Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa
File:                     rt3J3x76GBqzAUkeJ3z53AxIw5E.roa (raw, json)
Hash identifier:          ae8Dcu/P9+Q1Nsdus6IAzfkf6MFXXsxvWsHQahk8+xE=
Subject key identifier:   AE:DD:C9:DF:1E:FA:18:1A:B3:01:49:1E:27:7C:F9:DC:0C:48:C3:91
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       0186C548E22582B5D169DE6C65C353B5A669
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa
Signing time:             Thu 09 Mar 2023 07:32:13 +0000
ROA not before:           Thu 09 Mar 2023 07:32:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211860
IP address blocks:        2a0e:8f02:2220::/44 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c5:48:e2:25:82:b5:d1:69:de:6c:65:c3:53:b5:a6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Mar  9 07:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aeddc9df1efa181ab301491e277cf9dc0c48c391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:d9:cd:2e:0c:e8:d2:b9:ab:c0:7e:49:e0:
                    a3:ff:a7:5a:c2:93:98:07:e3:ae:87:99:e4:c1:87:
                    7d:71:e6:d4:e5:e1:71:5e:71:eb:79:d0:f7:78:ed:
                    bb:d1:3b:72:e2:f1:a6:5c:7e:70:de:90:c8:56:58:
                    05:47:f6:19:26:98:a9:29:f4:63:fb:17:22:d2:d0:
                    8c:b2:9f:d4:94:12:d7:3b:79:25:bc:2a:76:6e:74:
                    48:17:c6:0c:7a:8a:c4:c4:2a:bf:bf:5b:4c:73:30:
                    32:34:28:74:51:71:ab:fe:d6:52:42:c2:9e:5d:13:
                    ff:46:2e:c4:98:43:8d:0c:23:94:f7:a6:cc:fe:1f:
                    ec:3f:cc:2e:56:a5:d5:ed:d0:da:63:a0:4a:97:9c:
                    91:f1:a8:3d:eb:c7:a8:94:91:22:da:9c:f7:bc:9a:
                    9e:1a:49:ed:94:99:d0:e3:1e:07:c1:a4:82:d6:16:
                    40:0f:8a:18:00:95:72:2b:3f:83:9a:fd:35:1b:c7:
                    50:ab:25:80:8a:f9:09:20:53:a9:59:34:25:d8:9a:
                    59:8f:1f:cd:45:62:aa:bb:ad:3c:fa:6c:45:42:f3:
                    46:f4:f0:1c:f8:11:9a:f7:44:36:46:d2:1b:91:32:
                    c1:bd:52:b9:5c:e5:08:c9:c7:f2:71:5b:5f:15:ba:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DD:C9:DF:1E:FA:18:1A:B3:01:49:1E:27:7C:F9:DC:0C:48:C3:91
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/rt3J3x76GBqzAUkeJ3z53AxIw5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:2220::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:1d:cd:f4:d8:5b:79:79:7e:0e:e5:ac:7f:ed:ae:91:85:fb:
         17:41:f8:68:de:43:0a:29:50:b0:1c:79:81:f7:98:40:ca:24:
         99:ba:d0:46:72:2b:44:89:8e:e5:e0:a0:40:f5:c6:77:4d:1e:
         1c:4b:94:8f:70:42:8d:76:be:b2:08:35:69:26:6e:48:03:9a:
         61:7b:16:26:e0:c8:df:34:1a:8f:5c:63:29:d7:2c:34:f0:67:
         91:d3:95:0a:54:3e:0e:ce:6a:da:82:46:8f:a1:8f:38:98:97:
         7f:7c:e5:e4:8b:e1:9d:96:ea:f4:7f:03:ce:36:7b:1c:a6:11:
         00:63:fd:d0:76:6f:f6:8b:96:f1:7f:95:6d:58:d1:ce:bb:8b:
         bc:32:3b:ce:0f:c4:4d:8b:b2:7f:db:21:86:53:5f:65:05:e4:
         4b:c7:19:e4:06:b4:06:9a:79:e3:8a:0b:b8:4c:8a:6c:d9:24:
         c8:e9:f7:54:6b:d1:96:ba:b9:8c:ca:31:66:77:4f:43:56:cf:
         05:bb:a4:4d:79:39:28:a7:9f:d0:57:a6:d1:cd:c3:e1:08:27:
         aa:82:b5:17:b9:b2:5e:f5:36:b5:8a:63:2b:54:73:46:a0:3d:
         1e:58:d8:06:5b:93:6e:d8:bd:52:68:5c:b3:b0:28:cc:f6:1d:
         f6:c8:1d:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYbFSOIlgrXRad5sZcNTtaZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMzA5MDczMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWRkYzlkZjFlZmExODFhYjMwMTQ5MWUyNzdjZjlkYzBjNDhjMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArETZzS4M6NK5q8B+SeCj/6dawpOY
B+Ouh5nkwYd9cebU5eFxXnHredD3eO270Tty4vGmXH5w3pDIVlgFR/YZJpipKfRj
+xci0tCMsp/UlBLXO3klvCp2bnRIF8YMeorExCq/v1tMczAyNCh0UXGr/tZSQsKe
XRP/Ri7EmEONDCOU96bM/h/sP8wuVqXV7dDaY6BKl5yR8ag968eolJEi2pz3vJqe
GkntlJnQ4x4HwaSC1hZAD4oYAJVyKz+Dmv01G8dQqyWAivkJIFOpWTQl2JpZjx/N
RWKqu608+mxFQvNG9PAc+BGa90Q2RtIbkTLBvVK5XOUIycfycVtfFbo+zQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK7dyd8e+hgaswFJHid8+dwMSMORMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvcnQzSjN4NzZHQnF6QVVrZUozejUzQXhJdzVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiIg
MA0GCSqGSIb3DQEBCwUAA4IBAQBiHc302Ft5eX4O5ax/7a6RhfsXQfho3kMKKVCw
HHmB95hAyiSZutBGcitEiY7l4KBA9cZ3TR4cS5SPcEKNdr6yCDVpJm5IA5phexYm
4MjfNBqPXGMp1yw08GeR05UKVD4OzmragkaPoY84mJd/fOXki+Gdlur0fwPONnsc
phEAY/3Qdm/2i5bxf5VtWNHOu4u8MjvOD8RNi7J/2yGGU19lBeRLxxnkBrQGmnnj
igu4TIps2STI6fdUa9GWurmMyjFmd09DVs8Fu6RNeTkop5/QV6bRzcPhCCeqgrUX
ubJe9Ta1imMrVHNGoD0eWNgGW5Nu2L1SaFyzsCjM9h32yB0Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org