Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/6wx6SDEgIoA_L7O6Ci7EC1qZPZ0.roa
File:                     6wx6SDEgIoA_L7O6Ci7EC1qZPZ0.roa (raw, json)
Hash identifier:          lWkL0lrpuE/MeM9uuqo2kO8+xxIZ/KtT8/cgII6StTE=
Subject key identifier:   EB:0C:7A:48:31:20:22:80:3F:2F:B3:BA:0A:2E:C4:0B:5A:99:3D:9D
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       01857246C2E53FE324BDF50D1309573B2BD1
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/6wx6SDEgIoA_L7O6Ci7EC1qZPZ0.roa
Signing time:             Mon 02 Jan 2023 11:38:38 +0000
ROA not before:           Mon 02 Jan 2023 11:38:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        45.140.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Jan 2023 14:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:c2:e5:3f:e3:24:bd:f5:0d:13:09:57:3b:2b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Jan  2 11:38:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb0c7a48312022803f2fb3ba0a2ec40b5a993d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:c8:83:5a:e2:87:96:b8:13:97:98:f6:79:
                    79:04:6a:e5:57:0e:32:65:d1:0e:fa:aa:02:3b:af:
                    44:3a:6c:c7:4f:0e:f1:62:f9:6a:aa:30:91:bb:1d:
                    04:04:6d:46:19:4f:fe:cb:5d:f8:18:29:c6:06:7a:
                    89:a0:d6:24:f4:f6:22:1f:d2:81:32:c2:1e:81:c3:
                    6e:9b:10:b7:e4:b3:44:37:8c:b7:e7:91:d3:25:ca:
                    f6:34:9f:1a:57:44:47:2f:e9:b8:84:bb:53:fa:22:
                    eb:c2:84:62:0a:49:93:25:b3:44:86:af:62:8c:97:
                    bc:2e:8e:c5:d9:75:d7:b9:f5:18:32:d4:7f:a8:80:
                    23:c4:7c:76:9c:ae:3c:ca:ae:e2:45:e3:5b:62:eb:
                    b0:40:12:43:da:a2:ed:74:5e:89:89:70:34:91:c6:
                    bb:9d:95:dc:45:50:a1:94:0d:c5:18:9a:9c:ec:be:
                    cf:3b:c1:86:32:32:5c:fc:e6:f1:e5:52:42:62:74:
                    84:fd:40:02:a5:b7:2e:59:74:aa:0c:0a:3d:25:7e:
                    72:70:9f:2e:03:4a:1f:f3:f9:3f:a9:34:f9:85:c5:
                    8a:ac:6b:3c:46:cd:37:64:2f:de:c7:10:ed:76:40:
                    26:c6:00:ae:9c:5d:87:fb:7a:f1:78:42:5f:18:cd:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:7A:48:31:20:22:80:3F:2F:B3:BA:0A:2E:C4:0B:5A:99:3D:9D
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/6wx6SDEgIoA_L7O6Ci7EC1qZPZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:8a:06:81:3d:97:0a:2e:82:14:7c:30:24:1f:20:1b:84:18:
         49:f4:e3:94:9d:a5:7e:27:38:f4:a8:a1:a0:9a:9b:de:a1:f5:
         c6:6a:2f:93:86:5d:b4:78:e6:67:7a:b0:b6:4f:18:bc:9e:fd:
         f5:65:54:34:a7:9c:14:2b:50:2a:b7:00:95:43:f9:34:56:05:
         5c:da:30:a1:6f:42:6e:06:8d:03:89:5e:3e:06:aa:51:1a:b9:
         e8:c1:f9:4c:cb:a0:a8:d8:d2:c4:0e:f1:e0:c2:57:a7:4d:10:
         1e:6e:19:dd:59:52:5d:ec:4e:f5:2c:4f:ca:f4:74:74:8e:c4:
         de:47:d9:07:6a:53:09:36:04:70:81:c2:42:a4:9d:d6:8b:5e:
         a9:b6:1f:33:de:e1:c9:78:cd:df:28:0b:e4:89:24:88:ae:11:
         e2:f2:4e:5c:23:2f:c0:67:74:64:2f:09:ab:b0:e6:8e:7e:42:
         d4:fd:db:1d:60:15:79:4a:b8:1e:2e:9e:10:a3:58:be:21:e9:
         15:c9:79:5b:1d:b0:e0:7b:1a:f6:7d:68:e0:a7:f9:6d:f8:c7:
         28:db:97:20:db:70:ea:87:ac:f0:87:e1:b0:d5:67:0b:3b:ce:
         61:8f:45:d7:83:2c:01:08:7e:ce:5e:7c:7c:f7:c7:83:4d:81:
         09:62:95:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRsLlP+MkvfUNEwlXOyvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjMwMTAyMTEzODM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjBjN2E0ODMxMjAyMjgwM2YyZmIzYmEwYTJlYzQwYjVhOTkzZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLXIg1rih5a4E5eY9nl5BGrlVw4y
ZdEO+qoCO69EOmzHTw7xYvlqqjCRux0EBG1GGU/+y134GCnGBnqJoNYk9PYiH9KB
MsIegcNumxC35LNEN4y355HTJcr2NJ8aV0RHL+m4hLtT+iLrwoRiCkmTJbNEhq9i
jJe8Lo7F2XXXufUYMtR/qIAjxHx2nK48yq7iReNbYuuwQBJD2qLtdF6JiXA0kca7
nZXcRVChlA3FGJqc7L7PO8GGMjJc/Obx5VJCYnSE/UACpbcuWXSqDAo9JX5ycJ8u
A0of8/k/qTT5hcWKrGs8Rs03ZC/exxDtdkAmxgCunF2H+3rxeEJfGM1lJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOsMekgxICKAPy+zugouxAtamT2dMB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvNnd4NlNERWdJb0FfTDdPNkNpN0VDMXFaUFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G
CSqGSIb3DQEBCwUAA4IBAQCuigaBPZcKLoIUfDAkHyAbhBhJ9OOUnaV+Jzj0qKGg
mpveofXGai+Thl20eOZnerC2Txi8nv31ZVQ0p5wUK1AqtwCVQ/k0VgVc2jChb0Ju
Bo0DiV4+BqpRGrnowflMy6Co2NLEDvHgwlenTRAebhndWVJd7E71LE/K9HR0jsTe
R9kHalMJNgRwgcJCpJ3Wi16pth8z3uHJeM3fKAvkiSSIrhHi8k5cIy/AZ3RkLwmr
sOaOfkLU/dsdYBV5SrgeLp4Qo1i+IekVyXlbHbDgexr2fWjgp/lt+Mco25cg23Dq
h6zwh+Gw1WcLO85hj0XXgywBCH7OXnx898eDTYEJYpWb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:56 2024 by rpki-client on console-ams.rpki-client.org