Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/249lEf8Qba61OnSYLjoT4Cu0_FU.roa
File:                     249lEf8Qba61OnSYLjoT4Cu0_FU.roa (raw, json)
Hash identifier:          Iss8qzTUJrD0LZvD5gqYyxwbrAGmyx8tT9J5u74fhS4=
Subject key identifier:   DB:8F:65:11:FF:10:6D:AE:B5:3A:74:98:2E:3A:13:E0:2B:B4:FC:55
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       01880F5E2A35FD2CBA39B9279A79B0EA3878
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/249lEf8Qba61OnSYLjoT4Cu0_FU.roa
Signing time:             Fri 12 May 2023 09:50:09 +0000
ROA not before:           Fri 12 May 2023 09:50:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200461
IP address blocks:        178.18.150.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Fri 12 May 2023 10:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0f:5e:2a:35:fd:2c:ba:39:b9:27:9a:79:b0:ea:38:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: May 12 09:50:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db8f6511ff106daeb53a74982e3a13e02bb4fc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:e0:c8:ee:3a:63:ca:5e:24:19:5b:e0:56:
                    de:43:7b:79:23:65:0a:11:9b:0a:b8:8b:50:3a:c8:
                    93:6d:9c:d2:c8:f3:e0:a8:48:31:25:e3:17:b2:4a:
                    86:96:8f:d8:89:3f:d7:28:30:81:c0:99:ad:d4:bc:
                    57:b1:a3:30:f3:0f:9c:08:1b:a5:81:ca:0f:bd:8b:
                    38:80:22:e7:7f:ef:50:99:72:d5:f3:b6:4c:2f:ce:
                    7d:e3:e6:63:0f:6b:38:95:f4:44:86:77:47:77:19:
                    0d:8a:77:c8:14:77:ce:54:4d:3f:e8:11:40:06:5b:
                    35:51:f7:9c:00:c5:52:a9:5c:91:34:fe:e1:e3:6b:
                    50:9b:70:e5:75:79:56:aa:06:7a:50:3a:d6:65:c1:
                    b7:e1:e3:8e:6b:ea:b5:dc:7d:7d:94:1c:f1:4c:b3:
                    07:e9:29:28:3a:9c:1a:8c:e2:2b:ff:19:ca:75:0a:
                    c4:ae:86:4b:1e:53:19:f5:0e:04:90:db:2d:08:8d:
                    ab:2d:66:74:17:8a:6c:37:82:16:28:dd:16:27:2a:
                    34:0e:f7:44:b0:e5:e9:5e:ae:a7:f6:61:9f:26:ab:
                    99:15:f6:dc:86:c7:6d:c6:00:82:65:a5:3b:dc:00:
                    16:c3:e6:e3:27:c4:93:52:80:71:86:40:38:2d:38:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:65:11:FF:10:6D:AE:B5:3A:74:98:2E:3A:13:E0:2B:B4:FC:55
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/249lEf8Qba61OnSYLjoT4Cu0_FU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.18.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:a0:c5:28:74:4d:37:43:79:e7:47:53:2e:75:76:84:57:
         73:ab:8f:db:14:02:f6:76:2e:53:0b:21:ba:5c:ab:1a:bb:2d:
         1f:c6:28:84:32:49:ce:28:6f:6e:ac:96:61:dc:7a:f8:99:b9:
         92:57:66:de:ca:f9:8e:08:d3:1a:c6:6f:41:93:1b:a7:e6:d8:
         cd:4e:74:1b:5e:17:99:e0:57:0d:54:e7:73:91:60:47:66:de:
         34:dd:2a:8d:1b:45:68:9d:09:9d:97:01:19:e2:40:53:a2:e7:
         3d:3d:0e:0a:60:f4:93:a6:d4:b9:c9:f6:95:6e:02:cc:4b:f2:
         bd:11:fd:f8:4e:1c:25:97:da:2e:e0:1c:23:08:40:ed:ae:35:
         68:34:82:ae:8c:dc:da:02:b4:a0:64:cc:c6:26:5f:77:10:29:
         a6:08:63:50:64:82:d3:70:ee:4c:58:a6:65:53:91:a8:07:04:
         e3:64:79:64:90:5f:a0:1c:cc:e8:32:97:19:40:10:aa:22:21:
         f6:53:3b:35:6f:af:d6:32:d0:40:ac:4d:0f:b1:c1:49:23:68:
         33:86:12:84:4a:ad:53:b1:a3:77:a1:7e:b1:f8:a5:83:5b:e6:
         6c:69:da:2f:62:0b:49:bc:0a:f9:8e:01:e7:9a:87:a7:7d:f0:
         c1:62:6d:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgPXio1/Sy6Obknmnmw6jh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjMwNTEyMDk1MDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjhmNjUxMWZmMTA2ZGFlYjUzYTc0OTgyZTNhMTNlMDJiYjRmYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/HgyO46Y8peJBlb4FbeQ3t5I2UK
EZsKuItQOsiTbZzSyPPgqEgxJeMXskqGlo/YiT/XKDCBwJmt1LxXsaMw8w+cCBul
gcoPvYs4gCLnf+9QmXLV87ZML8594+ZjD2s4lfREhndHdxkNinfIFHfOVE0/6BFA
Bls1UfecAMVSqVyRNP7h42tQm3DldXlWqgZ6UDrWZcG34eOOa+q13H19lBzxTLMH
6SkoOpwajOIr/xnKdQrEroZLHlMZ9Q4EkNstCI2rLWZ0F4psN4IWKN0WJyo0DvdE
sOXpXq6n9mGfJquZFfbchsdtxgCCZaU73AAWw+bjJ8STUoBxhkA4LThQBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNuPZRH/EG2utTp0mC46E+ArtPxVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMjQ5bEVmOFFiYTYxT25TWUxqb1Q0Q3UwX0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshKWMA0G
CSqGSIb3DQEBCwUAA4IBAQAaG6DFKHRNN0N550dTLnV2hFdzq4/bFAL2di5TCyG6
XKsauy0fxiiEMknOKG9urJZh3Hr4mbmSV2beyvmOCNMaxm9Bkxun5tjNTnQbXheZ
4FcNVOdzkWBHZt403SqNG0VonQmdlwEZ4kBTouc9PQ4KYPSTptS5yfaVbgLMS/K9
Ef34Thwll9ou4BwjCEDtrjVoNIKujNzaArSgZMzGJl93ECmmCGNQZILTcO5MWKZl
U5GoBwTjZHlkkF+gHMzoMpcZQBCqIiH2Uzs1b6/WMtBArE0PscFJI2gzhhKESq1T
saN3oX6x+KWDW+ZsadovYgtJvAr5jgHnmoenffDBYm3r
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org