Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/w5E91NhrGC0zVFjserbOwtlp5j4.roa
File:                     w5E91NhrGC0zVFjserbOwtlp5j4.roa (raw, json)
Hash identifier:          odDSfssgCuWJbDTYQ98bs48Ro1Mq6yZy8WMFv9SbHs4=
Subject key identifier:   C3:91:3D:D4:D8:6B:18:2D:33:54:58:EC:7A:B6:CE:C2:D9:69:E6:3E
Certificate issuer:       /CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Certificate serial:       018CC7264EF23F686C18AD7292C942E7E4A9
Authority key identifier: 13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/w5E91NhrGC0zVFjserbOwtlp5j4.roa
Signing time:             Mon 01 Jan 2024 22:30:25 +0000
ROA not before:           Mon 01 Jan 2024 22:30:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201990
IP address blocks:        185.205.84.0/22 maxlen: 22
                          193.46.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 14:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:4e:f2:3f:68:6c:18:ad:72:92:c9:42:e7:e4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13eb7b7df835b113abb3f626f6203fee97b1992c
        Validity
            Not Before: Jan  1 22:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3913dd4d86b182d335458ec7ab6cec2d969e63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:bd:b0:7c:a7:5e:d6:68:18:f9:16:08:36:
                    8c:d8:e1:5f:66:5f:20:e4:c8:d7:1e:01:8c:46:90:
                    72:30:d8:1e:37:3d:aa:54:81:01:48:b8:e8:af:e2:
                    29:4f:c0:91:d5:07:3b:2d:37:c1:3c:4f:bf:c4:41:
                    8b:c6:ae:cc:23:9d:c1:5c:3d:3e:77:70:87:ab:df:
                    00:ab:57:92:f6:22:78:4e:d8:f5:3e:72:bd:10:55:
                    77:46:84:39:42:28:0a:23:f4:14:55:cc:27:45:6f:
                    38:bb:95:e8:fc:dc:b4:1c:01:05:d2:e0:53:45:f8:
                    fd:42:f2:38:89:8d:d2:17:a1:50:0a:3e:b6:31:0a:
                    b3:56:68:ac:94:b2:8c:80:42:a7:a6:dc:36:e3:a7:
                    42:65:8e:6f:75:a2:58:40:54:5b:18:bd:bb:2f:41:
                    ab:0f:e1:e4:a2:13:0e:df:0d:67:04:62:6f:95:ce:
                    97:ce:f8:81:4a:87:24:bf:e1:cb:80:4b:01:99:6d:
                    6e:fc:ae:69:ad:c4:61:66:00:c1:02:06:44:ee:7e:
                    1c:a2:66:2a:84:4f:25:f2:9e:a1:53:b4:7e:3f:dc:
                    c6:19:57:60:45:c4:56:53:b8:03:3a:6a:da:6b:60:
                    b3:ff:e6:16:90:64:51:a4:db:ec:3d:46:a0:c2:d5:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:91:3D:D4:D8:6B:18:2D:33:54:58:EC:7A:B6:CE:C2:D9:69:E6:3E
            X509v3 Authority Key Identifier:
                keyid:13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/w5E91NhrGC0zVFjserbOwtlp5j4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.84.0/22
