Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/fYn4uH81bleqR4Me4B4aRlcnBmQ.roa
File:                     fYn4uH81bleqR4Me4B4aRlcnBmQ.roa (raw, json)
Hash identifier:          fNmIMBGsOI5mt2wmjyBobMzXkGcJd9XNKhjbZuvd5nk=
Subject key identifier:   7D:89:F8:B8:7F:35:6E:57:AA:47:83:1E:E0:1E:1A:46:57:27:06:64
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       018AB2FA855462C2EC80C6FB06C666709B97
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/fYn4uH81bleqR4Me4B4aRlcnBmQ.roa
Signing time:             Wed 20 Sep 2023 14:24:37 +0000
ROA not before:           Wed 20 Sep 2023 14:24:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212768
IP address blocks:        193.56.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b2:fa:85:54:62:c2:ec:80:c6:fb:06:c6:66:70:9b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Sep 20 14:24:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d89f8b87f356e57aa47831ee01e1a4657270664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:83:d3:14:62:44:c3:05:74:f3:ca:8e:76:bd:
                    d8:32:55:4c:fa:e0:57:94:a8:92:a3:89:09:bc:20:
                    d8:90:99:04:99:46:f1:3c:0b:57:ce:2f:18:bd:a3:
                    e1:6a:14:8e:5a:05:48:7f:86:36:63:29:82:71:c6:
                    ce:6b:1a:d4:d4:3d:69:78:f7:26:d4:9c:a7:e8:05:
                    de:22:77:4d:5b:82:4f:9a:4e:d6:4a:98:a8:c6:81:
                    ed:c3:5c:de:c1:37:6b:e3:55:b7:cb:48:4b:21:71:
                    77:9c:40:29:c6:53:8d:35:f1:ea:26:6e:1f:61:a3:
                    25:03:0f:64:eb:05:bd:65:9a:b9:5a:c8:9e:e5:61:
                    a1:0c:cd:7d:5c:d8:e3:2c:c6:c4:78:38:7e:9d:97:
                    5d:51:f8:f6:15:18:67:97:e0:95:78:e7:68:c2:5b:
                    80:3b:32:7e:57:2a:80:ac:4a:fa:04:bd:f5:4a:f7:
                    83:85:cb:67:ec:8d:48:da:a0:55:44:97:39:91:a2:
                    07:86:9a:b3:3a:4f:9b:b5:3d:fd:1e:b4:b8:5e:8c:
                    ba:30:5a:44:11:73:cc:10:2f:29:eb:25:2d:61:ec:
                    a1:0a:55:95:10:d7:fe:ce:75:8d:50:05:82:ea:5c:
                    14:ac:64:52:38:ca:2e:af:db:cc:df:68:29:42:51:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:F8:B8:7F:35:6E:57:AA:47:83:1E:E0:1E:1A:46:57:27:06:64
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/fYn4uH81bleqR4Me4B4aRlcnBmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:8d:61:0a:30:10:c6:ee:df:38:c0:cf:6f:63:7b:bf:df:
         07:af:a0:53:ef:ca:c3:33:22:39:00:ac:5e:e7:38:d8:34:6e:
         d1:60:ea:2e:2b:59:77:bc:ae:30:66:e8:9e:73:ce:28:db:de:
         cd:3b:cd:55:c5:d1:f5:be:a0:3d:55:0d:7c:7d:e4:0c:6c:82:
         1f:ff:ee:d5:a9:11:9f:29:b8:57:62:c3:f1:9d:0e:e5:5e:a3:
         a2:dc:1e:e0:2f:01:44:fb:50:66:79:38:82:aa:2b:bf:c6:08:
         da:4c:6f:64:15:57:7e:f6:77:9a:15:57:85:5a:7b:f2:2a:4e:
         8d:00:46:8a:e2:01:ec:8c:b1:35:7c:62:44:a5:66:2c:82:73:
         ec:09:77:4d:a2:e9:6f:02:bb:fe:0b:b2:6f:a0:a0:2b:d1:5a:
         91:11:9a:33:9b:dc:3e:88:37:ef:23:f1:b7:d6:3a:81:fd:92:
         1c:cc:1e:e4:60:27:2a:3b:47:13:a9:33:fe:78:f8:e2:f3:d9:
         cb:d6:4c:b8:19:e1:c4:68:34:34:ef:2a:5d:26:17:1b:6c:41:
         24:77:8f:09:70:5b:dc:76:a0:d5:e0:5b:00:f6:f6:81:04:2c:
         2b:e9:cf:c6:11:22:cd:b9:ec:16:49:60:af:e4:c9:2c:9b:8a:
         1d:c8:05:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqy+oVUYsLsgMb7BsZmcJuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTcwNDU3ZWJkZWU1OTRiMDcxNDQyMDQ0NTQ3MDZjZWFh
ZjZiZjYwHhcNMjMwOTIwMTQyNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg5ZjhiODdmMzU2ZTU3YWE0NzgzMWVlMDFlMWE0NjU3MjcwNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIPTFGJEwwV088qOdr3YMlVM+uBX
lKiSo4kJvCDYkJkEmUbxPAtXzi8YvaPhahSOWgVIf4Y2YymCccbOaxrU1D1pePcm
1Jyn6AXeIndNW4JPmk7WSpioxoHtw1zewTdr41W3y0hLIXF3nEApxlONNfHqJm4f
YaMlAw9k6wW9ZZq5Wsie5WGhDM19XNjjLMbEeDh+nZddUfj2FRhnl+CVeOdowluA
OzJ+VyqArEr6BL31SveDhctn7I1I2qBVRJc5kaIHhpqzOk+btT39HrS4Xoy6MFpE
EXPMEC8p6yUtYeyhClWVENf+znWNUAWC6lwUrGRSOMour9vM32gpQlELWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2J+Lh/NW5XqkeDHuAeGkZXJwZkMB8GA1UdIwQY
MBaAFBLnBFfr3uWUsHFEIERUcGzqr2v2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVjRVYtdmU1WlN3Y1VRZ1JGUndiT3F2YV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yYzBiOGUtYzcyNi00MDAwLThkZmUt
OTUxOGRhYTE3YWU3LzEvZlluNHVIODFibGVxUjRNZTRCNGFSbGNuQm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yYzBiOGUtYzcyNi00MDAwLThkZmUtOTUxOGRhYTE3YWU3
LzEvRXVjRVYtdmU1WlN3Y1VRZ1JGUndiT3F2YV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTgKMA0G
CSqGSIb3DQEBCwUAA4IBAQBLU41hCjAQxu7fOMDPb2N7v98Hr6BT78rDMyI5AKxe
5zjYNG7RYOouK1l3vK4wZuiec84o297NO81VxdH1vqA9VQ18feQMbIIf/+7VqRGf
KbhXYsPxnQ7lXqOi3B7gLwFE+1BmeTiCqiu/xgjaTG9kFVd+9neaFVeFWnvyKk6N
AEaK4gHsjLE1fGJEpWYsgnPsCXdNoulvArv+C7JvoKAr0VqREZozm9w+iDfvI/G3
1jqB/ZIczB7kYCcqO0cTqTP+ePji89nL1ky4GeHEaDQ07ypdJhcbbEEkd48JcFvc
dqDV4FsA9vaBBCwr6c/GESLNuewWSWCv5Mksm4odyAU0
-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:39 2024 by rpki-client on console.sobornost.net