Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/6gWuHk35TY9C1ZcJVGXD9xpWGS0.roa
File:                     6gWuHk35TY9C1ZcJVGXD9xpWGS0.roa (raw, json)
Hash identifier:          PT+kchQITtlfLfpnIN7mOJVtstYnYedT/yim+mfXyfQ=
Subject key identifier:   EA:05:AE:1E:4D:F9:4D:8F:42:D5:97:09:54:65:C3:F7:1A:56:19:2D
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       01856C6EF7EE5CE6BB728CDD6E90D7B84499
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/6gWuHk35TY9C1ZcJVGXD9xpWGS0.roa
Signing time:             Sun 01 Jan 2023 08:24:49 +0000
ROA not before:           Sun 01 Jan 2023 08:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57389
IP address blocks:        82.150.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6e:f7:ee:5c:e6:bb:72:8c:dd:6e:90:d7:b8:44:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Jan  1 08:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea05ae1e4df94d8f42d597095465c3f71a56192d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:b1:05:41:74:50:8f:ec:35:ba:bc:f1:79:
                    1a:95:6f:f5:b5:0b:67:1e:35:fa:8c:cd:15:a6:7f:
                    76:d6:66:b9:fe:dc:73:c7:3a:12:63:7b:72:e8:3e:
                    62:ab:b2:89:ff:77:36:54:99:dc:3e:02:6c:0b:b4:
                    ed:a1:89:6a:7c:2e:59:c5:7d:f0:2c:91:c5:f4:40:
                    24:a2:5b:9d:23:9e:6c:74:91:71:36:ad:fe:e6:60:
                    67:bb:c2:f8:f5:96:95:ef:3a:e7:08:8d:10:dc:91:
                    be:a9:ea:99:ae:bf:df:58:b2:8e:21:0f:4d:7e:e6:
                    cc:50:e5:5d:bf:d4:81:15:e9:06:38:64:51:6b:fc:
                    3a:29:d4:d6:95:09:a8:dc:86:d2:c7:57:80:58:25:
                    e3:54:c5:02:1a:c4:55:e2:27:3f:51:39:70:45:bf:
                    df:86:e8:63:0a:34:f5:85:bd:79:40:b2:e8:a0:b0:
                    79:55:31:07:43:af:24:b4:54:64:bd:ae:30:eb:db:
                    9e:2f:4f:69:dc:ef:aa:4a:f4:9b:d6:5f:73:12:80:
                    48:ef:df:5c:e8:8e:aa:f4:be:5d:4b:e7:26:8c:7c:
                    ca:ad:79:a1:31:17:59:a8:66:28:81:80:13:f6:e2:
                    16:d1:18:be:f1:5e:1b:20:4f:f9:a3:c0:7c:87:b3:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:AE:1E:4D:F9:4D:8F:42:D5:97:09:54:65:C3:F7:1A:56:19:2D
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/6gWuHk35TY9C1ZcJVGXD9xpWGS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.150.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:17:0d:11:41:81:c9:0d:bd:7d:1f:ee:69:12:82:4d:78:
         b5:f8:69:b2:39:d8:10:74:6c:0e:cb:fb:ac:17:61:43:2b:e1:
         53:a6:d8:e7:34:4e:57:58:1b:23:5d:0b:34:a9:00:fa:4f:d5:
         37:0d:de:fa:46:e6:0c:ff:79:9a:a9:37:6b:56:ad:10:d4:34:
         4c:b4:d0:dc:b9:e8:77:a7:8a:05:3d:d9:97:c6:62:8d:ff:2c:
         c7:42:65:21:e5:de:71:f5:25:83:07:85:e0:4d:44:8f:ab:0c:
         57:39:47:c7:12:b4:e3:c9:a5:88:82:73:1d:b1:20:f0:f1:b9:
         a4:30:d2:5f:b0:9b:59:ab:58:ce:a6:1c:5d:6d:05:e0:26:34:
         98:de:3e:ad:9f:38:93:b2:d5:a8:f3:7b:7f:d7:6a:04:3a:61:
         79:01:84:53:34:16:f4:10:05:e4:48:bb:f9:6a:e1:e4:90:06:
         e4:b2:0d:98:22:c9:0a:52:25:fb:5b:85:77:2e:ef:79:8c:bc:
         cc:72:db:5a:14:b4:e1:1e:9d:20:cd:f9:e5:af:23:f8:d6:75:
         b2:1c:50:56:5d:63:4a:e6:ed:e6:41:2a:f2:a1:25:dc:88:14:
         72:b8:d3:f7:3c:92:a0:22:16:d6:af:79:08:f9:84:98:e1:07:
         77:8f:6e:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbvfuXOa7cozdbpDXuESZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm
OWUyMzMwHhcNMjMwMTAxMDgyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTA1YWUxZTRkZjk0ZDhmNDJkNTk3MDk1NDY1YzNmNzFhNTYxOTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJaxBUF0UI/sNbq88XkalW/1tQtn
HjX6jM0Vpn921ma5/txzxzoSY3ty6D5iq7KJ/3c2VJncPgJsC7TtoYlqfC5ZxX3w
LJHF9EAkoludI55sdJFxNq3+5mBnu8L49ZaV7zrnCI0Q3JG+qeqZrr/fWLKOIQ9N
fubMUOVdv9SBFekGOGRRa/w6KdTWlQmo3IbSx1eAWCXjVMUCGsRV4ic/UTlwRb/f
huhjCjT1hb15QLLooLB5VTEHQ68ktFRkva4w69ueL09p3O+qSvSb1l9zEoBI799c
6I6q9L5dS+cmjHzKrXmhMRdZqGYogYAT9uIW0Ri+8V4bIE/5o8B8h7MZKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOoFrh5N+U2PQtWXCVRlw/caVhktMB8GA1UdIwQY
MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt
MGFjYzg5MmIxMWQyLzEvNmdXdUhrMzVUWTlDMVpjSlZHWEQ5eHBXR1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy
LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpY+MA0G
CSqGSIb3DQEBCwUAA4IBAQAQmxcNEUGByQ29fR/uaRKCTXi1+GmyOdgQdGwOy/us
F2FDK+FTptjnNE5XWBsjXQs0qQD6T9U3Dd76RuYM/3maqTdrVq0Q1DRMtNDcueh3
p4oFPdmXxmKN/yzHQmUh5d5x9SWDB4XgTUSPqwxXOUfHErTjyaWIgnMdsSDw8bmk
MNJfsJtZq1jOphxdbQXgJjSY3j6tnziTstWo83t/12oEOmF5AYRTNBb0EAXkSLv5
auHkkAbksg2YIskKUiX7W4V3Lu95jLzMcttaFLThHp0gzfnlryP41nWyHFBWXWNK
5u3mQSryoSXciBRyuNP3PJKgIhbWr3kI+YSY4Qd3j25q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:36 2024 by rpki-client on console-ams.rpki-client.org