Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/QewpTNoBLpqov2S5Irotuj5i-a0.roa
File:                     QewpTNoBLpqov2S5Irotuj5i-a0.roa (raw, json)
Hash identifier:          46zZqNHNE7weKq0F41Co/EBdjk+MIevMfgEI8rZCMfo=
Subject key identifier:   41:EC:29:4C:DA:01:2E:9A:A8:BF:64:B9:22:BA:2D:BA:3E:62:F9:AD
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01856B5329B7C0F04E126C0D0606F20BFF40
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/QewpTNoBLpqov2S5Irotuj5i-a0.roa
Signing time:             Sun 01 Jan 2023 03:14:50 +0000
ROA not before:           Sun 01 Jan 2023 03:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51855
IP address blocks:        78.108.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:53:29:b7:c0:f0:4e:12:6c:0d:06:06:f2:0b:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan  1 03:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41ec294cda012e9aa8bf64b922ba2dba3e62f9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:a3:18:65:bd:3f:9a:91:42:31:b3:60:49:
                    60:c8:0b:9c:2f:e6:5e:4a:57:c7:15:ba:55:30:28:
                    12:49:b8:43:18:5e:b1:20:ff:9f:bc:52:72:e4:38:
                    8d:63:d8:c4:2a:fa:ed:19:3d:79:f5:d2:d6:85:61:
                    1d:7e:19:05:0f:91:b7:7c:d3:c2:05:ea:35:66:85:
                    8e:fd:56:4c:14:51:05:6c:f6:b3:a5:39:0a:58:8e:
                    c9:3a:31:31:9a:3c:b1:1d:69:c5:b6:f4:8a:94:90:
                    0a:bd:5e:0d:62:1b:dd:5d:71:12:95:9b:cb:4c:ea:
                    f1:21:90:86:33:40:ce:28:ce:0c:a7:d5:79:df:54:
                    31:0d:dd:9a:c7:90:12:c9:0e:3b:a0:12:59:4a:67:
                    36:8d:2c:5d:49:5b:e1:79:2c:b6:fa:02:41:27:47:
                    dc:ad:b7:21:26:88:2f:e0:2f:5a:0c:db:1b:29:42:
                    49:76:80:e0:3d:07:17:6a:9f:7b:ba:9c:06:ad:fe:
                    1e:47:56:2b:f8:c0:9d:29:d6:df:1b:8c:05:05:63:
                    73:c1:0a:98:71:71:c5:8c:fa:64:49:bf:4e:86:ca:
                    55:b5:5b:66:fc:78:ee:35:56:89:c8:ed:98:b4:8f:
                    09:12:84:0d:ee:b1:db:fe:88:0c:08:fe:7c:12:ad:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EC:29:4C:DA:01:2E:9A:A8:BF:64:B9:22:BA:2D:BA:3E:62:F9:AD
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/QewpTNoBLpqov2S5Irotuj5i-a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.108.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:30:03:43:c6:44:d4:5f:c9:c0:5b:5f:dc:4c:a9:fa:3a:
         b0:22:5e:a6:c7:dc:67:67:e6:12:37:ba:fa:95:f0:82:d5:e7:
         69:85:15:b8:e3:ac:c7:f9:be:16:ea:f9:8c:ba:7b:da:26:48:
         a0:3a:e9:f0:77:32:c9:53:07:ee:8c:db:2b:71:87:1f:b8:2f:
         ab:d0:51:2a:ec:a5:86:d1:77:b5:dc:be:32:ea:04:92:bb:fc:
         e5:7c:98:e1:33:87:6b:2d:35:e8:c8:fa:f2:8c:c1:1c:11:d1:
         ea:df:d4:f4:52:b2:aa:69:d3:71:b6:1e:a6:03:22:88:ca:78:
         d2:f7:f1:1b:a7:a3:14:52:f2:dc:43:55:86:64:66:ea:84:6a:
         47:6d:19:77:c4:8b:a0:49:9a:5e:7c:90:95:a6:cc:19:0e:0f:
         48:6c:99:14:5b:d5:c1:c7:ce:bc:58:34:d8:3c:ff:62:75:01:
         6c:1f:da:91:e5:db:3a:fb:ce:a7:69:45:ed:bb:1d:cf:5b:1c:
         c9:50:5d:d1:0d:f8:34:84:03:d1:4e:60:2b:42:8e:ed:75:37:
         94:22:fa:84:76:a9:45:97:8b:19:14:00:52:fe:ac:e3:24:78:
         aa:e7:ff:e8:f7:5c:1c:f7:56:ce:09:56:85:00:4e:bf:eb:28:
         68:78:45:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrUym3wPBOEmwNBgbyC/9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwMTAxMDMxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWVjMjk0Y2RhMDEyZTlhYThiZjY0YjkyMmJhMmRiYTNlNjJmOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiGjGGW9P5qRQjGzYElgyAucL+Ze
SlfHFbpVMCgSSbhDGF6xIP+fvFJy5DiNY9jEKvrtGT159dLWhWEdfhkFD5G3fNPC
Beo1ZoWO/VZMFFEFbPazpTkKWI7JOjExmjyxHWnFtvSKlJAKvV4NYhvdXXESlZvL
TOrxIZCGM0DOKM4Mp9V531QxDd2ax5ASyQ47oBJZSmc2jSxdSVvheSy2+gJBJ0fc
rbchJogv4C9aDNsbKUJJdoDgPQcXap97upwGrf4eR1Yr+MCdKdbfG4wFBWNzwQqY
cXHFjPpkSb9OhspVtVtm/HjuNVaJyO2YtI8JEoQN7rHb/ogMCP58Eq22/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHsKUzaAS6aqL9kuSK6Lbo+YvmtMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvUWV3cFROb0JMcHFvdjJTNUlyb3R1ajVpLWEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmz3MA0G
CSqGSIb3DQEBCwUAA4IBAQAf1TADQ8ZE1F/JwFtf3Eyp+jqwIl6mx9xnZ+YSN7r6
lfCC1edphRW446zH+b4W6vmMunvaJkigOunwdzLJUwfujNsrcYcfuC+r0FEq7KWG
0Xe13L4y6gSSu/zlfJjhM4drLTXoyPryjMEcEdHq39T0UrKqadNxth6mAyKIynjS
9/Ebp6MUUvLcQ1WGZGbqhGpHbRl3xIugSZpefJCVpswZDg9IbJkUW9XBx868WDTY
PP9idQFsH9qR5ds6+86naUXtux3PWxzJUF3RDfg0hAPRTmArQo7tdTeUIvqEdqlF
l4sZFABS/qzjJHiq5//o91wc91bOCVaFAE6/6yhoeEX4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org