Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/exY31E3OcfF60g2WOuxqO7ZF7t0.roa
File:                     exY31E3OcfF60g2WOuxqO7ZF7t0.roa (raw, json)
Hash identifier:          IcS8UjURoLGD/xWMiZ1MPG4AXXGeotnZvLytuHQsdzw=
Subject key identifier:   7B:16:37:D4:4D:CE:71:F1:7A:D2:0D:96:3A:EC:6A:3B:B6:45:EE:DD
Certificate issuer:       /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial:       01881E7A7344D59C7E9A7D82CFBC8781A039
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/exY31E3OcfF60g2WOuxqO7ZF7t0.roa
Signing time:             Mon 15 May 2023 08:15:21 +0000
ROA not before:           Mon 15 May 2023 08:15:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29684
IP address blocks:        185.205.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1e:7a:73:44:d5:9c:7e:9a:7d:82:cf:bc:87:81:a0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
        Validity
            Not Before: May 15 08:15:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b1637d44dce71f17ad20d963aec6a3bb645eedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:10:fb:d5:44:7f:21:32:37:e7:c8:4e:4e:
                    3e:f6:8f:40:72:05:8a:6a:5d:7c:d8:42:69:27:ed:
                    b3:26:0e:01:6d:83:13:e8:13:44:1f:56:26:13:a1:
                    2b:63:4a:be:51:8d:85:43:06:44:c7:74:93:c6:4a:
                    79:70:84:a3:3d:a6:31:95:2d:99:a0:6f:8e:9a:52:
                    a1:03:0f:1d:b4:b6:50:b7:dd:15:3a:de:e9:21:99:
                    3b:59:5b:d8:62:0a:1c:9c:0e:ff:97:70:5e:8a:a8:
                    fc:84:13:fb:07:62:51:bc:94:eb:fc:d0:9d:0d:ec:
                    a6:e2:28:34:59:f1:69:ee:a8:73:35:6a:d1:c0:09:
                    fb:54:c5:fd:0e:3f:a9:ca:05:19:76:fb:b2:4a:e9:
                    17:75:ab:67:03:60:fe:dd:ea:b6:40:8d:89:82:56:
                    3f:5f:59:7d:fc:50:1c:cb:55:80:2f:65:2d:9d:69:
                    5b:2b:ca:3d:9d:dd:47:64:09:a5:e6:27:dc:a8:9e:
                    5d:00:19:09:16:5d:db:54:22:6d:2a:9a:98:01:56:
                    c7:e6:fc:9d:cd:2b:4a:ea:58:4c:65:f6:fc:8d:d9:
                    20:2a:6f:3a:b7:59:de:f2:67:be:bf:c8:01:62:16:
                    dc:59:93:f0:aa:22:1e:36:4c:bb:f0:cb:01:88:70:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:16:37:D4:4D:CE:71:F1:7A:D2:0D:96:3A:EC:6A:3B:B6:45:EE:DD
            X509v3 Authority Key Identifier:
                keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/exY31E3OcfF60g2WOuxqO7ZF7t0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:a7:61:70:d7:95:4d:49:0d:22:c4:63:dd:5b:ba:81:61:fe:
         00:a1:ff:33:b8:1d:54:1b:06:c4:c0:a0:b1:ef:7a:95:6f:1a:
         c8:90:da:04:53:65:a1:2c:77:96:ab:da:8b:6c:85:7d:c3:2c:
         d5:6e:72:9f:a6:45:d8:59:ff:de:42:7e:e5:f1:80:8a:5a:0b:
         76:66:44:24:7c:ef:52:04:91:87:b9:f4:e3:17:2c:23:ab:53:
         2e:69:e8:5b:43:64:db:72:02:99:58:eb:56:cf:f1:43:dc:95:
         84:31:da:02:27:39:a8:60:22:6b:43:f8:63:5f:0c:a5:01:08:
         8e:e3:62:b7:81:fd:cd:3c:ca:12:a6:bb:83:ed:13:18:25:6d:
         56:7e:32:2c:ae:49:47:28:05:5c:21:46:c2:d0:6d:b4:29:bd:
         79:f8:21:2e:cd:e3:4e:ac:bc:71:ec:76:50:0f:e4:48:0e:e2:
         8d:a4:69:26:eb:91:1e:e7:8f:f8:69:f1:ae:51:43:f7:17:bd:
         bf:9c:c4:93:e8:88:83:1a:82:10:01:e4:bd:db:02:67:fe:cb:
         f9:47:76:ba:e9:f2:93:84:47:8d:bb:85:b3:31:58:92:ed:fb:
         7f:cc:38:41:32:8f:5e:1e:76:21:93:f3:9a:cd:aa:37:fd:3b:
         09:fb:d2:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgeenNE1Zx+mn2Cz7yHgaA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDdiYTY1MTQwM2QxOGRkZGI3YTc0YjIwZGRjMjFkZWI5
NDIyMGUwHhcNMjMwNTE1MDgxNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjE2MzdkNDRkY2U3MWYxN2FkMjBkOTYzYWVjNmEzYmI2NDVlZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTgQ+9VEfyEyN+fITk4+9o9AcgWK
al182EJpJ+2zJg4BbYMT6BNEH1YmE6ErY0q+UY2FQwZEx3STxkp5cISjPaYxlS2Z
oG+OmlKhAw8dtLZQt90VOt7pIZk7WVvYYgocnA7/l3Beiqj8hBP7B2JRvJTr/NCd
Deym4ig0WfFp7qhzNWrRwAn7VMX9Dj+pygUZdvuySukXdatnA2D+3eq2QI2JglY/
X1l9/FAcy1WAL2UtnWlbK8o9nd1HZAml5ifcqJ5dABkJFl3bVCJtKpqYAVbH5vyd
zStK6lhMZfb8jdkgKm86t1ne8me+v8gBYhbcWZPwqiIeNky78MsBiHClqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHsWN9RNznHxetINljrsaju2Re7dMB8GA1UdIwQY
MBaAFJbXumUUA9GN3benSyDdwh3rlCIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAt
NDE4YWY5MGFjYjhhLzEvZXhZMzFFM09jZkY2MGcyV091eHFPN1pGN3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wZDMzYzktNmE4NC00Y2UzLTgxYjAtNDE4YWY5MGFjYjhh
LzEvbHRlNlpSUUQwWTNkdDZkTElOM0NIZXVVSWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc0YMA0G
CSqGSIb3DQEBCwUAA4IBAQDZp2Fw15VNSQ0ixGPdW7qBYf4Aof8zuB1UGwbEwKCx
73qVbxrIkNoEU2WhLHeWq9qLbIV9wyzVbnKfpkXYWf/eQn7l8YCKWgt2ZkQkfO9S
BJGHufTjFywjq1MuaehbQ2TbcgKZWOtWz/FD3JWEMdoCJzmoYCJrQ/hjXwylAQiO
42K3gf3NPMoSpruD7RMYJW1WfjIsrklHKAVcIUbC0G20Kb15+CEuzeNOrLxx7HZQ
D+RIDuKNpGkm65Ee54/4afGuUUP3F72/nMST6IiDGoIQAeS92wJn/sv5R3a66fKT
hEeNu4WzMViS7ft/zDhBMo9eHnYhk/Oazao3/TsJ+9Id
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net