Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DqdZ3nXAl8HZ90dRg8zynH3Cp4Q.roa
File:                     DqdZ3nXAl8HZ90dRg8zynH3Cp4Q.roa (raw, json)
Hash identifier:          zjgmmaVcXTj/1qBl/ah3M/dPRPXNURLXmV4uvGIHtn8=
Subject key identifier:   0E:A7:59:DE:75:C0:97:C1:D9:F7:47:51:83:CC:F2:9C:7D:C2:A7:84
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       018586C2F7557E99668CE4D01509FF4BA7B5
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DqdZ3nXAl8HZ90dRg8zynH3Cp4Q.roa
Signing time:             Fri 06 Jan 2023 11:06:42 +0000
ROA not before:           Fri 06 Jan 2023 11:06:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        195.178.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:86:c2:f7:55:7e:99:66:8c:e4:d0:15:09:ff:4b:a7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  6 11:06:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ea759de75c097c1d9f7475183ccf29c7dc2a784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1a:8a:a3:88:5a:c5:43:07:ad:dc:6d:25:60:
                    e0:76:2f:8d:43:c3:59:7d:e7:bc:15:ba:46:54:5a:
                    4b:c0:1e:36:17:73:d8:57:bf:b1:ee:5b:95:d7:c5:
                    4c:43:ff:33:20:37:f4:5f:c9:1d:3b:f2:cf:b0:a6:
                    4f:eb:55:65:a0:1e:00:22:3c:22:ec:4e:c0:51:56:
                    b2:2d:e8:57:32:08:54:90:4f:78:0b:41:9d:bf:4c:
                    9e:95:05:d4:33:2a:f7:87:ed:9e:93:e8:6d:7b:00:
                    7a:47:90:46:41:58:81:c1:ee:77:e2:02:fa:fd:e3:
                    dd:57:61:3d:38:17:49:5b:b3:b6:3b:77:18:47:ad:
                    e5:11:bb:6c:c1:8d:e1:91:6e:3c:22:07:c8:4d:58:
                    b9:e0:b9:26:13:1e:67:f2:3c:56:ad:76:83:9c:e6:
                    e0:11:c3:f4:0d:8a:a5:e8:1c:21:a8:ee:81:92:78:
                    59:4e:3b:79:7b:db:ea:ba:99:17:2b:d0:2b:e1:f3:
                    c3:1f:71:71:4a:df:a0:9d:a8:15:0a:23:16:66:e1:
                    69:1f:93:f5:85:f4:51:c0:66:fd:68:59:79:6b:1d:
                    b0:09:a2:41:09:1f:80:ce:06:db:b7:42:a2:3e:2b:
                    15:a0:64:be:8b:6b:d0:62:45:2a:14:52:6f:31:4c:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:59:DE:75:C0:97:C1:D9:F7:47:51:83:CC:F2:9C:7D:C2:A7:84
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DqdZ3nXAl8HZ90dRg8zynH3Cp4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:6e:ce:b2:83:01:97:63:ad:0b:43:80:f3:55:82:1b:17:
         ab:0d:9d:1c:70:d7:c9:b0:d8:25:14:79:18:ec:82:9c:48:a9:
         01:bf:48:00:23:86:b2:18:64:50:1c:a6:db:d1:cc:e6:90:23:
         d0:13:b6:92:23:45:f9:0a:3a:17:20:9f:10:6b:78:70:97:dd:
         38:fc:63:50:59:44:1f:9d:1b:b5:47:1b:bd:19:e1:36:07:47:
         e8:71:04:1a:77:41:ea:75:4c:30:d0:f4:b9:e7:6e:a6:ad:39:
         1d:32:b0:52:ca:f2:ea:cb:a0:93:6f:a1:ef:42:60:aa:10:39:
         65:81:d3:c4:63:4e:77:9a:b4:62:49:80:26:a2:9f:43:b4:48:
         fa:11:11:48:0a:67:37:ec:d9:01:c1:8a:af:83:fd:40:e7:aa:
         67:ab:f2:00:44:4a:73:25:a5:0e:e6:cb:a4:88:b9:d0:1e:4c:
         a4:47:53:c1:4b:f0:ea:ff:e2:4c:63:db:7b:d8:a6:32:1d:32:
         30:43:c0:28:9b:e9:51:39:93:b3:94:f8:d6:6b:52:0d:4b:0d:
         f3:9f:ab:53:92:37:cd:21:4f:81:cb:38:09:b4:94:87:f3:59:
         9b:73:c3:5e:db:03:92:b9:69:33:d3:bc:de:0b:a5:a7:5c:9b:
         8e:fe:5c:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWGwvdVfplmjOTQFQn/S6e1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTA2MTEwNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWE3NTlkZTc1YzA5N2MxZDlmNzQ3NTE4M2NjZjI5YzdkYzJhNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RqKo4haxUMHrdxtJWDgdi+NQ8NZ
fee8FbpGVFpLwB42F3PYV7+x7luV18VMQ/8zIDf0X8kdO/LPsKZP61VloB4AIjwi
7E7AUVayLehXMghUkE94C0Gdv0yelQXUMyr3h+2ek+htewB6R5BGQViBwe534gL6
/ePdV2E9OBdJW7O2O3cYR63lEbtswY3hkW48IgfITVi54LkmEx5n8jxWrXaDnObg
EcP0DYql6BwhqO6BknhZTjt5e9vqupkXK9Ar4fPDH3FxSt+gnagVCiMWZuFpH5P1
hfRRwGb9aFl5ax2wCaJBCR+Azgbbt0KiPisVoGS+i2vQYkUqFFJvMUyEOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA6nWd51wJfB2fdHUYPM8px9wqeEMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvRHFkWjNuWEFsOEhaOTBkUmc4enluSDNDcDRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KNMA0G
CSqGSIb3DQEBCwUAA4IBAQCuHm7OsoMBl2OtC0OA81WCGxerDZ0ccNfJsNglFHkY
7IKcSKkBv0gAI4ayGGRQHKbb0czmkCPQE7aSI0X5CjoXIJ8Qa3hwl904/GNQWUQf
nRu1Rxu9GeE2B0focQQad0HqdUww0PS5526mrTkdMrBSyvLqy6CTb6HvQmCqEDll
gdPEY053mrRiSYAmop9DtEj6ERFICmc37NkBwYqvg/1A56pnq/IAREpzJaUO5suk
iLnQHkykR1PBS/Dq/+JMY9t72KYyHTIwQ8Aom+lROZOzlPjWa1INSw3zn6tTkjfN
IU+ByzgJtJSH81mbc8Ne2wOSuWkz07zeC6WnXJuO/lyE
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net