Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/HMZSvCRjBsDs5P-Iiu0hUFyfkEw.roa
File:                     HMZSvCRjBsDs5P-Iiu0hUFyfkEw.roa (raw, json)
Hash identifier:          9kzESpn34knGmk4T3BbHI0H6C/KLHVT2LDuPLaClkkY=
Subject key identifier:   1C:C6:52:BC:24:63:06:C0:EC:E4:FF:88:8A:ED:21:50:5C:9F:90:4C
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       0188FC177B82A8973C3FCA3DD0D668E204EC
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/HMZSvCRjBsDs5P-Iiu0hUFyfkEw.roa
Signing time:             Tue 27 Jun 2023 09:02:57 +0000
ROA not before:           Tue 27 Jun 2023 09:02:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        94.137.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fc:17:7b:82:a8:97:3c:3f:ca:3d:d0:d6:68:e2:04:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Jun 27 09:02:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1cc652bc246306c0ece4ff888aed21505c9f904c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:d0:27:31:b0:c5:48:dc:7c:8b:84:18:f3:
                    ee:83:50:ab:fc:28:61:07:2c:80:28:ed:72:7b:59:
                    0b:35:56:9d:3d:c3:a0:ae:81:d0:97:cb:f0:d1:1b:
                    88:7e:6e:4b:b6:07:6e:49:7b:14:77:7a:db:56:bc:
                    84:c3:b5:20:f3:ff:5f:d0:d4:03:73:4f:b9:26:05:
                    0c:86:97:22:ea:aa:93:dc:a9:dc:36:32:8e:1c:51:
                    3d:e3:32:57:93:0d:e0:32:b6:eb:28:c6:61:15:41:
                    3d:fb:d8:83:f1:e3:da:ba:a7:62:87:d0:77:a3:c1:
                    bd:ae:3a:3f:43:fc:d6:00:96:42:89:18:b6:78:6b:
                    76:d7:e1:e2:67:51:ca:02:72:67:32:57:85:74:5a:
                    dc:8c:ab:d1:35:ab:d1:8d:98:e4:df:54:3e:59:0a:
                    dc:2a:6c:9e:3d:20:22:c3:99:ec:61:d9:a9:6d:ca:
                    61:e9:6b:87:f8:b1:2e:75:1c:aa:7c:48:f8:da:cc:
                    1b:9a:f9:3a:dc:ec:43:89:b1:d2:41:e8:0e:1a:06:
                    ea:f0:70:ad:d5:ba:80:9a:eb:32:aa:a0:aa:92:d7:
                    4a:23:bf:bb:fd:34:24:df:7c:24:58:2c:29:1b:f6:
                    e2:8f:ab:4c:46:f8:f9:d4:c1:98:28:1b:76:14:e9:
                    d5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:52:BC:24:63:06:C0:EC:E4:FF:88:8A:ED:21:50:5C:9F:90:4C
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/HMZSvCRjBsDs5P-Iiu0hUFyfkEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.137.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:ae:a6:bf:54:09:f5:2a:0b:fe:cd:41:3d:84:99:62:a7:
         e5:51:9a:55:6f:ce:40:ff:d7:0d:70:c0:d2:d5:db:8b:17:97:
         ba:bb:ce:0b:58:1f:a1:1f:d4:1e:64:53:22:23:d1:36:fd:32:
         aa:37:30:5a:ec:7c:11:4a:34:2f:b7:9f:f8:06:8f:05:5c:b2:
         1f:1e:45:47:ad:08:ee:b8:2c:eb:96:56:b2:c5:15:1e:09:57:
         a8:4e:04:ca:d8:6e:39:22:01:82:c1:d0:15:52:4f:dd:d0:d2:
         ff:6c:6d:db:24:d3:4d:9d:35:93:1d:49:d0:0d:ab:60:cc:e8:
         d9:b4:83:d3:a2:d6:28:8f:f1:d0:41:68:9c:a4:d1:ab:b4:14:
         0f:8e:9c:b5:3f:3e:41:ae:e2:66:19:71:7b:39:b3:2f:dd:00:
         e8:79:d3:30:75:c5:1b:31:15:bb:a5:de:bc:54:e3:4e:76:32:
         9d:fd:58:5a:8a:8f:27:03:c8:e5:b7:40:3d:5a:a8:02:c7:d4:
         de:59:41:9b:5c:ce:ca:ee:53:51:73:94:21:92:e8:dc:fd:5d:
         b6:d6:cf:52:d5:bd:db:d8:bd:c3:b2:f4:c1:7c:0b:ca:90:75:
         e2:99:d7:58:7f:8b:84:87:ef:50:a6:47:d6:0c:6b:a8:27:85:
         7c:49:72:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj8F3uCqJc8P8o90NZo4gTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwNjI3MDkwMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2M2NTJiYzI0NjMwNmMwZWNlNGZmODg4YWVkMjE1MDVjOWY5MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZvQJzGwxUjcfIuEGPPug1Cr/Chh
ByyAKO1ye1kLNVadPcOgroHQl8vw0RuIfm5LtgduSXsUd3rbVryEw7Ug8/9f0NQD
c0+5JgUMhpci6qqT3KncNjKOHFE94zJXkw3gMrbrKMZhFUE9+9iD8ePauqdih9B3
o8G9rjo/Q/zWAJZCiRi2eGt21+HiZ1HKAnJnMleFdFrcjKvRNavRjZjk31Q+WQrc
KmyePSAiw5nsYdmpbcph6WuH+LEudRyqfEj42swbmvk63OxDibHSQegOGgbq8HCt
1bqAmusyqqCqktdKI7+7/TQk33wkWCwpG/bij6tMRvj51MGYKBt2FOnViwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzGUrwkYwbA7OT/iIrtIVBcn5BMMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvSE1aU3ZDUmpCc0RzNVAtSWl1MGhVRnlma0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXolLMA0G
CSqGSIb3DQEBCwUAA4IBAQBT466mv1QJ9SoL/s1BPYSZYqflUZpVb85A/9cNcMDS
1duLF5e6u84LWB+hH9QeZFMiI9E2/TKqNzBa7HwRSjQvt5/4Bo8FXLIfHkVHrQju
uCzrllayxRUeCVeoTgTK2G45IgGCwdAVUk/d0NL/bG3bJNNNnTWTHUnQDatgzOjZ
tIPTotYoj/HQQWicpNGrtBQPjpy1Pz5BruJmGXF7ObMv3QDoedMwdcUbMRW7pd68
VONOdjKd/Vhaio8nA8jlt0A9WqgCx9TeWUGbXM7K7lNRc5Qhkujc/V221s9S1b3b
2L3DsvTBfAvKkHXimddYf4uEh+9QpkfWDGuoJ4V8SXLz
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:57 2023 by rpki-client on console.sobornost.net