Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eBDTBcslP913aBHrZNfkz14Ocrw.roa
File:                     eBDTBcslP913aBHrZNfkz14Ocrw.roa (raw, json)
Hash identifier:          l0ZDirB+NCJB27bOQZu4pnjo7KBtncLXuXuvEIULS+U=
Subject key identifier:   78:10:D3:05:CB:25:3F:DD:77:68:11:EB:64:D7:E4:CF:5E:0E:72:BC
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B891F5B0B10755D7A26BD02066EC9
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eBDTBcslP913aBHrZNfkz14Ocrw.roa
Signing time:             Sun 01 Jan 2023 21:44:59 +0000
ROA not before:           Sun 01 Jan 2023 21:44:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212886
IP address blocks:        176.57.52.0/24 maxlen: 24
                          176.57.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 06:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:89:1f:5b:0b:10:75:5d:7a:26:bd:02:06:6e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7810d305cb253fdd776811eb64d7e4cf5e0e72bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:2c:2c:21:06:f5:5a:c2:d0:c1:37:f4:77:
                    a5:42:18:95:36:b7:c1:96:eb:c5:7a:4a:70:6d:de:
                    3a:ce:ed:c4:2c:79:97:82:f0:f0:3a:1b:8f:fb:d8:
                    46:c0:31:9b:3f:6c:64:cc:47:04:05:13:6a:40:c4:
                    60:63:eb:60:fc:77:54:18:14:8a:de:41:0e:22:23:
                    52:5a:09:6c:fa:22:de:6e:e5:54:00:4f:f4:60:fe:
                    20:50:5d:39:46:74:fe:66:3b:7e:65:a1:f2:a1:87:
                    79:dd:78:ab:a3:73:35:07:98:65:3b:23:27:5f:c5:
                    ed:d9:1f:2f:c6:8d:d5:fb:2e:da:b0:69:03:00:c1:
                    3f:a0:3d:dd:7e:b5:a6:b7:77:45:18:92:6b:1d:b3:
                    dc:7a:cc:73:06:a3:07:2c:43:49:82:26:1d:40:77:
                    39:9c:02:be:67:72:7a:73:04:8b:cd:46:af:e5:6f:
                    1e:68:35:d4:6e:35:9a:08:e2:46:e2:bb:2b:69:dd:
                    5a:63:aa:93:99:69:1d:b5:fc:c4:6a:88:53:9e:30:
                    0b:8e:4c:5a:8f:3a:e2:24:92:7d:6e:1a:2e:c9:ff:
                    6e:c2:9d:e1:bb:f3:fd:39:53:02:36:8f:8c:9c:cb:
                    e0:ff:7d:d1:f4:98:cb:05:f8:aa:24:30:14:3b:b5:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:10:D3:05:CB:25:3F:DD:77:68:11:EB:64:D7:E4:CF:5E:0E:72:BC
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eBDTBcslP913aBHrZNfkz14Ocrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:93:f9:25:11:da:30:ad:c7:b8:69:75:0f:1c:b5:57:f6:95:
         f1:3e:9f:ea:5c:0e:02:fe:31:9f:e6:bc:c9:d2:b0:07:7e:51:
         e2:fb:d7:70:3d:b9:df:f1:bb:99:2d:64:69:12:3f:44:a2:8c:
         2a:10:86:c7:c5:db:d7:27:a2:da:2b:39:c9:c6:ce:70:a6:c0:
         9e:12:87:27:bb:91:c0:db:9b:26:78:1d:8a:d9:52:2c:ab:a2:
         a7:93:b8:4d:61:02:56:33:5a:e0:88:78:01:48:d4:66:16:5d:
         22:ab:08:13:11:9a:47:f4:92:b8:40:f7:09:2a:7e:d2:cd:83:
         b0:e1:e3:63:d7:f1:7f:b5:7d:c3:c6:f9:1b:a3:05:f5:00:43:
         99:fa:79:29:d0:1d:35:04:2f:b8:29:ba:82:95:e8:02:0e:5e:
         9b:0d:fa:b1:a7:45:48:be:ad:a9:07:aa:5c:a4:46:e7:65:0e:
         ff:b9:d1:73:bb:30:f1:d5:18:dd:4a:22:0a:fa:c7:7e:e4:ee:
         e4:1a:00:03:18:fa:fe:3a:dc:d0:b6:a4:02:11:48:dc:0c:36:
         15:97:b4:fb:9b:3e:f7:bb:c4:c3:ee:fc:f4:1a:06:a9:34:23:
         9b:09:d1:43:6d:b6:01:1a:fd:88:9e:d1:cd:68:fd:b6:02:21:
         79:55:fa:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS4kfWwsQdV16Jr0CBm7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTAxMjE0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODEwZDMwNWNiMjUzZmRkNzc2ODExZWI2NGQ3ZTRjZjVlMGU3MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dssLCEG9VrC0ME39HelQhiVNrfB
luvFekpwbd46zu3ELHmXgvDwOhuP+9hGwDGbP2xkzEcEBRNqQMRgY+tg/HdUGBSK
3kEOIiNSWgls+iLebuVUAE/0YP4gUF05RnT+Zjt+ZaHyoYd53Xiro3M1B5hlOyMn
X8Xt2R8vxo3V+y7asGkDAME/oD3dfrWmt3dFGJJrHbPcesxzBqMHLENJgiYdQHc5
nAK+Z3J6cwSLzUav5W8eaDXUbjWaCOJG4rsrad1aY6qTmWkdtfzEaohTnjALjkxa
jzriJJJ9bhouyf9uwp3hu/P9OVMCNo+MnMvg/33R9JjLBfiqJDAUO7VtOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgQ0wXLJT/dd2gR62TX5M9eDnK8MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvZUJEVEJjc2xQOTEzYUJIclpOZmt6MTRPY3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDk0MA0G
CSqGSIb3DQEBCwUAA4IBAQCrk/klEdowrce4aXUPHLVX9pXxPp/qXA4C/jGf5rzJ
0rAHflHi+9dwPbnf8buZLWRpEj9EoowqEIbHxdvXJ6LaKznJxs5wpsCeEocnu5HA
25smeB2K2VIsq6Knk7hNYQJWM1rgiHgBSNRmFl0iqwgTEZpH9JK4QPcJKn7SzYOw
4eNj1/F/tX3DxvkbowX1AEOZ+nkp0B01BC+4KbqClegCDl6bDfqxp0VIvq2pB6pc
pEbnZQ7/udFzuzDx1RjdSiIK+sd+5O7kGgADGPr+OtzQtqQCEUjcDDYVl7T7mz73
u8TD7vz0GgapNCObCdFDbbYBGv2IntHNaP22AiF5VfoJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:54 2024 by rpki-client on console-fra.rpki-client.org