Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/DV88l62QHN3Hc4J0LTSINUo7BAQ.roa
File:                     DV88l62QHN3Hc4J0LTSINUo7BAQ.roa (raw, json)
Hash identifier:          EPDAZ98N5UuLUnKBy8w5y38OFfkHuK3dt7iQwNP/jEs=
Subject key identifier:   0D:5F:3C:97:AD:90:1C:DD:C7:73:82:74:2D:34:88:35:4A:3B:04:04
Certificate issuer:       /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial:       018C7F03D2F217166678043226096B1E86FA
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/DV88l62QHN3Hc4J0LTSINUo7BAQ.roa
Signing time:             Mon 18 Dec 2023 22:20:06 +0000
ROA not before:           Mon 18 Dec 2023 22:20:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        193.169.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7f:03:d2:f2:17:16:66:78:04:32:26:09:6b:1e:86:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
        Validity
            Not Before: Dec 18 22:20:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d5f3c97ad901cddc77382742d3488354a3b0404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:cf:69:44:9a:44:33:60:70:c9:4d:a5:6e:
                    f3:23:c3:9d:3d:fb:34:8f:2a:e9:15:32:3b:9f:4d:
                    7f:dd:4a:68:29:36:e3:a9:0a:31:79:da:47:2c:3a:
                    4d:3e:be:72:6d:4a:bb:6c:e0:a2:82:3c:83:2f:47:
                    46:a7:c9:3e:f6:07:ea:f7:56:22:b9:d2:d0:38:14:
                    af:52:fa:7e:0a:3f:17:24:15:ec:f2:c6:ce:5a:8d:
                    ac:1a:66:54:13:26:2b:be:7f:5f:b3:c2:f8:27:7e:
                    da:35:ea:72:dc:11:6c:24:62:fc:c6:08:dc:da:59:
                    4c:b0:2b:19:b8:b6:10:41:bd:76:9c:8f:7c:93:94:
                    a1:2a:1c:31:ff:49:97:a6:5e:3a:22:58:74:48:eb:
                    db:92:73:b7:18:e8:51:a5:14:6b:35:88:c7:b2:42:
                    f8:72:1c:b1:ac:40:ab:14:c6:c3:fb:60:4d:89:10:
                    f9:04:0b:ce:88:64:af:16:98:b4:4b:c8:49:71:eb:
                    eb:85:74:af:37:cc:9a:e2:75:3a:d5:35:fb:05:12:
                    60:95:78:34:e5:30:0d:c9:e5:cb:d8:cb:d0:ef:40:
                    2f:21:74:22:60:bc:d5:c1:0f:dd:5d:90:7f:97:25:
                    f5:24:48:0b:20:72:57:22:75:53:47:76:d3:f0:9f:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5F:3C:97:AD:90:1C:DD:C7:73:82:74:2D:34:88:35:4A:3B:04:04
            X509v3 Authority Key Identifier:
                keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/DV88l62QHN3Hc4J0LTSINUo7BAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f3:d6:59:ae:a2:c5:bb:d8:2a:2c:e2:b0:47:71:c4:4b:1a:
         c7:94:a0:2f:ba:c8:57:b9:4a:ee:1f:b9:7e:4c:22:ce:96:26:
         d5:9a:0c:da:d3:77:8f:09:00:2f:14:3d:ad:03:3b:d9:ba:0a:
         cf:16:14:17:97:a4:2c:bd:78:8e:07:81:23:d0:17:b8:43:71:
         6c:96:58:dd:ff:70:76:8a:8f:46:e8:5d:46:07:00:e7:ad:f1:
         38:e6:a1:71:70:de:0b:95:21:2e:47:0b:3c:12:87:cb:b4:82:
         40:6d:03:eb:3d:e6:34:7f:44:da:35:dc:b2:21:2d:5e:00:1b:
         3e:0b:90:39:b6:49:76:b9:b1:c8:8d:a8:03:c1:43:a4:39:58:
         98:46:f5:bb:e1:75:c9:fd:1a:24:c9:c8:c8:10:42:e4:52:40:
         4a:cb:59:45:af:3f:34:d6:23:bc:e1:d1:fb:ea:a1:0f:28:7e:
         3d:94:16:b8:24:1d:91:a3:d7:39:dd:19:99:69:cc:bf:d5:b1:
         d6:e9:88:76:41:b9:00:44:8b:c6:73:cc:05:25:75:f8:5b:f7:
         57:42:90:55:3c:a6:45:f8:64:c0:1f:37:3a:23:2b:11:33:4f:
         61:55:66:b5:f3:a2:2d:1d:2c:36:2c:f0:74:f1:58:03:c8:e2:
         88:25:78:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx/A9LyFxZmeAQyJglrHob6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWZjODAyNDJkMmU2OWViZDBmMjJiNWUzY2M0NTc1OTRh
ZTkwYWMwHhcNMjMxMjE4MjIyMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDVmM2M5N2FkOTAxY2RkYzc3MzgyNzQyZDM0ODgzNTRhM2IwNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfXPaUSaRDNgcMlNpW7zI8OdPfs0
jyrpFTI7n01/3UpoKTbjqQoxedpHLDpNPr5ybUq7bOCigjyDL0dGp8k+9gfq91Yi
udLQOBSvUvp+Cj8XJBXs8sbOWo2sGmZUEyYrvn9fs8L4J37aNepy3BFsJGL8xgjc
2llMsCsZuLYQQb12nI98k5ShKhwx/0mXpl46Ilh0SOvbknO3GOhRpRRrNYjHskL4
chyxrECrFMbD+2BNiRD5BAvOiGSvFpi0S8hJcevrhXSvN8ya4nU61TX7BRJglXg0
5TANyeXL2MvQ70AvIXQiYLzVwQ/dXZB/lyX1JEgLIHJXInVTR3bT8J86EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1fPJetkBzdx3OCdC00iDVKOwQEMB8GA1UdIwQY
MBaAFIdfyAJC0uaevQ8itePMRXWUrpCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAt
Y2M0OWU1MzRkYjAwLzEvRFY4OGw2MlFITjNIYzRKMExUU0lOVW83QkFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAtY2M0OWU1MzRkYjAw
LzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwak7MA0G
CSqGSIb3DQEBCwUAA4IBAQBK89ZZrqLFu9gqLOKwR3HESxrHlKAvushXuUruH7l+
TCLOlibVmgza03ePCQAvFD2tAzvZugrPFhQXl6QsvXiOB4Ej0Be4Q3Fslljd/3B2
io9G6F1GBwDnrfE45qFxcN4LlSEuRws8EofLtIJAbQPrPeY0f0TaNdyyIS1eABs+
C5A5tkl2ubHIjagDwUOkOViYRvW74XXJ/RokycjIEELkUkBKy1lFrz801iO84dH7
6qEPKH49lBa4JB2Ro9c53RmZacy/1bHW6Yh2QbkARIvGc8wFJXX4W/dXQpBVPKZF
+GTAHzc6IysRM09hVWa186ItHSw2LPB08VgDyOKIJXhJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:58 2024 by rpki-client on console-ams.rpki-client.org