Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/w_rrrFwc_ug0RIzWhpmu64wWBEA.roa
File:                     w_rrrFwc_ug0RIzWhpmu64wWBEA.roa (raw, json)
Hash identifier:          EfFmwBSCSuiUjFVlq37yVLgGVdElQ/yUH9RCbViJqgM=
Subject key identifier:   C3:FA:EB:AC:5C:1C:FE:E8:34:44:8C:D6:86:99:AE:EB:8C:16:04:40
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       01857321CAE2566A52145010FF3FCFBDC373
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/w_rrrFwc_ug0RIzWhpmu64wWBEA.roa
Signing time:             Mon 02 Jan 2023 15:37:52 +0000
ROA not before:           Mon 02 Jan 2023 15:37:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209768
IP address blocks:        176.105.246.0/24 maxlen: 24
                          2a12:5844:1212::/48 maxlen: 48
                          2a12:5840:1f2::/48 maxlen: 48
                          2a12:5844:100::/48 maxlen: 48
                          2a12:5840:1f0::/48 maxlen: 48
                          2a12:5840:2113::/48 maxlen: 48
                          2a12:5844:1141::/48 maxlen: 48
                          2a12:5840:2111::/48 maxlen: 48
                          2a12:5840:1f1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:21:ca:e2:56:6a:52:14:50:10:ff:3f:cf:bd:c3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Jan  2 15:37:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3faebac5c1cfee834448cd68699aeeb8c160440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:89:3c:de:16:64:8f:e0:2d:98:5b:b3:b2:
                    b1:6e:3b:59:fe:ed:65:be:3a:da:9b:c7:74:10:02:
                    69:d1:fa:c2:f2:79:21:f5:97:88:8a:d6:06:9e:e6:
                    47:5e:96:5d:d4:8d:31:45:d6:1d:2a:b1:ff:eb:58:
                    59:78:f1:35:01:3e:0d:fd:20:81:b2:b3:50:b1:64:
                    96:e9:83:60:c6:d1:58:ee:ce:c4:a0:46:e4:36:23:
                    c2:9b:46:4d:72:7c:96:a7:a2:c0:cc:72:6e:22:20:
                    32:81:1a:f7:cf:01:26:37:40:fe:a5:6a:3d:c7:e9:
                    50:dd:a2:99:f6:10:2b:84:80:70:a4:92:47:16:c8:
                    02:fc:c8:18:cb:9c:aa:cc:06:f7:43:b6:04:ad:37:
                    10:97:64:6f:77:9d:6a:c9:b4:fc:03:5b:e0:3d:6d:
                    77:e7:99:90:31:57:2d:42:e9:17:14:59:e1:78:42:
                    db:79:9c:a2:8d:0e:b0:19:c5:d9:54:ed:cd:f9:85:
                    39:22:ca:f5:4c:c3:b7:56:f4:b4:c5:07:7b:8f:43:
                    8f:7a:f0:32:ef:7e:b3:41:6d:05:4e:54:9f:5a:0e:
                    fe:95:59:97:96:75:47:52:7f:6e:a9:d9:07:83:0d:
                    8b:69:b7:b8:2b:db:3f:4e:9b:b5:e1:0f:ba:3e:ef:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FA:EB:AC:5C:1C:FE:E8:34:44:8C:D6:86:99:AE:EB:8C:16:04:40
