1b:12:f7:42:ef:21:15:14:a9:d0:d0:7f:b4:ba:ca:19:3c:
         35:ba:63:2e:e7:8b:e2:fb:3d:ef:a8:dc:9c:25:28:fa:9e:d3:
         e5:9f:d2:dd:d7:3f:ca:2a:56:09:7e:79:e7:2b:a0:40:3d:40:
         6a:f4:a1:10:80:54:1d:76:c1:e9:b3:c7:7d:16:95:1b:5f:0a:
         77:e9:dc:81:16:b8:da:b8:6b:7e:65:97:23:01:16:1d:fc:66:
         ab:e7:d0:e4:cb:9a:e6:ad:e9:7d:0f:dc:10:4b:ba:5f:3d:0f:
         4d:7b:7f:64:24:de:be:5f:fb:6d:c6:06:e4:cb:7b:b8:16:67:
         33:13:97:b1:99:3e:08:8c:83:ff:c0:3d:60:ba:a4:61:26:ca:
         3d:e7:6f:e7:4f:52:1c:ab:5c:ed:a8:01:f1:17:15:67:26:7e:
         2a:40:d7:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEZWxN3igo0JKSWl+u/qKM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwODAzMTc0ODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmM2YzFjN2ZmZjg0NTIwZWE3MDc0OGU5N2Y1YzdiZWY4MmQ2YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4zzD3BJRkaShmMdzZekxvk45S/U
9mB/p0tcg/7zNKP2M4qk9KPuDjEUG3L7wt6ZDSf8AOtG5LbGxSSJuws7P/0fwFUb
e5mIBzsR47X6TFbD3QgwdzdBB5v/8uiXjFnPhQcv1O/g6ajO+Y7wLSW+EBHVw9Sf
3M6W2NuMI+dX9DyqD0mtdymq+TBFlhS2T6atx1HXPIF9lF2wv/4i09/aO7qdZKUd
pstmw6Wh1CO260jloztbyZPetWOxqLsIWD008XkXRpGNnvBWvxW1bsEOVhK3ssuE
7SPuJfyvJI66BtYD8aB/alap6xYzagwLI8on0OvdMUnhvEfgXr4W4RnbTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLGwcf/+EUg6nB0jpf1x774LWumMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvSXNiQnhfXzRSU0RxY0hTT2xfWEh2dmd0YTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXxMA0G
CSqGSIb3DQEBCwUAA4IBAQA5AyL6ko5ht67hVxLFnJBuqLCP2NtfbViDonvFA8gD
RMiJx4LxCoHKPjS+6XmjQ3D+pgyuFHFuLld8XV4eg8jDoK9ePTOTb/hLOwHXPZKQ
RJxrhhRjxXgc8h1VGxL3Qu8hFRSp0NB/tLrKGTw1umMu54vi+z3vqNycJSj6ntPl
n9Ld1z/KKlYJfnnnK6BAPUBq9KEQgFQddsHps8d9FpUbXwp36dyBFrjauGt+ZZcj
ARYd/Gar59Dky5rmrel9D9wQS7pfPQ9Ne39kJN6+X/ttxgbky3u4FmczE5exmT4I
jIP/wD1guqRhJso952/nT1Icq1ztqAHxFxVnJn4qQNdL
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:26:41 2024 by rpki-client on console-fra.rpki-client.org