Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dBu_ZYLqaF4EJbv-vokEn5McoQg.roa
File:                     dBu_ZYLqaF4EJbv-vokEn5McoQg.roa (raw, json)
Hash identifier:          RZIu6Wj50AAneF3ewsRBkWFxvVJLhds0a5JKl++ebPU=
Subject key identifier:   74:1B:BF:65:82:EA:68:5E:04:25:BB:FE:BE:89:04:9F:93:1C:A1:08
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       01856B8A16D9B93CF0E7318B48F71B209D51
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dBu_ZYLqaF4EJbv-vokEn5McoQg.roa
Signing time:             Sun 01 Jan 2023 04:14:49 +0000
ROA not before:           Sun 01 Jan 2023 04:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211967
IP address blocks:        46.229.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:8a:16:d9:b9:3c:f0:e7:31:8b:48:f7:1b:20:9d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  1 04:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=741bbf6582ea685e0425bbfebe89049f931ca108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:73:71:5c:b1:22:04:e1:05:20:b8:d2:ad:
                    a8:70:07:f1:e9:71:82:5d:fd:d7:4b:35:45:d4:88:
                    ab:3c:0e:9c:6d:c5:a6:04:b9:0d:02:d4:a5:ea:96:
                    a9:2a:35:32:5e:86:0e:2e:6b:1f:2e:6d:08:e5:26:
                    8a:21:a1:2f:eb:75:df:78:92:cd:57:23:89:54:66:
                    1f:34:23:93:0d:37:39:55:ab:0f:3a:50:42:ea:0e:
                    6b:39:85:1a:7e:dc:c8:c0:ea:b7:56:8f:66:bf:b3:
                    d6:b6:7b:0d:a2:c0:0c:df:f9:3a:a3:4d:b0:e0:2e:
                    c5:3d:35:da:5e:bf:ca:1b:87:1a:60:a5:6e:63:41:
                    08:1f:8f:22:8d:db:0d:31:1f:c6:00:02:fc:48:54:
                    6b:6a:d7:97:b9:00:50:45:a3:86:76:b8:cf:6c:92:
                    e4:9d:38:e3:a1:df:36:76:82:21:83:3d:6c:09:33:
                    b7:14:4a:b6:85:91:a3:76:8b:ef:fb:25:f0:f0:35:
                    69:d4:d8:0b:da:24:3b:5a:2d:b9:e1:d0:63:e6:02:
                    1b:c8:5b:1c:ab:7d:d9:bf:cd:18:16:2a:eb:3a:47:
                    e6:69:69:d0:8c:59:f3:43:c0:a5:22:52:53:15:47:
                    13:13:76:94:a2:6a:c8:24:2a:14:62:db:6e:13:37:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1B:BF:65:82:EA:68:5E:04:25:BB:FE:BE:89:04:9F:93:1C:A1:08
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dBu_ZYLqaF4EJbv-vokEn5McoQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:93:67:38:39:2e:00:c4:6f:93:77:9f:9d:8d:26:26:a0:
         c1:94:76:80:5a:c4:57:54:4e:40:b3:c8:9f:e4:ee:d6:3d:a1:
         9c:32:38:7c:8e:eb:aa:6c:fb:bd:6d:60:8c:55:37:92:8d:7e:
         a9:1a:e9:d6:b6:50:3f:69:b5:f8:2e:4b:d2:ac:44:60:d8:2d:
         1e:26:a0:e9:48:5c:3f:8f:5f:30:41:f6:31:10:eb:5e:09:67:
         8e:56:62:55:a2:39:22:c3:28:7a:85:21:ce:de:2c:9f:59:74:
         bb:f9:f4:78:cd:ec:58:c2:63:3d:bf:a7:2f:e8:c0:77:d0:64:
         ba:e8:ec:d7:7f:db:16:51:c5:6c:10:d2:14:20:4d:b4:42:87:
         fa:eb:29:0b:16:71:6d:d6:09:0c:6f:08:7e:04:c3:d5:50:f5:
         22:28:b1:e3:16:cf:e0:56:62:30:77:81:74:2e:fa:97:c4:e8:
         59:38:9d:92:1a:61:69:fb:07:79:7f:65:6c:30:00:a3:a2:30:
         62:1f:d5:b2:8c:fd:82:18:89:8c:55:ad:3c:7b:2a:7e:72:d1:
         b3:e0:2c:26:df:18:99:49:1e:50:11:d4:b6:15:20:3b:6e:0c:
         9a:30:c5:de:f2:c1:b2:70:02:25:d7:31:cc:36:9b:ca:04:24:
         e6:93:54:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrihbZuTzw5zGLSPcbIJ1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw
ZDJlZDYwHhcNMjMwMTAxMDQxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDFiYmY2NTgyZWE2ODVlMDQyNWJiZmViZTg5MDQ5ZjkzMWNhMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d1zcVyxIgThBSC40q2ocAfx6XGC
Xf3XSzVF1IirPA6cbcWmBLkNAtSl6papKjUyXoYOLmsfLm0I5SaKIaEv63XfeJLN
VyOJVGYfNCOTDTc5VasPOlBC6g5rOYUaftzIwOq3Vo9mv7PWtnsNosAM3/k6o02w
4C7FPTXaXr/KG4caYKVuY0EIH48ijdsNMR/GAAL8SFRrateXuQBQRaOGdrjPbJLk
nTjjod82doIhgz1sCTO3FEq2hZGjdovv+yXw8DVp1NgL2iQ7Wi254dBj5gIbyFsc
q33Zv80YFirrOkfmaWnQjFnzQ8ClIlJTFUcTE3aUomrIJCoUYttuEzc7TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQbv2WC6mheBCW7/r6JBJ+THKEIMB8GA1UdIwQY
MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt
ODhiMDE2YmJkNTgxLzEvZEJ1X1pZTHFhRjRFSmJ2LXZva0VuNU1jb1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx
LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU1MA0G
CSqGSIb3DQEBCwUAA4IBAQBB+JNnODkuAMRvk3efnY0mJqDBlHaAWsRXVE5As8if
5O7WPaGcMjh8juuqbPu9bWCMVTeSjX6pGunWtlA/abX4LkvSrERg2C0eJqDpSFw/
j18wQfYxEOteCWeOVmJVojkiwyh6hSHO3iyfWXS7+fR4zexYwmM9v6cv6MB30GS6
6OzXf9sWUcVsENIUIE20Qof66ykLFnFt1gkMbwh+BMPVUPUiKLHjFs/gVmIwd4F0
LvqXxOhZOJ2SGmFp+wd5f2VsMACjojBiH9WyjP2CGImMVa08eyp+ctGz4Cwm3xiZ
SR5QEdS2FSA7bgyaMMXe8sGycAIl1zHMNpvKBCTmk1R9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org