Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Vo-__pCj321oXxw-FzkAH4e3lH8.roa
File:                     Vo-__pCj321oXxw-FzkAH4e3lH8.roa (raw, json)
Hash identifier:          LZbLWeCl5CHO4WJymGqYiHoBqjhs2RUQ9qor9NR/YLk=
Subject key identifier:   56:8F:BF:FE:90:A3:DF:6D:68:5F:1C:3E:17:39:00:1F:87:B7:94:7F
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       0185706768E27F0F97673AC69039DAA1B243
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Vo-__pCj321oXxw-FzkAH4e3lH8.roa
Signing time:             Mon 02 Jan 2023 02:55:03 +0000
ROA not before:           Mon 02 Jan 2023 02:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150698
IP address blocks:        2a0b:3c40:19::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 03 Jan 2023 16:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:68:e2:7f:0f:97:67:3a:c6:90:39:da:a1:b2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  2 02:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=568fbffe90a3df6d685f1c3e1739001f87b7947f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:6a:fc:fa:a7:f3:cc:8f:c4:da:35:91:93:
                    2a:d2:92:c5:fb:76:53:1e:10:37:ac:56:d3:09:94:
                    f4:b6:0f:a9:8d:a7:13:86:60:87:50:24:bd:d0:6f:
                    3b:31:1d:61:71:da:d8:8b:cc:f2:81:e1:33:48:6e:
                    fd:cc:00:4d:a5:db:a1:19:51:df:f3:63:8d:25:7e:
                    78:b6:80:de:6e:95:44:f2:ef:5f:2d:d9:3f:43:80:
                    8b:5a:5b:3d:65:c7:65:aa:55:56:a6:eb:b0:41:0d:
                    c6:90:43:72:9a:71:7f:e3:6c:3b:9f:03:b3:30:ff:
                    a3:3a:1c:82:c9:45:0e:3a:c9:f1:77:17:27:89:40:
                    f8:d5:92:13:03:d9:0d:30:9a:72:25:b0:40:1a:43:
                    29:72:d8:92:0c:0c:da:07:e7:2e:0c:46:3c:7e:c0:
                    05:f5:64:25:b3:7a:49:99:21:fb:b7:dc:c5:f2:c6:
                    50:be:09:1c:8d:84:2a:5e:14:f3:e2:b2:b2:8d:cf:
                    47:73:6f:61:5b:d7:f6:fa:e5:f0:9c:f3:d5:d4:f2:
                    2c:8f:1a:36:0f:ce:06:f7:5d:48:82:e6:87:e3:ff:
                    0e:3c:17:e4:72:87:47:9d:be:76:e7:29:96:31:f4:
                    e3:b8:5e:e3:e9:6c:71:c8:c5:e4:63:60:dc:9c:b3:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8F:BF:FE:90:A3:DF:6D:68:5F:1C:3E:17:39:00:1F:87:B7:94:7F
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Vo-__pCj321oXxw-FzkAH4e3lH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:3c40:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:70:86:e6:31:6f:b3:8f:80:8c:e7:ca:00:db:65:31:44:8f:
         5b:dc:8f:3b:e9:87:43:8d:95:50:0c:b9:d6:93:45:4a:0b:17:
         f0:f3:e7:29:a8:b4:90:d2:0d:32:e2:1c:d5:f9:2f:00:61:b1:
         10:45:e5:ef:82:e0:31:fc:12:33:40:34:cb:c0:66:de:36:06:
         a0:35:70:8f:49:a5:7f:f5:ec:da:3d:90:ff:3e:67:8f:f4:fd:
         eb:eb:3a:ca:fd:22:ba:1d:96:75:06:ea:cc:5b:84:b1:f9:5f:
         01:d3:58:32:0c:0f:ab:a4:52:dc:11:89:90:7d:d4:d9:a9:f5:
         98:a2:f1:0d:32:35:36:d7:50:55:96:1d:21:7a:47:2e:30:8d:
         70:10:ac:38:47:88:0f:3e:32:e2:cf:21:2c:2d:82:75:d1:b9:
         aa:0e:ac:3e:3a:39:15:55:2b:9f:85:b5:ad:a3:df:bf:e2:fd:
         20:01:1f:91:0c:99:40:ab:50:d3:4f:10:50:e6:74:ab:d4:63:
         60:f4:60:1c:55:ea:d7:b1:a3:43:10:e7:25:80:45:8c:eb:4a:
         5f:bf:d4:11:62:52:6a:45:63:80:ee:11:ad:63:f0:80:7d:ad:
         5c:05:0c:f7:72:cc:9f:be:c5:3f:8a:ae:a2:39:4e:b4:b2:98:
         40:af:e6:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVwZ2jifw+XZzrGkDnaobJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwMTAyMDI1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjhmYmZmZTkwYTNkZjZkNjg1ZjFjM2UxNzM5MDAxZjg3Yjc5NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn1q/Pqn88yPxNo1kZMq0pLF+3ZT
HhA3rFbTCZT0tg+pjacThmCHUCS90G87MR1hcdrYi8zygeEzSG79zABNpduhGVHf
82ONJX54toDebpVE8u9fLdk/Q4CLWls9ZcdlqlVWpuuwQQ3GkENymnF/42w7nwOz
MP+jOhyCyUUOOsnxdxcniUD41ZITA9kNMJpyJbBAGkMpctiSDAzaB+cuDEY8fsAF
9WQls3pJmSH7t9zF8sZQvgkcjYQqXhTz4rKyjc9Hc29hW9f2+uXwnPPV1PIsjxo2
D84G911IguaH4/8OPBfkcodHnb525ymWMfTjuF7j6WxxyMXkY2DcnLMRtQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFaPv/6Qo99taF8cPhc5AB+Ht5R/MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvVm8tX19wQ2ozMjFvWHh3LUZ6a0FINGUzbEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgs8QAAZ
MA0GCSqGSIb3DQEBCwUAA4IBAQCBcIbmMW+zj4CM58oA22UxRI9b3I876YdDjZVQ
DLnWk0VKCxfw8+cpqLSQ0g0y4hzV+S8AYbEQReXvguAx/BIzQDTLwGbeNgagNXCP
SaV/9ezaPZD/PmeP9P3r6zrK/SK6HZZ1BurMW4Sx+V8B01gyDA+rpFLcEYmQfdTZ
qfWYovENMjU211BVlh0hekcuMI1wEKw4R4gPPjLizyEsLYJ10bmqDqw+OjkVVSuf
hbWto9+/4v0gAR+RDJlAq1DTTxBQ5nSr1GNg9GAcVerXsaNDEOclgEWM60pfv9QR
YlJqRWOA7hGtY/CAfa1cBQz3csyfvsU/iq6iOU60sphAr+Y6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org