Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/30thR6G9VB9gsJgMrMVUURsJt1g.roa
File:                     30thR6G9VB9gsJgMrMVUURsJt1g.roa (raw, json)
Hash identifier:          vzU9wsLtYt9BaMV6aupuQCXgfJHXQU5e0nw4vz/LyE4=
Subject key identifier:   DF:4B:61:47:A1:BD:54:1F:60:B0:98:0C:AC:C5:54:51:1B:09:B7:58
Certificate issuer:       /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial:       01883323F2D2835FD0F0EE40CA0245C34E59
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/30thR6G9VB9gsJgMrMVUURsJt1g.roa
Signing time:             Fri 19 May 2023 08:32:53 +0000
ROA not before:           Fri 19 May 2023 08:32:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57365
IP address blocks:        128.140.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Aug 2023 06:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:33:23:f2:d2:83:5f:d0:f0:ee:40:ca:02:45:c3:4e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
        Validity
            Not Before: May 19 08:32:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=df4b6147a1bd541f60b0980cacc554511b09b758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:a7:53:de:c6:f0:9c:ca:aa:5d:b9:fa:3e:
                    aa:70:d0:76:d9:e5:ad:95:43:2b:f7:4c:2c:b9:a2:
                    2a:7d:e5:2b:4b:9d:98:76:49:68:4d:e2:92:8d:8b:
                    0d:77:29:07:44:0b:10:53:bf:90:fc:fd:cb:15:14:
                    2b:53:12:8b:73:fe:80:be:9a:60:a7:d5:83:03:ff:
                    46:11:01:76:ed:29:31:13:0a:4a:b3:01:1a:f3:a2:
                    f7:4e:2a:50:e8:cc:f1:0c:6b:cf:1b:16:d7:bb:58:
                    a9:32:87:7f:38:81:d6:cb:c1:e2:87:74:11:d3:27:
                    e9:8a:5f:68:4c:4b:5e:e8:92:a4:59:a4:ff:1e:e6:
                    89:74:77:25:49:b3:c5:eb:da:d3:ca:b5:2f:79:e9:
                    fb:a3:03:ed:9e:91:26:eb:55:69:f4:8b:55:8c:05:
                    2d:14:3d:68:1e:c7:e5:a1:1b:95:f6:61:48:17:79:
                    27:19:f4:eb:35:4a:94:87:03:e3:1a:65:19:29:d7:
                    16:d7:ac:ce:ac:f3:59:0c:f4:cf:f9:45:de:c9:08:
                    97:a1:78:80:d3:46:40:15:8c:b4:96:9a:55:15:cf:
                    93:18:bf:3c:81:bc:d9:3c:e3:70:2a:c8:f5:ae:e9:
                    03:e3:5b:de:c6:0a:c6:f9:15:54:92:4b:f2:3f:f8:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:61:47:A1:BD:54:1F:60:B0:98:0C:AC:C5:54:51:1B:09:B7:58
            X509v3 Authority Key Identifier:
                keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/30thR6G9VB9gsJgMrMVUURsJt1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.140.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:bf:a0:46:b8:b8:64:33:a6:88:fa:02:8d:12:1b:4d:1d:
         62:72:94:d9:66:c5:f9:1d:b6:99:11:ff:22:01:a1:13:7d:03:
         ae:31:49:55:95:21:65:70:7a:5f:67:08:c5:6c:0d:a8:99:1b:
         0a:23:cd:a1:53:91:60:fd:c9:6f:ea:97:d0:9c:6f:c3:63:21:
         42:cc:65:d4:1a:ad:e8:25:59:a6:87:91:df:25:b7:97:1b:5b:
         21:34:99:bb:8e:fc:70:48:14:c1:4d:1d:4b:2f:26:7c:26:fc:
         ec:68:aa:0b:16:bd:f1:a4:ae:6c:cf:cb:83:4a:30:87:b9:7c:
         ed:51:1f:70:07:aa:ce:bb:cb:77:b2:8f:17:a5:1e:a1:aa:0c:
         61:4c:20:4d:fd:82:ee:2c:cd:b1:2f:64:b4:28:de:46:d6:46:
         ce:44:37:97:ec:a4:73:e8:99:3e:64:80:62:0a:b7:24:62:96:
         d9:66:eb:d1:97:94:0b:97:40:69:90:90:54:60:dd:9b:ae:b6:
         53:95:4d:d2:e5:a5:e6:6c:d7:4a:c4:b7:df:b3:de:57:83:ca:
         ff:b1:32:5a:89:25:bd:a5:6f:15:1f:fb:c5:fd:1e:ca:02:81:
         12:ed:2f:f3:4a:1f:50:e4:b7:35:8c:75:b5:29:6a:ef:32:5a:
         09:d7:62:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgzI/LSg1/Q8O5AygJFw05ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj
YTE3NjMwHhcNMjMwNTE5MDgzMjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjRiNjE0N2ExYmQ1NDFmNjBiMDk4MGNhY2M1NTQ1MTFiMDliNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDKnU97G8JzKql25+j6qcNB22eWt
lUMr90wsuaIqfeUrS52YdkloTeKSjYsNdykHRAsQU7+Q/P3LFRQrUxKLc/6Avppg
p9WDA/9GEQF27SkxEwpKswEa86L3TipQ6MzxDGvPGxbXu1ipMod/OIHWy8Hih3QR
0yfpil9oTEte6JKkWaT/HuaJdHclSbPF69rTyrUveen7owPtnpEm61Vp9ItVjAUt
FD1oHsfloRuV9mFIF3knGfTrNUqUhwPjGmUZKdcW16zOrPNZDPTP+UXeyQiXoXiA
00ZAFYy0lppVFc+TGL88gbzZPONwKsj1rukD41vexgrG+RVUkkvyP/jmywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9LYUehvVQfYLCYDKzFVFEbCbdYMB8GA1UdIwQY
MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt
MmY2ODIxNmI3NDI0LzEvMzB0aFI2RzlWQjlnc0pnTXJNVlVVUnNKdDFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0
LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgIzKMA0G
CSqGSIb3DQEBCwUAA4IBAQBYOr+gRri4ZDOmiPoCjRIbTR1icpTZZsX5HbaZEf8i
AaETfQOuMUlVlSFlcHpfZwjFbA2omRsKI82hU5Fg/clv6pfQnG/DYyFCzGXUGq3o
JVmmh5HfJbeXG1shNJm7jvxwSBTBTR1LLyZ8JvzsaKoLFr3xpK5sz8uDSjCHuXzt
UR9wB6rOu8t3so8XpR6hqgxhTCBN/YLuLM2xL2S0KN5G1kbORDeX7KRz6Jk+ZIBi
CrckYpbZZuvRl5QLl0BpkJBUYN2brrZTlU3S5aXmbNdKxLffs95Xg8r/sTJaiSW9
pW8VH/vF/R7KAoES7S/zSh9Q5Lc1jHW1KWrvMloJ12I0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org