Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AFN6zun1TEmAA4ENV0G2klshZYo.roa
File:                     AFN6zun1TEmAA4ENV0G2klshZYo.roa (raw, json)
Hash identifier:          KcfeAfjjpvQHjTgejQrro4ZWNzZZVyKq0UdzJ8FoMHs=
Subject key identifier:   00:53:7A:CE:E9:F5:4C:49:80:03:81:0D:57:41:B6:92:5B:21:65:8A
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B83F6B9912BE44DBAA2EFB2713D55
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AFN6zun1TEmAA4ENV0G2klshZYo.roa
Signing time:             Sun 01 Jan 2023 21:44:58 +0000
ROA not before:           Sun 01 Jan 2023 21:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205361
IP address blocks:        176.57.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:83:f6:b9:91:2b:e4:4d:ba:a2:ef:b2:71:3d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00537acee9f54c498003810d5741b6925b21658a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:97:d6:1d:e2:83:d6:90:df:25:c4:b9:2f:
                    84:52:81:4d:57:37:8c:79:40:4c:25:a6:f7:6a:d0:
                    7f:bf:f7:d2:36:05:37:66:65:69:7b:79:43:cc:78:
                    87:7e:3a:b1:f0:4b:50:9b:30:24:50:d6:ae:4d:5b:
                    47:09:a6:81:0e:53:e5:20:07:88:bf:a4:2c:ea:e3:
                    40:db:cb:21:b0:8a:65:66:72:35:4a:83:be:42:4a:
                    de:01:55:2e:49:d0:ab:c9:54:c0:c9:87:c4:23:56:
                    e3:ac:c1:1d:53:fb:4c:5c:8c:e2:08:b2:0c:30:60:
                    01:56:58:18:cb:e7:06:21:ac:35:64:39:cd:d7:ac:
                    c0:aa:5d:82:95:89:75:0f:f7:7e:fa:ff:d0:5f:32:
                    0e:52:fa:bd:b3:3f:3c:81:07:d4:fe:8e:0c:c5:b7:
                    a2:dc:47:a1:e2:3b:12:4d:68:74:7b:f4:6b:aa:b5:
                    de:49:fe:b8:9e:90:dd:f3:6d:37:11:d2:78:45:17:
                    48:4d:1e:20:1d:3e:58:94:94:64:ad:ca:b8:32:9f:
                    c4:37:72:72:2f:8c:cb:d5:d1:49:02:c1:c0:82:49:
                    94:66:ec:3b:ff:47:31:9b:b2:21:61:e3:84:53:a7:
                    2d:b0:5b:09:3e:35:f0:2b:2d:2e:07:d3:8a:63:51:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:7A:CE:E9:F5:4C:49:80:03:81:0D:57:41:B6:92:5B:21:65:8A
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/AFN6zun1TEmAA4ENV0G2klshZYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:29:0a:e6:5e:35:5e:e1:22:02:c5:03:aa:5a:04:70:bf:
         88:b6:f4:35:18:b8:46:62:3d:6e:5a:1c:f0:6f:37:e2:ce:48:
         79:3e:1a:00:36:57:08:6b:13:32:4c:12:4b:f7:ba:6e:82:ad:
         d6:3f:38:2a:a1:af:da:96:3f:9b:57:84:c8:90:f2:68:14:45:
         e9:6f:47:b5:29:5d:04:4d:16:ce:a8:40:37:68:42:1a:56:06:
         4f:00:6c:90:d1:20:f0:c5:e6:ae:9d:3d:34:dd:ee:97:c8:a2:
         dd:d4:6a:9b:df:fb:f8:13:5f:14:84:61:95:76:40:6c:ef:ad:
         e3:7f:10:04:4c:65:38:cd:a0:fd:ac:58:24:2b:fe:ce:d1:8b:
         71:99:c9:4d:07:94:04:9c:de:fa:d1:71:ad:88:84:b0:f5:54:
         5a:83:13:9c:d6:19:08:fc:ac:c0:97:72:c9:c0:2f:e3:59:9b:
         11:ff:8b:d9:45:7c:23:af:26:8e:b9:64:e2:b2:08:c4:2f:31:
         60:6d:f8:3f:02:4f:4b:a2:02:09:60:29:26:a5:19:39:c9:80:
         6a:17:ec:57:31:9e:1c:78:f3:59:90:a9:7a:ef:4c:f7:0a:0c:
         89:79:0b:af:5f:2d:8d:b0:dc:42:f2:11:fb:80:1d:0c:f8:59:
         d1:85:6c:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS4P2uZEr5E26ou+ycT1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTAxMjE0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDUzN2FjZWU5ZjU0YzQ5ODAwMzgxMGQ1NzQxYjY5MjViMjE2NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPuX1h3ig9aQ3yXEuS+EUoFNVzeM
eUBMJab3atB/v/fSNgU3ZmVpe3lDzHiHfjqx8EtQmzAkUNauTVtHCaaBDlPlIAeI
v6Qs6uNA28shsIplZnI1SoO+QkreAVUuSdCryVTAyYfEI1bjrMEdU/tMXIziCLIM
MGABVlgYy+cGIaw1ZDnN16zAql2ClYl1D/d++v/QXzIOUvq9sz88gQfU/o4Mxbei
3Eeh4jsSTWh0e/RrqrXeSf64npDd8203EdJ4RRdITR4gHT5YlJRkrcq4Mp/EN3Jy
L4zL1dFJAsHAgkmUZuw7/0cxm7IhYeOEU6ctsFsJPjXwKy0uB9OKY1F8hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABTes7p9UxJgAOBDVdBtpJbIWWKMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvQUZONnp1bjFURW1BQTRFTlYwRzJrbHNoWllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDkyMA0G
CSqGSIb3DQEBCwUAA4IBAQCxnCkK5l41XuEiAsUDqloEcL+ItvQ1GLhGYj1uWhzw
bzfizkh5PhoANlcIaxMyTBJL97pugq3WPzgqoa/alj+bV4TIkPJoFEXpb0e1KV0E
TRbOqEA3aEIaVgZPAGyQ0SDwxeaunT003e6XyKLd1Gqb3/v4E18UhGGVdkBs763j
fxAETGU4zaD9rFgkK/7O0YtxmclNB5QEnN760XGtiISw9VRagxOc1hkI/KzAl3LJ
wC/jWZsR/4vZRXwjryaOuWTisgjELzFgbfg/Ak9LogIJYCkmpRk5yYBqF+xXMZ4c
ePNZkKl670z3CgyJeQuvXy2NsNxC8hH7gB0M+FnRhWxg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org