Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EfbfCkS5wSZiacGGrbi7VPZZBcI.roa
File:                     EfbfCkS5wSZiacGGrbi7VPZZBcI.roa (raw, json)
Hash identifier:          44zDvOuoAOz3JEzINyPirSiv2q8eQaAr27rvlvIKQ3I=
Subject key identifier:   11:F6:DF:0A:44:B9:C1:26:62:69:C1:86:AD:B8:BB:54:F6:59:05:C2
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018894C61F216FA36C526235878D8FD77655
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EfbfCkS5wSZiacGGrbi7VPZZBcI.roa
Signing time:             Wed 07 Jun 2023 07:33:12 +0000
ROA not before:           Wed 07 Jun 2023 07:33:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43754
IP address blocks:        213.176.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 10:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:94:c6:1f:21:6f:a3:6c:52:62:35:87:8d:8f:d7:76:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jun  7 07:33:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11f6df0a44b9c1266269c186adb8bb54f65905c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:71:9f:10:1e:e3:26:d7:6b:69:03:b2:52:
                    55:cc:dc:fd:a2:d6:3e:a8:2b:5a:4f:ac:66:1f:40:
                    27:c3:d8:ae:ec:b4:68:7e:5b:6d:17:a3:32:e6:f1:
                    d9:e4:d4:71:47:52:97:5a:19:84:66:3d:c0:6b:52:
                    5b:77:17:0c:3e:16:9b:60:9e:7c:e0:b1:44:fc:56:
                    1e:40:66:3f:11:e6:77:89:e1:14:f1:6a:68:6e:a7:
                    3c:d1:43:d2:ac:5a:9a:01:89:ea:c7:81:78:0d:0b:
                    9f:e1:c7:4b:e1:ec:32:9f:12:eb:45:50:4e:09:37:
                    31:8c:37:b2:62:98:43:43:c4:0b:25:80:8f:1a:f6:
                    9b:3e:c9:54:b2:a1:95:d9:06:bd:89:ac:95:ea:a0:
                    e7:70:1c:e0:32:64:5a:6d:5b:dd:eb:40:9e:ba:5b:
                    66:32:6d:c9:34:08:1d:bc:a6:48:30:56:ee:cf:8a:
                    d6:9c:e0:c6:c7:07:4d:21:48:0c:84:a0:69:e9:96:
                    9b:f2:28:cd:19:e6:8d:44:86:af:a8:31:4f:e0:77:
                    33:db:a8:26:bb:8a:53:69:d5:36:91:99:e1:77:06:
                    1b:92:bc:3c:b7:b0:2c:cb:c3:0c:3c:c0:a9:51:2b:
                    1f:21:02:7e:e0:f2:93:8c:17:e2:c3:d6:d4:c2:a8:
                    64:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:DF:0A:44:B9:C1:26:62:69:C1:86:AD:B8:BB:54:F6:59:05:C2
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/EfbfCkS5wSZiacGGrbi7VPZZBcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:a4:3f:ca:1c:af:49:d8:d1:fe:1e:42:74:50:4a:da:15:
         c5:c1:b4:cf:8c:5e:9f:75:71:ba:02:ab:d4:e8:6e:83:e4:8b:
         0e:71:fd:3b:06:90:dc:cf:ec:93:05:d3:90:c0:87:7b:60:3b:
         78:f1:4d:b8:07:9d:1a:c9:b5:18:f8:9f:da:ea:82:d8:30:9f:
         6e:f8:b0:94:03:be:14:c5:7c:ec:c2:83:80:ee:69:5b:3c:1e:
         00:43:e7:21:58:54:2f:6c:29:5f:2f:7e:fc:3a:c5:a7:f0:a4:
         b3:a2:b9:d6:33:03:7a:b2:62:4d:91:c6:73:58:56:5d:a2:24:
         87:be:36:e5:53:71:5c:f3:ac:f7:f1:e0:53:85:7f:1e:5f:45:
         24:6c:f8:8e:69:d9:a2:74:a1:76:d6:49:e6:3e:d8:27:95:e5:
         fa:29:80:04:a7:b7:44:50:29:f6:ee:fb:e1:99:82:ed:98:13:
         ca:1f:6e:a5:58:7d:71:6e:e2:17:6f:39:82:99:4d:2e:d2:ea:
         e5:ac:bc:5a:b5:38:48:e2:89:97:bb:f9:6b:6e:fd:cb:e8:9d:
         e2:0e:15:ad:6e:8b:a8:1d:ff:9b:9c:3e:6a:7f:80:b3:16:68:
         b4:77:bb:45:72:ce:7d:e3:52:f5:9a:80:3f:c8:ef:88:d0:b3:
         07:74:8e:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiUxh8hb6NsUmI1h42P13ZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjMwNjA3MDczMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY2ZGYwYTQ0YjljMTI2NjI2OWMxODZhZGI4YmI1NGY2NTkwNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwltxnxAe4ybXa2kDslJVzNz9otY+
qCtaT6xmH0Anw9iu7LRoflttF6My5vHZ5NRxR1KXWhmEZj3Aa1JbdxcMPhabYJ58
4LFE/FYeQGY/EeZ3ieEU8Wpobqc80UPSrFqaAYnqx4F4DQuf4cdL4ewynxLrRVBO
CTcxjDeyYphDQ8QLJYCPGvabPslUsqGV2Qa9iayV6qDncBzgMmRabVvd60Ceultm
Mm3JNAgdvKZIMFbuz4rWnODGxwdNIUgMhKBp6Zab8ijNGeaNRIavqDFP4Hcz26gm
u4pTadU2kZnhdwYbkrw8t7Asy8MMPMCpUSsfIQJ+4PKTjBfiw9bUwqhkMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBH23wpEucEmYmnBhq24u1T2WQXCMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvRWZiZkNrUzV3U1ppYWNHR3JiaTdWUFpaQmNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bABMA0G
CSqGSIb3DQEBCwUAA4IBAQC1DqQ/yhyvSdjR/h5CdFBK2hXFwbTPjF6fdXG6AqvU
6G6D5IsOcf07BpDcz+yTBdOQwId7YDt48U24B50aybUY+J/a6oLYMJ9u+LCUA74U
xXzswoOA7mlbPB4AQ+chWFQvbClfL378OsWn8KSzornWMwN6smJNkcZzWFZdoiSH
vjblU3Fc86z38eBThX8eX0UkbPiOadmidKF21knmPtgnleX6KYAEp7dEUCn27vvh
mYLtmBPKH26lWH1xbuIXbzmCmU0u0urlrLxatThI4omXu/lrbv3L6J3iDhWtbouo
Hf+bnD5qf4CzFmi0d7tFcs5941L1moA/yO+I0LMHdI5B
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org