Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/76DW3it-4A6ez53X-MC6aIF4lM4.roa
File:                     76DW3it-4A6ez53X-MC6aIF4lM4.roa (raw, json)
Hash identifier:          y8Go2JUVaMw50go0/nWTSIucD+llg2cI/8qDlJ4mgeU=
Subject key identifier:   EF:A0:D6:DE:2B:7E:E0:0E:9E:CF:9D:D7:F8:C0:BA:68:81:78:94:CE
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018571D7E3EEBC3B2F51766047E15E316362
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/76DW3it-4A6ez53X-MC6aIF4lM4.roa
Signing time:             Mon 02 Jan 2023 09:37:32 +0000
ROA not before:           Mon 02 Jan 2023 09:37:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212384
IP address blocks:        178.253.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:e3:ee:bc:3b:2f:51:76:60:47:e1:5e:31:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  2 09:37:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efa0d6de2b7ee00e9ecf9dd7f8c0ba68817894ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:f1:8a:53:76:2c:83:da:4a:71:04:14:67:
                    7f:5c:6a:95:0a:ae:cf:b2:06:0b:2f:b0:36:04:dd:
                    6c:da:ea:32:70:79:e3:95:1c:b3:b4:e2:fe:f4:5f:
                    76:c5:c0:6e:ea:a4:0b:14:5f:04:a9:a3:19:86:12:
                    90:f2:8c:10:68:7f:84:fa:bb:ae:4d:1b:94:5f:4c:
                    31:3d:ce:d2:3a:86:2d:3f:bc:4a:c6:fd:19:aa:8a:
                    c6:cc:ee:f8:1d:d2:49:92:f2:f8:18:ba:50:6a:1c:
                    58:d4:9a:7d:b2:2c:a0:74:62:cd:cb:0c:cb:b0:60:
                    5a:d7:76:b0:64:cc:a9:6e:a9:1c:94:ab:69:a5:02:
                    9c:ca:cf:3f:e6:fe:0e:74:e6:0a:3b:b5:3b:a0:48:
                    bc:ce:b6:05:b4:41:5f:55:4a:b3:1d:74:8c:ab:7b:
                    58:83:a8:21:58:83:be:3b:14:c9:52:30:e0:c9:db:
                    5a:08:2e:d5:f7:e0:54:ac:87:48:e7:41:41:11:ab:
                    34:1c:05:11:38:f8:f8:15:bf:63:75:ed:ae:b9:9b:
                    4a:db:d3:ce:0e:bc:03:67:fb:8f:73:81:ea:b1:57:
                    f0:66:10:d2:36:ab:8d:9a:e4:cc:a9:d5:27:3a:63:
                    6f:52:bd:81:94:80:6f:f4:dd:b5:d4:6d:10:78:c1:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A0:D6:DE:2B:7E:E0:0E:9E:CF:9D:D7:F8:C0:BA:68:81:78:94:CE
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/76DW3it-4A6ez53X-MC6aIF4lM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:73:d9:22:4d:95:da:35:90:e1:eb:22:69:95:05:1d:a2:
         1d:e0:7e:e2:a2:9d:c2:30:8a:04:d2:b9:a0:92:e8:a7:ee:e7:
         bb:ba:fd:37:c9:d0:5d:9e:7e:1c:1e:e1:90:be:0c:93:ac:bc:
         67:b7:56:5e:a4:c6:09:ca:23:dc:8d:b1:61:37:b4:e2:5b:17:
         f7:98:6c:b4:82:96:96:e6:80:b9:22:c0:67:ad:71:f2:02:a9:
         dc:40:92:d7:95:4f:40:af:b4:13:e0:14:a5:09:26:81:8d:1e:
         5b:98:a2:67:98:d1:5c:e1:65:be:c5:85:6b:60:1f:a9:ef:31:
         eb:ab:ff:d8:93:1b:e1:27:fa:0d:7d:b4:c1:22:3c:c5:e4:97:
         e7:98:5f:fa:31:f4:f4:48:a7:f6:9f:9f:2c:e2:d2:ee:74:e1:
         71:a5:dd:bb:c3:e5:d5:01:8c:b3:94:89:3e:9d:cd:f7:d7:26:
         c0:8c:74:0f:3d:36:a5:4a:90:4c:38:df:68:02:97:81:d4:64:
         47:75:31:73:4d:4e:fb:64:db:f8:d7:c1:ff:37:6b:a1:1d:a4:
         4a:cb:59:5e:a6:2c:83:dd:27:50:91:4e:34:1f:6a:8e:22:89:
         2a:92:c6:b1:d6:c1:7c:5e:cb:0b:37:68:43:bd:44:b6:2e:8b:
         7f:af:ed:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx1+PuvDsvUXZgR+FeMWNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmEwZDZkZTJiN2VlMDBlOWVjZjlkZDdmOGMwYmE2ODgxNzg5NGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpnxilN2LIPaSnEEFGd/XGqVCq7P
sgYLL7A2BN1s2uoycHnjlRyztOL+9F92xcBu6qQLFF8EqaMZhhKQ8owQaH+E+ruu
TRuUX0wxPc7SOoYtP7xKxv0ZqorGzO74HdJJkvL4GLpQahxY1Jp9siygdGLNywzL
sGBa13awZMypbqkclKtppQKcys8/5v4OdOYKO7U7oEi8zrYFtEFfVUqzHXSMq3tY
g6ghWIO+OxTJUjDgydtaCC7V9+BUrIdI50FBEas0HAUROPj4Fb9jde2uuZtK29PO
DrwDZ/uPc4HqsVfwZhDSNquNmuTMqdUnOmNvUr2BlIBv9N211G0QeMHW0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+g1t4rfuAOns+d1/jAumiBeJTOMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNzZEVzNpdC00QTZlejUzWC1NQzZhSUY0bE00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3XMA0G
CSqGSIb3DQEBCwUAA4IBAQCbbnPZIk2V2jWQ4esiaZUFHaId4H7iop3CMIoE0rmg
kuin7ue7uv03ydBdnn4cHuGQvgyTrLxnt1ZepMYJyiPcjbFhN7TiWxf3mGy0gpaW
5oC5IsBnrXHyAqncQJLXlU9Ar7QT4BSlCSaBjR5bmKJnmNFc4WW+xYVrYB+p7zHr
q//YkxvhJ/oNfbTBIjzF5JfnmF/6MfT0SKf2n58s4tLudOFxpd27w+XVAYyzlIk+
nc331ybAjHQPPTalSpBMON9oApeB1GRHdTFzTU77ZNv418H/N2uhHaRKy1lepiyD
3SdQkU40H2qOIokqksax1sF8XssLN2hDvUS2Lot/r+2+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org