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/w_rrrFwc_ug0RIzWhpmu64wWBEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.246.0/24
                IPv6:
                  2a12:5840:1f0::-2a12:5840:1f2:ffff:ffff:ffff:ffff:ffff
                  2a12:5840:2111::/48
                  2a12:5840:2113::/48
                  2a12:5844:100::/48
                  2a12:5844:1141::/48
                  2a12:5844:1212::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:73:a2:7d:92:a8:0c:37:47:16:34:3d:cc:4e:91:65:26:79:
         e9:34:e4:eb:5a:68:9e:96:91:39:4f:a3:dc:18:42:a9:b0:63:
         f5:9f:2a:a7:8e:64:30:36:00:25:25:f4:8e:4b:ff:e1:b8:0d:
         07:dd:fb:2a:24:70:fa:30:6c:0b:07:07:bf:3a:96:e5:a2:fa:
         cf:aa:10:df:19:22:b8:af:91:99:02:c7:85:ea:14:7b:c8:2f:
         16:9d:69:71:e9:b2:f1:a1:82:7e:41:74:d5:6b:95:bc:fb:71:
         8d:f2:24:5a:19:63:2a:6d:c1:c4:79:d5:4e:7a:d2:86:b1:70:
         d7:03:6d:ee:3a:11:05:dd:c6:5d:cc:e8:c5:bd:f5:53:91:47:
         e7:80:16:a7:a7:58:3a:5c:d5:5e:d3:a0:da:fa:d4:a5:07:92:
         4e:c2:5b:37:55:92:28:28:b2:92:57:39:38:b7:7b:3e:55:32:
         aa:f1:75:54:3d:d9:fd:5c:a8:36:32:b7:04:49:d5:2a:11:82:
         cd:f3:50:bb:18:0a:87:df:35:f1:6c:1b:8e:65:90:b1:f7:d8:
         e1:de:cd:72:18:76:88:cd:c8:8b:6e:af:87:7e:bd:c0:8f:d9:
         d1:2d:df:ce:ba:5c:0d:b3:f3:fd:32:7f:0a:84:12:20:93:ab:
         bb:2f:12:7e
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAYVzIcriVmpSFFAQ/z/PvcNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjMwMTAyMTUzNzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZhZWJhYzVjMWNmZWU4MzQ0NDhjZDY4Njk5YWVlYjhjMTYwNDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFiJPN4WZI/gLZhbs7KxbjtZ/u1l
vjram8d0EAJp0frC8nkh9ZeIitYGnuZHXpZd1I0xRdYdKrH/61hZePE1AT4N/SCB
srNQsWSW6YNgxtFY7s7EoEbkNiPCm0ZNcnyWp6LAzHJuIiAygRr3zwEmN0D+pWo9
x+lQ3aKZ9hArhIBwpJJHFsgC/MgYy5yqzAb3Q7YErTcQl2Rvd51qybT8A1vgPW13
55mQMVctQukXFFnheELbeZyijQ6wGcXZVO3N+YU5Isr1TMO3VvS0xQd7j0OPevAy
736zQW0FTlSfWg7+lVmXlnVHUn9uqdkHgw2Labe4K9s/Tpu14Q+6Pu/i8wIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFMP666xcHP7oNESM1oaZruuMFgRAMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvd19ycnJGd2NfdWcwUkl6V2hwbXU2NHdXQkVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAMBAIAATAGAwQAsGn2MEcE
AgACMEEwEgMHBCoSWEAB8AMHACoSWEAB8gMHACoSWEAhEQMHACoSWEAhEwMHACoS
WEQBAAMHACoSWEQRQQMHACoSWEQSEjANBgkqhkiG9w0BAQsFAAOCAQEANXOifZKo
DDdHFjQ9zE6RZSZ56TTk61ponpaROU+j3BhCqbBj9Z8qp45kMDYAJSX0jkv/4bgN
B937KiRw+jBsCwcHvzqW5aL6z6oQ3xkiuK+RmQLHheoUe8gvFp1pcemy8aGCfkF0
1WuVvPtxjfIkWhljKm3BxHnVTnrShrFw1wNt7joRBd3GXczoxb31U5FH54AWp6dY
OlzVXtOg2vrUpQeSTsJbN1WSKCiyklc5OLd7PlUyqvF1VD3Z/VyoNjK3BEnVKhGC
zfNQuxgKh9818WwbjmWQsffY4d7Nchh2iM3Ii26vh369wI/Z0S3fzrpcDbPz/TJ/
CoQSIJOruy8Sfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org