Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa
File:                     R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa (raw, json)
Hash identifier:          oDduDtKF1vILG0v7JBNUSSMD2qpmZ8nVBp0Jr3b5hcY=
Subject key identifier:   47:44:A3:33:64:68:AA:98:32:25:D6:54:74:10:8D:F8:94:6C:8C:0B
Certificate issuer:       /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial:       01856ED50544DF89D1663978D057E98178F4
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa
Signing time:             Sun 01 Jan 2023 19:35:32 +0000
ROA not before:           Sun 01 Jan 2023 19:35:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210070
IP address blocks:        2a0f:f7c0::/32 maxlen: 32
                          2a0f:f7c1::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d5:05:44:df:89:d1:66:39:78:d0:57:e9:81:78:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
        Validity
            Not Before: Jan  1 19:35:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4744a3336468aa983225d65474108df8946c8c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:3c:a7:5e:6a:a4:d2:be:df:61:48:0c:d2:
                    23:88:5b:1d:a1:2a:03:77:17:c9:34:f8:28:a4:bb:
                    f2:a5:d6:e9:34:8f:6f:55:0b:cd:cb:f1:2f:12:86:
                    a1:33:9a:85:43:a2:d2:48:f6:e3:72:62:80:4b:fb:
                    2e:0c:ea:ac:46:62:8f:bd:c3:15:eb:ae:80:19:e4:
                    35:ca:33:85:79:ef:43:bf:86:e8:c8:fb:ab:9b:ff:
                    38:23:51:43:63:61:be:47:6f:ef:82:cb:3a:01:9c:
                    9c:ff:47:65:08:78:33:d6:05:5f:f1:22:5c:ef:44:
                    8b:36:b6:ce:ce:12:bf:71:83:8c:cf:13:39:7b:d4:
                    a0:95:c7:d3:20:69:08:72:de:88:6c:6c:0a:7b:08:
                    ec:5e:2b:8c:fd:34:c9:fb:49:05:8b:40:04:34:f6:
                    c7:eb:39:e8:fa:70:22:64:8e:67:58:23:5e:29:b3:
                    94:ba:da:ef:dd:bd:ca:fb:d5:85:46:c7:08:c2:a0:
                    2a:c5:0f:b9:86:a9:48:32:74:d6:dc:01:f6:73:7f:
                    95:7a:4a:a2:3d:04:e0:4f:58:cd:a9:a9:7b:44:50:
                    74:67:88:07:ea:59:a6:a3:18:4f:ea:1f:54:68:ac:
                    d2:7b:f4:cd:b9:c8:81:fe:2d:a8:52:fe:11:ed:89:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:A3:33:64:68:AA:98:32:25:D6:54:74:10:8D:F8:94:6C:8C:0B
            X509v3 Authority Key Identifier:
                keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/R0SjM2RoqpgyJdZUdBCN-JRsjAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:f7c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:06:94:22:d0:f4:26:02:1e:eb:e7:6e:27:82:66:93:05:
         52:17:b4:06:15:c1:ea:fa:59:e8:5d:51:c5:8f:cb:e3:90:59:
         e4:db:57:e4:23:e8:9e:5b:0f:6b:38:7a:58:76:d9:3c:47:9e:
         c8:22:ac:a4:4a:41:ea:91:a1:97:24:f7:da:17:6e:31:f7:bc:
         69:90:2b:39:d5:d1:43:80:77:8d:0c:d6:b5:ef:ea:b2:77:f9:
         bf:25:c9:bb:80:90:ea:aa:13:a2:2f:13:9c:cb:a9:dd:20:ed:
         e8:96:8d:ed:47:f2:52:26:b5:08:d6:93:67:0d:3a:70:49:b3:
         fd:7f:66:04:ec:ca:70:69:4e:13:67:ae:39:b1:14:cb:6c:6e:
         ca:57:89:ec:21:35:11:a9:e4:73:4d:dd:54:e0:e3:c6:ad:19:
         89:9c:83:33:89:2d:6c:a8:71:03:5d:f9:87:6e:40:32:49:0d:
         ad:f2:8b:63:bc:c8:1e:de:a3:32:d9:f4:bf:6e:58:ed:9d:df:
         8e:ae:21:57:67:60:e1:66:9d:06:10:c7:78:a4:95:8c:88:88:
         e0:7b:bd:2b:49:7d:15:00:d0:bc:d5:e9:60:1a:13:80:08:5e:
         5f:56:46:e3:5a:e6:04:1d:e1:1c:a2:b9:1f:e3:b3:95:4c:53:
         a8:eb:2b:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVu1QVE34nRZjl40FfpgXj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYjg3YzZjYWY4MWRlMzYyNWZlMWNlMDU1OWYzOWUzMDUw
NWEwNTEwHhcNMjMwMTAxMTkzNTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzQ0YTMzMzY0NjhhYTk4MzIyNWQ2NTQ3NDEwOGRmODk0NmM4YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8w8p15qpNK+32FIDNIjiFsdoSoD
dxfJNPgopLvypdbpNI9vVQvNy/EvEoahM5qFQ6LSSPbjcmKAS/suDOqsRmKPvcMV
666AGeQ1yjOFee9Dv4boyPurm/84I1FDY2G+R2/vgss6AZyc/0dlCHgz1gVf8SJc
70SLNrbOzhK/cYOMzxM5e9SglcfTIGkIct6IbGwKewjsXiuM/TTJ+0kFi0AENPbH
6zno+nAiZI5nWCNeKbOUutrv3b3K+9WFRscIwqAqxQ+5hqlIMnTW3AH2c3+Vekqi
PQTgT1jNqal7RFB0Z4gH6lmmoxhP6h9UaKzSe/TNuciB/i2oUv4R7Yl29wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEdEozNkaKqYMiXWVHQQjfiUbIwLMB8GA1UdIwQY
MBaAFBK4fGyvgd42Jf4c4FWfOeMFBaBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEt
NjI4MDhiYmJkZDIxLzEvUjBTak0yUm9xcGd5SmRaVWRCQ04tSlJzakFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lMjkzNGMtMDUzYS00Yjk3LWFhMmEtNjI4MDhiYmJkZDIx
LzEvRXJoOGJLLUIzallsX2h6Z1ZaODU0d1VGb0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg/3wDAN
BgkqhkiG9w0BAQsFAAOCAQEAPVkGlCLQ9CYCHuvnbieCZpMFUhe0BhXB6vpZ6F1R
xY/L45BZ5NtX5CPonlsPazh6WHbZPEeeyCKspEpB6pGhlyT32hduMfe8aZArOdXR
Q4B3jQzWte/qsnf5vyXJu4CQ6qoToi8TnMup3SDt6JaN7UfyUia1CNaTZw06cEmz
/X9mBOzKcGlOE2euObEUy2xuyleJ7CE1Eankc03dVODjxq0ZiZyDM4ktbKhxA135
h25AMkkNrfKLY7zIHt6jMtn0v25Y7Z3fjq4hV2dg4WadBhDHeKSVjIiI4Hu9K0l9
FQDQvNXpYBoTgAheX1ZG41rmBB3hHKK5H+OzlUxTqOsraw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:34 2024 by rpki-client on console-fra.rpki-client.org