Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/jViux8MjBxiSn4Dre9o3T_uBxes.roa
File:                     jViux8MjBxiSn4Dre9o3T_uBxes.roa (raw, json)
Hash identifier:          hUU4f61LMwozXATMjx/2m8I69vEATeJBcuoR9g1y9X0=
Subject key identifier:   8D:58:AE:C7:C3:23:07:18:92:9F:80:EB:7B:DA:37:4F:FB:81:C5:EB
Certificate issuer:       /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial:       018AA8CFDFA5322CE306773837E2F7150DF5
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/jViux8MjBxiSn4Dre9o3T_uBxes.roa
Signing time:             Mon 18 Sep 2023 15:01:50 +0000
ROA not before:           Mon 18 Sep 2023 15:01:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5511
IP address blocks:        89.42.27.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Sep 2023 14:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a8:cf:df:a5:32:2c:e3:06:77:38:37:e2:f7:15:0d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
        Validity
            Not Before: Sep 18 15:01:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d58aec7c3230718929f80eb7bda374ffb81c5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:10:0e:80:16:cf:a8:8e:76:84:76:9d:1e:
                    bd:45:93:63:49:32:14:5a:57:16:85:c0:cc:bb:c6:
                    16:bb:ce:db:8e:0a:60:b0:db:c6:e4:4e:b1:09:b2:
                    12:79:13:f2:65:fb:a1:23:fa:d7:02:d2:8e:99:0a:
                    5b:f0:d3:9b:56:2f:8e:63:df:30:f6:b4:74:68:74:
                    90:29:41:d4:6b:3a:4e:c9:6c:ef:77:8a:92:b8:03:
                    24:22:43:64:de:d2:e2:59:2e:1a:02:04:0d:76:84:
                    3f:19:db:25:71:49:f7:e2:3a:cf:b5:a3:67:9b:67:
                    78:4c:e8:f5:1b:0e:92:3c:8c:28:a5:6c:75:1d:c3:
                    75:58:eb:5e:d8:d2:b1:1a:d8:cd:1f:61:08:45:f3:
                    53:3c:7e:d6:87:ff:8d:6f:19:a3:cc:52:a9:f4:c8:
                    b4:da:92:5a:df:85:6b:c6:e6:4e:a5:1c:da:46:76:
                    9d:25:dd:02:5f:a7:b1:de:ee:fa:a1:fe:f6:de:ce:
                    23:a2:39:9f:39:52:31:42:df:9f:01:06:4d:de:c2:
                    24:22:2c:64:de:2f:94:7f:2c:7c:6b:e0:a6:84:29:
                    17:c6:c0:80:f1:de:64:5e:41:4b:f9:45:73:77:05:
                    5d:4e:ae:19:11:0b:43:60:9d:76:ab:bb:67:3a:5e:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:58:AE:C7:C3:23:07:18:92:9F:80:EB:7B:DA:37:4F:FB:81:C5:EB
            X509v3 Authority Key Identifier:
                keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/jViux8MjBxiSn4Dre9o3T_uBxes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.42.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:b3:6c:74:2f:56:1d:44:43:04:33:c4:35:f7:23:99:9b:
         fc:c1:0d:a1:cf:4d:43:f3:77:17:ad:72:85:13:3b:3e:87:29:
         61:fa:1c:34:6f:17:c9:52:94:bd:85:71:9d:ca:44:c7:c1:70:
         ae:b2:24:f0:3b:3f:51:00:46:6f:a7:71:c9:2c:de:32:46:a6:
         ad:51:a1:48:21:0b:b7:38:37:f3:66:3f:98:59:58:2d:3d:ba:
         ea:cc:2a:9d:b6:b7:aa:4d:08:12:6b:e0:c9:ab:a2:53:5a:51:
         6e:b7:e6:70:42:53:bc:71:b7:77:03:da:9f:f3:0f:24:ff:2e:
         09:4c:26:d7:2d:57:31:1e:bf:7f:bd:a6:d8:26:83:48:10:18:
         01:52:8f:f1:6a:fb:72:f1:72:8c:8e:42:6e:3c:b7:7b:81:bb:
         ca:c6:7f:d6:b3:33:7d:05:ed:25:1d:37:d7:7f:7f:06:2b:dd:
         ad:1f:ed:ba:28:52:6b:16:75:ac:05:f1:24:91:b3:05:67:5b:
         b5:0a:03:9e:41:55:87:cf:10:d4:31:04:a5:03:dd:93:09:6b:
         12:2d:92:d6:08:25:91:3f:85:a2:06:03:4e:45:4d:7e:a7:3f:
         9c:7a:f1:42:06:67:91:e4:82:da:1e:b0:b7:b4:c9:d3:05:9c:
         80:13:11:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqoz9+lMizjBnc4N+L3FQ31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2
MTFkODkwHhcNMjMwOTE4MTUwMTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDU4YWVjN2MzMjMwNzE4OTI5ZjgwZWI3YmRhMzc0ZmZiODFjNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0QDoAWz6iOdoR2nR69RZNjSTIU
WlcWhcDMu8YWu87bjgpgsNvG5E6xCbISeRPyZfuhI/rXAtKOmQpb8NObVi+OY98w
9rR0aHSQKUHUazpOyWzvd4qSuAMkIkNk3tLiWS4aAgQNdoQ/GdslcUn34jrPtaNn
m2d4TOj1Gw6SPIwopWx1HcN1WOte2NKxGtjNH2EIRfNTPH7Wh/+NbxmjzFKp9Mi0
2pJa34VrxuZOpRzaRnadJd0CX6ex3u76of723s4jojmfOVIxQt+fAQZN3sIkIixk
3i+Ufyx8a+CmhCkXxsCA8d5kXkFL+UVzdwVdTq4ZEQtDYJ12q7tnOl59mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1YrsfDIwcYkp+A63vaN0/7gcXrMB8GA1UdIwQY
MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt
OTQyNDgyZjhkMmVhLzEvalZpdXg4TWpCeGlTbjREcmU5bzNUX3VCeGVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh
LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSobMA0G
CSqGSIb3DQEBCwUAA4IBAQCVjLNsdC9WHURDBDPENfcjmZv8wQ2hz01D83cXrXKF
Ezs+hylh+hw0bxfJUpS9hXGdykTHwXCusiTwOz9RAEZvp3HJLN4yRqatUaFIIQu3
ODfzZj+YWVgtPbrqzCqdtreqTQgSa+DJq6JTWlFut+ZwQlO8cbd3A9qf8w8k/y4J
TCbXLVcxHr9/vabYJoNIEBgBUo/xavty8XKMjkJuPLd7gbvKxn/WszN9Be0lHTfX
f38GK92tH+26KFJrFnWsBfEkkbMFZ1u1CgOeQVWHzxDUMQSlA92TCWsSLZLWCCWR
P4WiBgNORU1+pz+cevFCBmeR5ILaHrC3tMnTBZyAExE7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:45 2024 by rpki-client on console-fra.rpki-client.org