Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WBdt0TnTTK52xaZoxI_bMtR5V9Y.roa
File:                     WBdt0TnTTK52xaZoxI_bMtR5V9Y.roa (raw, json)
Hash identifier:          m0L9prW4B6xHPFop3Cnb6+58avM2v9TEtNS6KjudW38=
Subject key identifier:   58:17:6D:D1:39:D3:4C:AE:76:C5:A6:68:C4:8F:DB:32:D4:79:57:D6
Certificate issuer:       /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial:       018D7FACA1B88420684DB0A5CDA482C922DC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WBdt0TnTTK52xaZoxI_bMtR5V9Y.roa
Signing time:             Tue 06 Feb 2024 18:27:16 +0000
ROA not before:           Tue 06 Feb 2024 18:27:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210387
IP address blocks:        2a0f:b241:f7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7f:ac:a1:b8:84:20:68:4d:b0:a5:cd:a4:82:c9:22:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
        Validity
            Not Before: Feb  6 18:27:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58176dd139d34cae76c5a668c48fdb32d47957d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:4e:f8:9b:8a:07:04:52:aa:77:4f:25:4c:
                    c2:a9:62:e8:89:c1:de:5d:3b:62:d9:07:57:72:5b:
                    82:05:85:cc:18:68:2d:41:7c:9d:e0:f9:28:30:b7:
                    8c:57:b5:07:75:d1:c6:34:89:be:77:37:b9:b4:7b:
                    8b:29:54:fa:a1:a4:3d:68:c1:04:40:f8:99:f0:71:
                    8c:57:02:cc:41:de:ca:ff:a8:07:29:b1:a1:4c:60:
                    4a:bb:b0:8e:d8:f2:a1:6f:c5:4b:d6:85:a1:15:da:
                    e0:80:29:59:c3:9d:07:48:f2:d6:a7:ba:8e:ca:97:
                    1f:91:b0:9d:12:0f:4a:65:b6:a5:f7:67:05:65:d4:
                    84:fc:56:d2:4a:51:12:0a:8c:c1:7d:82:75:8b:1e:
                    d0:f0:20:87:8b:61:e3:50:df:36:e2:5d:76:26:c2:
                    87:c9:7c:53:7f:36:ca:45:e6:58:a0:b6:26:b3:1a:
                    b6:78:e7:03:e8:6b:00:43:cc:d7:ac:a2:cf:67:66:
                    1b:12:0d:50:b9:84:20:a3:b2:d4:6d:f4:53:82:b0:
                    d5:81:26:74:9e:a1:8c:2d:28:b9:71:97:56:f1:9a:
                    74:ec:b7:ca:b2:f2:fe:6c:b8:e3:4f:85:89:95:14:
                    29:8d:e3:6a:5a:6f:75:53:38:bc:f2:f8:90:28:26:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:17:6D:D1:39:D3:4C:AE:76:C5:A6:68:C4:8F:DB:32:D4:79:57:D6
            X509v3 Authority Key Identifier:
                keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/WBdt0TnTTK52xaZoxI_bMtR5V9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b241:f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:99:ff:3a:0a:0e:e1:17:75:26:46:51:0a:49:1e:4f:0f:08:
         42:19:0a:39:9b:17:79:44:ba:f6:89:de:99:a9:74:50:88:f7:
         95:7a:8a:89:4d:84:ea:f0:d1:dc:53:bd:33:24:15:ff:98:36:
         4b:16:5b:71:46:04:c1:27:26:f9:0e:cc:ba:4c:90:84:6b:35:
         34:93:2d:75:01:b0:69:ac:fa:dd:00:ea:5d:b1:3b:d4:56:52:
         77:f9:7c:f9:d0:a1:9d:09:bc:11:3b:b2:0e:ab:92:c8:ab:9a:
         56:d3:7c:73:cc:bf:fd:c2:2a:02:5a:e3:7e:64:10:7f:3e:03:
         4a:50:a7:bd:ce:54:67:40:0c:de:07:79:4c:ef:19:55:e9:71:
         98:72:21:30:df:ac:b4:be:1a:00:81:ab:0b:a4:e8:ee:40:72:
         f3:0c:a1:fc:18:d9:d7:1e:eb:a5:e7:1c:a2:02:73:ff:7e:32:
         81:8b:d9:b4:67:6a:00:ca:3d:79:9b:95:6b:9d:89:6c:01:7b:
         ff:c5:4b:89:3e:a5:7c:4c:13:cf:d2:03:f0:0f:f2:f7:ef:1a:
         c7:86:bc:a7:ac:06:40:47:59:3a:b7:86:15:d4:68:66:80:cc:
         57:dc:9e:66:11:2f:01:6f:b6:1f:d5:a3:e6:3b:98:8e:4a:eb:
         85:c6:43:be
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY1/rKG4hCBoTbClzaSCySLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjQwMjA2MTgyNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE3NmRkMTM5ZDM0Y2FlNzZjNWE2NjhjNDhmZGIzMmQ0Nzk1N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxBO+JuKBwRSqndPJUzCqWLoicHe
XTti2QdXcluCBYXMGGgtQXyd4PkoMLeMV7UHddHGNIm+dze5tHuLKVT6oaQ9aMEE
QPiZ8HGMVwLMQd7K/6gHKbGhTGBKu7CO2PKhb8VL1oWhFdrggClZw50HSPLWp7qO
ypcfkbCdEg9KZbal92cFZdSE/FbSSlESCozBfYJ1ix7Q8CCHi2HjUN824l12JsKH
yXxTfzbKReZYoLYmsxq2eOcD6GsAQ8zXrKLPZ2YbEg1QuYQgo7LUbfRTgrDVgSZ0
nqGMLSi5cZdW8Zp07LfKsvL+bLjjT4WJlRQpjeNqWm91Uzi88viQKCY2PQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFgXbdE500yudsWmaMSP2zLUeVfWMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvV0JkdDBUblRUSzUyeGFab3hJX2JNdFI1VjlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQQD3
MA0GCSqGSIb3DQEBCwUAA4IBAQBkmf86Cg7hF3UmRlEKSR5PDwhCGQo5mxd5RLr2
id6ZqXRQiPeVeoqJTYTq8NHcU70zJBX/mDZLFltxRgTBJyb5Dsy6TJCEazU0ky11
AbBprPrdAOpdsTvUVlJ3+Xz50KGdCbwRO7IOq5LIq5pW03xzzL/9wioCWuN+ZBB/
PgNKUKe9zlRnQAzeB3lM7xlV6XGYciEw36y0vhoAgasLpOjuQHLzDKH8GNnXHuul
5xyiAnP/fjKBi9m0Z2oAyj15m5VrnYlsAXv/xUuJPqV8TBPP0gPwD/L37xrHhryn
rAZAR1k6t4YV1GhmgMxX3J5mES8Bb7Yf1aPmO5iOSuuFxkO+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org