Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V8eFb71Nmw_e9LYAXE9cAlkWFnY.roa
File:                     V8eFb71Nmw_e9LYAXE9cAlkWFnY.roa (raw, json)
Hash identifier:          JRZgcwOpzEZEScIhcmvygnbcLnpOTduPmBguTE93Bdk=
Subject key identifier:   57:C7:85:6F:BD:4D:9B:0F:DE:F4:B6:00:5C:4F:5C:02:59:16:16:76
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01860228B09793CCAE82BD8E5E14CD47F49B
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V8eFb71Nmw_e9LYAXE9cAlkWFnY.roa
Signing time:             Mon 30 Jan 2023 10:11:06 +0000
ROA not before:           Mon 30 Jan 2023 10:11:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200181
IP address blocks:        176.57.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:28:b0:97:93:cc:ae:82:bd:8e:5e:14:cd:47:f4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan 30 10:11:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57c7856fbd4d9b0fdef4b6005c4f5c0259161676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:10:27:d8:20:b7:04:89:c2:a4:ce:1f:88:
                    c6:de:a6:6a:c9:da:c9:6d:ed:bf:19:0d:9c:fd:81:
                    1e:42:7a:f7:b6:2d:df:44:6d:b0:6e:cf:8c:5c:99:
                    db:38:ba:6d:39:e2:ab:de:04:06:9f:71:51:29:dc:
                    ac:59:eb:de:d8:2c:05:e6:2e:2c:8d:de:61:e4:4b:
                    7e:62:4e:3d:c9:73:d1:d8:51:de:05:71:97:32:0c:
                    16:4e:45:62:7c:44:82:0f:18:4d:06:ca:a8:d3:4a:
                    57:7e:d0:9a:9a:c6:c9:0e:6f:d4:63:40:ef:96:ef:
                    79:0c:6c:60:9a:4c:a7:31:93:c9:c7:37:b7:90:c0:
                    c5:4b:88:9c:79:ea:95:d3:d9:d1:eb:37:26:2b:01:
                    a5:d7:64:92:e0:a4:cb:f1:e7:6a:f5:95:84:6c:7d:
                    dd:53:2b:89:68:7a:d6:07:90:7a:99:9a:9c:e7:eb:
                    6b:b8:4b:9d:f4:3f:df:e3:1b:2a:d4:e5:64:d7:1b:
                    83:dc:f5:de:24:00:75:a1:8c:2a:cf:04:97:37:10:
                    d7:fa:1e:00:a2:88:4b:32:9b:a7:2a:1d:d3:12:14:
                    ff:d8:34:4e:02:8e:15:0a:00:a0:d6:48:d0:b1:7e:
                    a6:fe:d1:1d:44:9c:9c:9d:9a:48:94:29:8a:41:88:
                    a0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:85:6F:BD:4D:9B:0F:DE:F4:B6:00:5C:4F:5C:02:59:16:16:76
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/V8eFb71Nmw_e9LYAXE9cAlkWFnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:f1:df:7e:7f:3d:e8:e7:ae:33:26:9c:c2:c2:d2:f7:99:
         f2:39:ac:64:c5:65:59:6e:97:51:30:e0:a4:45:29:92:9a:49:
         55:6c:95:4c:a4:cc:fd:1f:67:5c:4e:4d:80:4a:6f:be:3a:93:
         1e:fd:cd:d4:90:d8:2f:78:ac:47:2a:cb:a3:1e:8d:05:07:79:
         6e:b3:58:74:a1:b9:5d:70:03:c0:e2:24:72:d0:82:cb:d5:76:
         1c:cc:18:0d:e9:c4:03:9f:fe:11:44:4c:3d:38:4c:9d:7e:ff:
         38:fb:a6:30:d8:75:9d:70:51:48:8b:93:eb:68:0b:d9:70:a4:
         77:8f:c8:38:7a:49:16:64:16:ac:dd:dc:49:83:bc:58:c7:56:
         10:8b:82:6d:9f:c9:67:d7:ca:d0:b4:1f:41:d9:70:35:aa:3e:
         e3:96:db:bd:49:89:d3:b1:d8:6f:47:47:91:53:14:de:dc:d5:
         f4:e6:0b:6d:1f:0d:a1:bb:e6:0d:b6:16:2d:3a:d8:9b:a6:83:
         bf:6f:13:6c:91:3b:97:bd:9b:03:b4:33:5c:f3:d3:0b:93:ed:
         53:f7:eb:81:73:20:20:74:55:96:ee:39:59:55:f6:5a:26:ee:
         45:fa:09:b9:63:8d:04:2c:22:f9:da:34:25:99:9f:b4:f1:9a:
         b5:5a:5b:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYCKLCXk8yugr2OXhTNR/SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTMwMTAxMTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2M3ODU2ZmJkNGQ5YjBmZGVmNGI2MDA1YzRmNWMwMjU5MTYxNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxEQJ9ggtwSJwqTOH4jG3qZqydrJ
be2/GQ2c/YEeQnr3ti3fRG2wbs+MXJnbOLptOeKr3gQGn3FRKdysWeve2CwF5i4s
jd5h5Et+Yk49yXPR2FHeBXGXMgwWTkVifESCDxhNBsqo00pXftCamsbJDm/UY0Dv
lu95DGxgmkynMZPJxze3kMDFS4iceeqV09nR6zcmKwGl12SS4KTL8edq9ZWEbH3d
UyuJaHrWB5B6mZqc5+truEud9D/f4xsq1OVk1xuD3PXeJAB1oYwqzwSXNxDX+h4A
oohLMpunKh3TEhT/2DROAo4VCgCg1kjQsX6m/tEdRJycnZpIlCmKQYig4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfHhW+9TZsP3vS2AFxPXAJZFhZ2MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvVjhlRmI3MU5td19lOUxZQVhFOWNBbGtXRm5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDkyMA0G
CSqGSIb3DQEBCwUAA4IBAQBFwPHffn896OeuMyacwsLS95nyOaxkxWVZbpdRMOCk
RSmSmklVbJVMpMz9H2dcTk2ASm++OpMe/c3UkNgveKxHKsujHo0FB3lus1h0obld
cAPA4iRy0ILL1XYczBgN6cQDn/4RREw9OEydfv84+6Yw2HWdcFFIi5PraAvZcKR3
j8g4ekkWZBas3dxJg7xYx1YQi4Jtn8ln18rQtB9B2XA1qj7jltu9SYnTsdhvR0eR
UxTe3NX05gttHw2hu+YNthYtOtibpoO/bxNskTuXvZsDtDNc89MLk+1T9+uBcyAg
dFWW7jlZVfZaJu5F+gm5Y40ELCL52jQlmZ+08Zq1WlvM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:55 2024 by rpki-client on console-ams.rpki-client.org