                  193.46.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:61:d2:89:4b:f9:78:f0:73:cb:fc:91:00:48:3f:e6:e9:
         27:89:d6:19:1a:1b:ff:57:46:f0:c2:31:04:fc:d2:0e:33:44:
         24:7e:67:51:be:09:a9:f9:95:dd:90:82:9c:ca:e4:15:c6:bd:
         b7:6f:a9:fd:b5:a5:50:a2:14:65:30:d0:d6:fd:07:76:02:89:
         b1:40:33:cf:58:9c:70:30:30:0c:94:eb:39:2c:55:55:49:b3:
         c4:e9:50:14:31:46:58:bf:d6:59:a7:f7:47:92:87:ea:79:be:
         25:46:63:0d:52:7a:0b:d7:a3:f1:83:b7:5b:87:31:89:8a:d0:
         d0:16:5a:92:7a:9c:79:0b:32:91:7a:19:03:90:ab:3b:94:d6:
         0d:b4:ae:cf:7b:a4:2d:9d:d8:c8:f9:88:c0:b3:50:f1:c2:c0:
         e2:58:7c:4a:1d:48:bf:12:bd:c3:1d:60:45:9b:82:a0:6c:6b:
         ee:f0:06:d2:fb:2f:a8:63:73:1e:06:80:37:b7:0e:57:14:8c:
         09:fb:cb:b0:2d:38:e6:98:2a:8b:3c:65:93:30:32:27:c5:11:
         1f:79:95:fa:ba:42:83:8c:c6:37:09:7a:12:74:0a:11:41:f3:
         d6:0c:46:b3:52:b4:07:d3:5f:57:95:b4:2c:4c:c8:e0:f8:4e:
         6a:3f:fb:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJk7yP2hsGK1ykslC5+SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWI3YjdkZjgzNWIxMTNhYmIzZjYyNmY2MjAzZmVlOTdi
MTk5MmMwHhcNMjQwMTAxMjIzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzkxM2RkNGQ4NmIxODJkMzM1NDU4ZWM3YWI2Y2VjMmQ5NjllNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovm9sHynXtZoGPkWCDaM2OFfZl8g
5MjXHgGMRpByMNgeNz2qVIEBSLjor+IpT8CR1Qc7LTfBPE+/xEGLxq7MI53BXD0+
d3CHq98Aq1eS9iJ4Ttj1PnK9EFV3RoQ5QigKI/QUVcwnRW84u5Xo/Ny0HAEF0uBT
Rfj9QvI4iY3SF6FQCj62MQqzVmislLKMgEKnptw246dCZY5vdaJYQFRbGL27L0Gr
D+HkohMO3w1nBGJvlc6XzviBSockv+HLgEsBmW1u/K5prcRhZgDBAgZE7n4comYq
hE8l8p6hU7R+P9zGGVdgRcRWU7gDOmraa2Cz/+YWkGRRpNvsPUagwtUenQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMORPdTYaxgtM1RY7Hq2zsLZaeY+MB8GA1UdIwQY
MBaAFBPre334NbETq7P2JvYgP+6XsZksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS10N2ZmZzFzUk9yc19ZbTlpQV83cGV4bVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NjFkNGUtY2Q2YS00NzdmLTkxOWMt
ODFjNzE2ZjViY2EyLzEvdzVFOTFOaHJHQzB6VkZqc2VyYk93dGxwNWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82NjFkNGUtY2Q2YS00NzdmLTkxOWMtODFjNzE2ZjViY2Ey
LzEvRS10N2ZmZzFzUk9yc19ZbTlpQV83cGV4bVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuc1UAwQA
wS7NMA0GCSqGSIb3DQEBCwUAA4IBAQAPgmHSiUv5ePBzy/yRAEg/5uknidYZGhv/
V0bwwjEE/NIOM0QkfmdRvgmp+ZXdkIKcyuQVxr23b6n9taVQohRlMNDW/Qd2Aomx
QDPPWJxwMDAMlOs5LFVVSbPE6VAUMUZYv9ZZp/dHkofqeb4lRmMNUnoL16Pxg7db
hzGJitDQFlqSepx5CzKRehkDkKs7lNYNtK7Pe6QtndjI+YjAs1DxwsDiWHxKHUi/
Er3DHWBFm4KgbGvu8AbS+y+oY3MeBoA3tw5XFIwJ+8uwLTjmmCqLPGWTMDInxREf
eZX6ukKDjMY3CXoSdAoRQfPWDEazUrQH019XlbQsTMjg+E5qP/sk
Generated at Sat Apr 6 20:08:05 2024 by rpki-client on console.sobornost.net