Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa
File:                     AKHaniYWfGL7ymrme5zaoRB0A5k.roa (raw, json)
Hash identifier:          7aDPv/CeC0fjVeRxbMd+zr7yhTbBRnaRyixJcLJfa/w=
Subject key identifier:   00:A1:DA:9E:26:16:7C:62:FB:CA:6A:E6:7B:9C:DA:A1:10:74:03:99
Certificate issuer:       /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial:       01857169CFD1F499FC9160418957E089CACC
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa
Signing time:             Mon 02 Jan 2023 07:37:17 +0000
ROA not before:           Mon 02 Jan 2023 07:37:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8220
IP address blocks:        194.127.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:cf:d1:f4:99:fc:91:60:41:89:57:e0:89:ca:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
        Validity
            Not Before: Jan  2 07:37:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00a1da9e26167c62fbca6ae67b9cdaa110740399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:46:57:1e:07:c1:81:0b:a0:f8:ec:8f:61:
                    01:9b:97:50:36:f4:58:d7:e1:a3:c8:a0:95:b2:32:
                    aa:a1:de:55:45:f5:c0:ac:08:b3:3a:d8:01:94:2a:
                    df:8f:62:a5:22:5b:ec:d2:bb:a0:22:ef:1f:20:28:
                    ee:0c:4f:b6:03:be:f1:be:87:38:e0:a4:6b:4e:1e:
                    de:84:a1:3b:44:bd:4b:9e:91:65:8d:90:24:01:69:
                    d3:58:4e:6c:19:a6:ca:c4:36:66:9f:50:77:63:18:
                    f7:84:7a:13:57:ee:54:0e:81:75:76:f9:1f:75:1b:
                    2e:70:a3:0b:b1:7c:66:08:30:a3:e5:ea:ca:6f:f6:
                    d8:6f:f8:0e:33:47:a4:94:63:8a:d9:ec:a9:97:0e:
                    13:6e:3b:2d:94:b9:c0:20:e3:87:dd:22:12:4f:54:
                    a2:2d:11:54:e0:1d:f5:f4:4d:c7:13:04:6d:25:6d:
                    1c:d4:a6:23:c9:62:fc:43:4b:dc:1a:39:3d:43:93:
                    8d:01:7b:39:cb:9b:05:40:0f:2c:1a:d0:47:73:cb:
                    63:0a:55:48:84:0a:49:be:4f:22:7d:0d:8f:01:21:
                    e2:eb:a3:50:49:05:50:a6:13:c5:4d:36:23:7c:4e:
                    9f:a7:e9:d0:cd:c8:61:0e:7d:51:8d:2b:4e:8e:a6:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A1:DA:9E:26:16:7C:62:FB:CA:6A:E6:7B:9C:DA:A1:10:74:03:99
            X509v3 Authority Key Identifier:
                keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/AKHaniYWfGL7ymrme5zaoRB0A5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:a7:8b:44:9b:45:fa:e8:ba:fd:e2:89:1f:fb:5d:eb:95:
         3b:c8:d2:ba:17:90:d5:6b:fd:88:89:30:11:33:fa:64:a2:2d:
         f9:3b:68:9a:df:b1:9c:e5:2e:bd:47:f5:6a:90:d7:a9:1d:2a:
         7a:38:9a:89:dc:3b:6c:2d:c4:0c:60:5e:94:45:0b:9a:4e:a2:
         52:a1:fc:df:f7:71:76:3f:51:99:4f:b2:11:ee:28:44:6f:aa:
         e6:39:d7:b8:c2:ae:a4:c1:60:f8:06:bf:a9:0b:f1:3c:3f:66:
         92:e9:c9:7b:c3:1c:8f:52:98:d0:f7:43:ce:b2:e0:c4:ba:65:
         a5:84:e9:2a:d9:ad:d6:7b:a2:64:d0:f6:0e:ab:e7:23:c3:44:
         de:76:5d:fd:10:a2:ea:64:6f:e5:76:a0:fb:eb:a6:c7:5e:44:
         3a:9d:0e:68:29:f9:bf:9e:5c:89:34:5d:f5:ab:f4:2c:ae:ee:
         49:c1:bd:8a:73:de:c1:14:3e:04:dd:e7:67:8f:6d:12:5b:ea:
         9a:89:3f:ba:66:71:f5:b5:95:46:42:44:a1:e0:42:0a:65:3c:
         8f:7f:84:07:66:eb:f8:8f:a3:39:d5:58:82:5d:85:fe:ad:3d:
         1e:5b:28:6b:cf:ea:e4:f0:e6:cb:fd:a7:5e:ee:cd:fe:84:6d:
         46:ed:16:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxac/R9Jn8kWBBiVfgicrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Y2I4OWExMTExNGVmYmUwZTFlMjU1MGVjZGEzMzZmZDc5
MmVjNWYwHhcNMjMwMTAyMDczNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGExZGE5ZTI2MTY3YzYyZmJjYTZhZTY3YjljZGFhMTEwNzQwMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ1GVx4HwYELoPjsj2EBm5dQNvRY
1+GjyKCVsjKqod5VRfXArAizOtgBlCrfj2KlIlvs0rugIu8fICjuDE+2A77xvoc4
4KRrTh7ehKE7RL1LnpFljZAkAWnTWE5sGabKxDZmn1B3Yxj3hHoTV+5UDoF1dvkf
dRsucKMLsXxmCDCj5erKb/bYb/gOM0eklGOK2eyplw4TbjstlLnAIOOH3SIST1Si
LRFU4B319E3HEwRtJW0c1KYjyWL8Q0vcGjk9Q5ONAXs5y5sFQA8sGtBHc8tjClVI
hApJvk8ifQ2PASHi66NQSQVQphPFTTYjfE6fp+nQzchhDn1RjStOjqYNJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFACh2p4mFnxi+8pq5nuc2qEQdAOZMB8GA1UdIwQY
MBaAFAjLiaERFO++Dh4lUOzaM2/XkuxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEt
NGFmMWZhMzZjZGI5LzEvQUtIYW5pWVdmR0w3eW1ybWU1emFvUkIwQTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iZTEwYWYtZDY3Yy00N2U5LTkzOGEtNGFmMWZhMzZjZGI5
LzEvQ011Sm9SRVU3NzRPSGlWUTdOb3piOWVTN0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn/kMA0G
CSqGSIb3DQEBCwUAA4IBAQCrvKeLRJtF+ui6/eKJH/td65U7yNK6F5DVa/2IiTAR
M/pkoi35O2ia37Gc5S69R/VqkNepHSp6OJqJ3DtsLcQMYF6URQuaTqJSofzf93F2
P1GZT7IR7ihEb6rmOde4wq6kwWD4Br+pC/E8P2aS6cl7wxyPUpjQ90POsuDEumWl
hOkq2a3We6Jk0PYOq+cjw0Tedl39EKLqZG/ldqD766bHXkQ6nQ5oKfm/nlyJNF31
q/Qsru5Jwb2Kc97BFD4E3ednj20SW+qaiT+6ZnH1tZVGQkSh4EIKZTyPf4QHZuv4
j6M51ViCXYX+rT0eWyhrz+rk8ObL/ade7s3+hG1G7RZl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org