Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6qx4F_hWYIJkuUl65jSGOR32E4U.roa
File:                     6qx4F_hWYIJkuUl65jSGOR32E4U.roa (raw, json)
Hash identifier:          I/vnXyTyuUTV2L76VDvn/9/Q+PdrHIMRoQi8CMNoIp4=
Subject key identifier:   EA:AC:78:17:F8:56:60:82:64:B9:49:7A:E6:34:86:39:1D:F6:13:85
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       01856C8A63F9F8EF13FBA3CB476157BCF854
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6qx4F_hWYIJkuUl65jSGOR32E4U.roa
Signing time:             Sun 01 Jan 2023 08:54:46 +0000
ROA not before:           Sun 01 Jan 2023 08:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400040
IP address blocks:        87.248.136.0/24 maxlen: 24
                          87.248.135.0/24 maxlen: 24
                          87.248.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:8a:63:f9:f8:ef:13:fb:a3:cb:47:61:57:bc:f8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Jan  1 08:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaac7817f856608264b9497ae63486391df61385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:d4:f1:c0:d1:02:95:61:43:c3:27:bb:00:
                    02:9f:c7:1c:7e:29:8b:d8:a3:72:66:6c:15:96:e5:
                    8c:df:00:17:ec:d3:db:e7:d2:02:11:04:99:68:87:
                    13:2c:fc:9f:37:ed:50:28:83:8d:e1:02:0a:07:f8:
                    1b:fc:d9:ee:a7:97:27:19:18:e8:68:c0:48:8c:7b:
                    57:95:19:cd:b1:fa:a4:6e:e5:9a:ec:da:1d:b4:2d:
                    37:38:bb:24:9c:c6:05:69:e7:ea:16:d2:2b:e2:01:
                    9e:5d:68:c2:b6:a7:57:fb:27:80:96:45:e4:33:2d:
                    d5:7c:63:6e:62:09:38:4f:32:7e:9c:6f:f1:d2:cb:
                    b4:b9:b5:1b:d9:96:6a:53:dc:a4:a6:a3:64:1c:68:
                    74:1e:63:40:47:4c:b2:ce:65:b0:39:85:b0:87:2c:
                    64:82:2e:ff:9e:07:58:b1:84:f6:dd:75:ad:5d:5b:
                    c6:08:02:cf:ca:1b:e3:1f:08:38:4c:7b:5f:21:0a:
                    a2:ee:8c:d2:0b:ae:1b:6e:b7:82:89:33:15:59:16:
                    bb:5c:05:f6:9a:da:c4:de:a2:71:af:be:56:e1:7e:
                    33:be:1c:86:3f:90:ae:c4:34:c2:fb:dd:fe:d7:f5:
                    05:43:c9:e0:5c:8c:30:8c:95:be:6b:21:93:69:68:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:78:17:F8:56:60:82:64:B9:49:7A:E6:34:86:39:1D:F6:13:85
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/6qx4F_hWYIJkuUl65jSGOR32E4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.135.0-87.248.136.255
                  87.248.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c1:08:4e:9c:f7:77:1c:f3:32:2d:6d:6d:cb:81:82:1d:fc:
         f4:19:61:95:63:db:11:ca:69:e1:cb:17:56:09:f5:8a:09:86:
         3f:27:99:cc:f7:eb:42:cd:f7:69:8c:0c:e7:24:71:1d:0b:ae:
         aa:df:ec:7a:e9:51:35:05:fa:89:93:c5:1e:80:bf:97:e7:37:
         8c:2d:13:c0:3a:3e:c8:6f:2a:c1:12:12:e5:aa:42:ca:ce:3b:
         b8:f9:f0:0b:3b:80:56:9d:02:25:bb:2a:fb:d3:b3:27:96:8d:
         4c:e6:c2:cd:87:92:2c:92:af:a8:87:82:ce:05:7c:a2:ba:c9:
         c1:22:e3:4b:d1:f0:50:b7:3d:1b:47:6d:52:9a:95:49:02:1f:
         66:93:4f:fc:2d:9b:05:1d:28:89:15:86:af:ae:c4:45:cb:6f:
         02:67:7a:e1:7b:4f:31:85:af:51:ca:b9:7d:27:82:da:50:63:
         e0:6c:5f:9a:dd:0d:9b:b7:e3:43:e9:0c:68:6e:c5:1a:9a:fd:
         93:0b:8c:45:9f:67:bc:59:b4:b1:f0:07:4d:96:a1:51:85:2e:
         22:d1:1b:29:f1:95:38:1d:cf:6d:13:ce:49:11:e7:d9:73:37:
         5d:e1:2b:ca:41:42:fe:1e:34:0d:82:7c:f3:b1:d8:65:c2:52:
         2f:98:67:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVsimP5+O8T+6PLR2FXvPhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTAxMDg1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFjNzgxN2Y4NTY2MDgyNjRiOTQ5N2FlNjM0ODYzOTFkZjYxMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxTU8cDRApVhQ8MnuwACn8ccfimL
2KNyZmwVluWM3wAX7NPb59ICEQSZaIcTLPyfN+1QKION4QIKB/gb/Nnup5cnGRjo
aMBIjHtXlRnNsfqkbuWa7NodtC03OLsknMYFaefqFtIr4gGeXWjCtqdX+yeAlkXk
My3VfGNuYgk4TzJ+nG/x0su0ubUb2ZZqU9ykpqNkHGh0HmNAR0yyzmWwOYWwhyxk
gi7/ngdYsYT23XWtXVvGCALPyhvjHwg4THtfIQqi7ozSC64bbreCiTMVWRa7XAX2
mtrE3qJxr75W4X4zvhyGP5CuxDTC+93+1/UFQ8ngXIwwjJW+ayGTaWhNDQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOqseBf4VmCCZLlJeuY0hjkd9hOFMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNnF4NEZfaFdZSUprdVVsNjVqU0dPUjMyRTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABX+IcD
BABX+IgDBABX+JAwDQYJKoZIhvcNAQELBQADggEBALPBCE6c93cc8zItbW3LgYId
/PQZYZVj2xHKaeHLF1YJ9YoJhj8nmcz360LN92mMDOckcR0Lrqrf7HrpUTUF+omT
xR6Av5fnN4wtE8A6PshvKsESEuWqQsrOO7j58As7gFadAiW7KvvTsyeWjUzmws2H
kiySr6iHgs4FfKK6ycEi40vR8FC3PRtHbVKalUkCH2aTT/wtmwUdKIkVhq+uxEXL
bwJneuF7TzGFr1HKuX0ngtpQY+BsX5rdDZu340PpDGhuxRqa/ZMLjEWfZ7xZtLHw
B02WoVGFLiLRGynxlTgdz20TzkkR59lzN13hK8pBQv4eNA2CfPOx2GXCUi+YZ9A=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:04 2024 by rpki-client on console-ams.rpki-client.org