Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/R81rMOQaJsxI8E0j634Id1HaMR4.roa
File:                     R81rMOQaJsxI8E0j634Id1HaMR4.roa (raw, json)
Hash identifier:          b/xUPynt7zVjiNGd7ajg0daRefd8RV3/fLtRI14422w=
Subject key identifier:   47:CD:6B:30:E4:1A:26:CC:48:F0:4D:23:EB:7E:08:77:51:DA:31:1E
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       01856C25E5FEE51321453946DAA1378D30EA
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/R81rMOQaJsxI8E0j634Id1HaMR4.roa
Signing time:             Sun 01 Jan 2023 07:05:00 +0000
ROA not before:           Sun 01 Jan 2023 07:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49040
IP address blocks:        193.93.26.0/24 maxlen: 24
                          91.192.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:e5:fe:e5:13:21:45:39:46:da:a1:37:8d:30:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Jan  1 07:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47cd6b30e41a26cc48f04d23eb7e087751da311e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:23:8c:39:06:52:6d:de:1b:23:c7:e1:35:
                    8a:ac:21:05:6e:e8:cd:03:62:79:f9:9e:9c:f7:ae:
                    10:e6:49:5f:72:23:a3:1f:12:32:f9:13:24:88:dc:
                    7e:66:f0:52:b6:d8:32:fe:c3:2e:7b:a5:ff:58:82:
                    2f:5f:60:bb:68:24:d8:d4:36:df:3e:e3:a3:4a:fb:
                    c3:3b:ae:f2:9f:e6:c6:11:61:a7:12:17:8c:0b:18:
                    9a:9e:04:34:bc:44:e0:81:f0:b8:3d:df:13:7b:ce:
                    4a:c3:d0:94:32:24:06:f3:1f:6c:30:44:94:30:41:
                    0b:ea:0f:a9:77:c7:ac:9f:76:8c:ec:68:78:6c:05:
                    fc:56:36:f6:1a:05:2d:5a:c5:76:14:98:a4:31:a2:
                    84:18:ab:bc:d3:a4:fb:71:fd:c4:12:a2:b0:68:0f:
                    07:08:37:33:96:e7:2f:6a:f8:ce:e3:7c:5f:75:40:
                    ed:df:f4:01:41:c2:b8:0c:f5:6b:f9:89:67:f2:c3:
                    1a:93:b5:b2:a6:9a:5b:06:15:33:4a:6f:31:fe:b4:
                    06:84:b2:b9:e2:52:2a:07:3d:1a:37:e6:ca:97:4e:
                    fc:58:3e:fd:3e:48:2f:1a:8a:48:17:bb:b2:50:95:
                    1e:23:f8:fb:2f:4e:a9:2b:8f:f8:3f:94:6a:83:05:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CD:6B:30:E4:1A:26:CC:48:F0:4D:23:EB:7E:08:77:51:DA:31:1E
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/R81rMOQaJsxI8E0j634Id1HaMR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.192.236.0/24
                  193.93.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:51:56:c8:34:6b:a0:bf:97:d7:7d:3b:38:d3:49:a3:b6:99:
         ce:4d:61:26:9e:88:4a:47:e1:45:f7:70:cc:d6:01:af:16:77:
         5a:ff:6e:9e:ca:1d:84:6b:08:bf:37:72:42:76:bf:29:d1:19:
         dc:b2:32:05:ad:2b:2f:3d:2f:c6:96:7c:88:ef:66:88:9d:6a:
         6a:fc:d2:50:bd:df:54:6b:a3:43:cb:df:70:a5:ad:d9:09:3e:
         79:9d:70:89:c7:65:26:f9:bc:b9:e5:3c:4f:08:97:a8:9e:ef:
         d2:06:d8:f8:8b:f7:08:47:4b:f3:f2:db:ca:bf:c2:a5:6a:a0:
         27:21:50:39:25:a4:6c:7a:7e:db:0e:2d:e1:3d:37:8a:29:5b:
         1a:1b:a3:85:6d:58:f0:4c:83:8c:5f:85:cb:d2:d9:b4:26:f2:
         ea:21:cf:b6:a0:8e:dd:75:15:84:fe:26:26:af:d8:1c:3a:43:
         30:79:02:21:df:06:ce:4c:fe:22:f2:0e:ee:b6:61:c7:78:88:
         3e:0c:2b:ad:a8:1e:ef:87:b0:a1:26:5c:e9:d8:b4:04:a1:1e:
         44:ff:91:fa:7a:a6:51:aa:77:45:4d:32:6e:a4:28:16:1d:9d:
         5c:6c:e1:a3:13:8c:aa:5b:3e:84:09:ed:9b:3b:32:d3:1d:af:
         64:4d:b6:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsJeX+5RMhRTlG2qE3jTDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4
ZmE0MmYwHhcNMjMwMTAxMDcwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2NkNmIzMGU0MWEyNmNjNDhmMDRkMjNlYjdlMDg3NzUxZGEzMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLEjjDkGUm3eGyPH4TWKrCEFbujN
A2J5+Z6c964Q5klfciOjHxIy+RMkiNx+ZvBSttgy/sMue6X/WIIvX2C7aCTY1Dbf
PuOjSvvDO67yn+bGEWGnEheMCxiangQ0vETggfC4Pd8Te85Kw9CUMiQG8x9sMESU
MEEL6g+pd8esn3aM7Gh4bAX8Vjb2GgUtWsV2FJikMaKEGKu806T7cf3EEqKwaA8H
CDczlucvavjO43xfdUDt3/QBQcK4DPVr+Yln8sMak7WypppbBhUzSm8x/rQGhLK5
4lIqBz0aN+bKl078WD79PkgvGopIF7uyUJUeI/j7L06pK4/4P5RqgwVLtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEfNazDkGibMSPBNI+t+CHdR2jEeMB8GA1UdIwQY
MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt
NDVmYWJlM2Y5ZjMzLzEvUjgxck1PUWFKc3hJOEUwajYzNElkMUhhTVI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz
LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8DsAwQA
wV0aMA0GCSqGSIb3DQEBCwUAA4IBAQAgUVbINGugv5fXfTs400mjtpnOTWEmnohK
R+FF93DM1gGvFnda/26eyh2Eawi/N3JCdr8p0RncsjIFrSsvPS/GlnyI72aInWpq
/NJQvd9Ua6NDy99wpa3ZCT55nXCJx2Um+by55TxPCJeonu/SBtj4i/cIR0vz8tvK
v8KlaqAnIVA5JaRsen7bDi3hPTeKKVsaG6OFbVjwTIOMX4XL0tm0JvLqIc+2oI7d
dRWE/iYmr9gcOkMweQIh3wbOTP4i8g7utmHHeIg+DCutqB7vh7ChJlzp2LQEoR5E
/5H6eqZRqndFTTJupCgWHZ1cbOGjE4yqWz6ECe2bOzLTHa9kTbZ/
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:28 2024 by rpki-client on console.sobornost.net