Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bv--U6ABRzHCvt5O1iliXf2ioLY.roa
File:                     bv--U6ABRzHCvt5O1iliXf2ioLY.roa (raw, json)
Hash identifier:          ZOf6BLY+TsZ7rMsHApG6sM8QA5Y3cc6XNjZDgiSX9ec=
Subject key identifier:   6E:FF:BE:53:A0:01:47:31:C2:BE:DE:4E:D6:29:62:5D:FD:A2:A0:B6
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018934BF2D890B8C19DA73774BC2B9BC2A6F
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bv--U6ABRzHCvt5O1iliXf2ioLY.roa
Signing time:             Sat 08 Jul 2023 09:04:51 +0000
ROA not before:           Sat 08 Jul 2023 09:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        81.21.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Jul 2023 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:34:bf:2d:89:0b:8c:19:da:73:77:4b:c2:b9:bc:2a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jul  8 09:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6effbe53a0014731c2bede4ed629625dfda2a0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:01:83:6c:a6:b3:85:29:72:1e:3e:42:d7:
                    02:47:ef:10:d2:5e:46:0f:fb:09:68:f4:39:89:66:
                    da:3e:16:33:4d:e6:a8:7d:0f:22:4c:8e:9d:85:f3:
                    95:80:8e:52:8f:ac:2b:80:10:39:42:29:9c:6c:af:
                    dc:ca:e2:f9:f9:7f:c9:7c:87:8c:7a:a3:2d:a5:2b:
                    f5:5a:1c:fc:5c:24:15:08:2f:5b:05:97:e9:38:c9:
                    ee:e6:34:2d:c8:01:bb:4e:e7:16:c7:9b:fe:4c:11:
                    6e:3b:ce:a1:5c:b8:71:dc:af:1f:02:3c:b2:e5:91:
                    c8:c7:f6:98:42:3a:6a:99:9e:9f:70:74:cf:87:9c:
                    60:c0:ae:13:9f:2c:ac:35:88:8f:1f:65:21:48:4e:
                    e3:30:90:27:ad:86:e9:d7:99:bb:e8:da:d4:b9:80:
                    88:77:99:51:2d:f4:88:dc:e6:7a:75:ab:8b:9a:61:
                    ea:cb:83:85:ff:0d:05:4b:5b:d2:af:88:99:c1:e2:
                    0f:bf:f5:d7:28:06:12:ab:2b:b3:2f:16:9c:7f:c8:
                    44:3e:17:a2:53:5b:b6:3d:bc:3d:de:98:50:10:3e:
                    27:44:fc:b0:5b:0d:92:f3:7e:13:7b:03:60:8b:e7:
                    32:bd:64:54:a5:ee:2f:df:80:0d:4b:6a:9d:35:ce:
                    c7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FF:BE:53:A0:01:47:31:C2:BE:DE:4E:D6:29:62:5D:FD:A2:A0:B6
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/bv--U6ABRzHCvt5O1iliXf2ioLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:32:99:2c:56:2f:d9:31:8d:3c:53:85:29:48:cd:2c:29:9e:
         60:73:bb:c6:c3:31:73:a7:2b:9d:90:2f:eb:0a:05:ed:e2:4c:
         cf:e9:72:57:78:9b:9d:0e:80:68:bf:dc:91:1a:6e:af:e2:23:
         92:7e:b8:89:36:f3:c3:11:eb:6b:0c:7f:f0:36:ca:0e:05:1f:
         0f:45:62:47:02:06:6f:51:15:90:d0:e1:0a:98:8f:cb:b8:33:
         77:a7:29:ce:2d:6f:00:12:0d:3d:af:0b:71:ca:04:81:2b:60:
         08:7d:62:5e:2b:0b:6b:8f:db:a1:fb:24:4f:35:ed:ac:4e:f8:
         5e:9b:ca:72:ea:6c:8b:a3:8c:23:dd:29:30:27:f9:7b:c5:f3:
         8c:2b:a9:a4:a7:91:a6:db:c9:76:88:1e:58:15:a4:eb:9b:97:
         9d:44:e1:e7:fc:47:e0:eb:cc:48:02:0d:bd:9b:2a:5d:b4:3f:
         20:61:30:5f:2e:a4:09:03:31:4a:bd:f1:b1:b1:e0:7c:90:01:
         1e:04:88:b3:c0:a3:56:27:38:6b:93:cb:c4:db:2d:ad:f2:57:
         0c:60:b9:61:96:5b:de:ad:e3:f8:f5:88:8b:75:08:22:ac:91:
         df:36:7d:ce:87:f1:09:05:b1:02:a1:40:5b:36:c1:28:d5:c1:
         48:9b:00:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk0vy2JC4wZ2nN3S8K5vCpvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNzA4MDkwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZmYmU1M2EwMDE0NzMxYzJiZWRlNGVkNjI5NjI1ZGZkYTJhMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74Bg2yms4Upch4+QtcCR+8Q0l5G
D/sJaPQ5iWbaPhYzTeaofQ8iTI6dhfOVgI5Sj6wrgBA5QimcbK/cyuL5+X/JfIeM
eqMtpSv1Whz8XCQVCC9bBZfpOMnu5jQtyAG7TucWx5v+TBFuO86hXLhx3K8fAjyy
5ZHIx/aYQjpqmZ6fcHTPh5xgwK4TnyysNYiPH2UhSE7jMJAnrYbp15m76NrUuYCI
d5lRLfSI3OZ6dauLmmHqy4OF/w0FS1vSr4iZweIPv/XXKAYSqyuzLxacf8hEPhei
U1u2Pbw93phQED4nRPywWw2S834TewNgi+cyvWRUpe4v34ANS2qdNc7HUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7/vlOgAUcxwr7eTtYpYl39oqC2MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvYnYtLVU2QUJSekhDdnQ1TzFpbGlYZjJpb0xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUIMA0G
CSqGSIb3DQEBCwUAA4IBAQCRMpksVi/ZMY08U4UpSM0sKZ5gc7vGwzFzpyudkC/r
CgXt4kzP6XJXeJudDoBov9yRGm6v4iOSfriJNvPDEetrDH/wNsoOBR8PRWJHAgZv
URWQ0OEKmI/LuDN3pynOLW8AEg09rwtxygSBK2AIfWJeKwtrj9uh+yRPNe2sTvhe
m8py6myLo4wj3SkwJ/l7xfOMK6mkp5Gm28l2iB5YFaTrm5edROHn/Efg68xIAg29
mypdtD8gYTBfLqQJAzFKvfGxseB8kAEeBIizwKNWJzhrk8vE2y2t8lcMYLlhllve
reP49YiLdQgirJHfNn3Oh/EJBbECoUBbNsEo1cFImwAr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org