Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jLG6c9DeJ8H78_OcnamOtT35DLk.roa
File:                     jLG6c9DeJ8H78_OcnamOtT35DLk.roa (raw, json)
Hash identifier:          EIsQq9cRwE0iBJp0CegJVY9KId0SzLBPWrUP1CZWKpE=
Subject key identifier:   8C:B1:BA:73:D0:DE:27:C1:FB:F3:F3:9C:9D:A9:8E:B5:3D:F9:0C:B9
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B84F61B266C3DB6A33EC9E3CE8505
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jLG6c9DeJ8H78_OcnamOtT35DLk.roa
Signing time:             Sun 01 Jan 2023 21:44:58 +0000
ROA not before:           Sun 01 Jan 2023 21:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209737
IP address blocks:        176.57.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 06:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:84:f6:1b:26:6c:3d:b6:a3:3e:c9:e3:ce:85:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cb1ba73d0de27c1fbf3f39c9da98eb53df90cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:4a:dc:b1:c1:ee:9d:4b:50:4b:ef:d5:eb:
                    03:9d:02:86:bd:2d:39:4f:a5:42:5a:76:d0:f5:44:
                    73:9e:6a:66:59:66:fd:86:a8:78:6a:da:bb:90:5a:
                    76:99:21:44:c4:7a:74:65:ae:88:ea:c1:3d:5d:01:
                    25:15:4f:a2:bd:bf:d3:c8:db:e7:17:e5:a6:cc:66:
                    56:e1:12:c4:46:dc:12:64:10:29:cc:f1:29:fb:2b:
                    7a:20:06:55:e9:6f:b4:2d:eb:46:5a:63:22:2d:00:
                    8f:29:e3:a5:7c:25:14:9e:2b:2c:7d:8b:c8:60:aa:
                    ad:55:4e:d0:bb:51:a7:f2:67:c3:fd:d1:79:4a:cb:
                    f2:26:69:40:fb:a3:93:12:03:70:ad:3a:1f:a1:4d:
                    b6:c1:6f:a1:a9:2b:73:58:1f:ae:e9:f7:8f:91:3f:
                    9e:1c:05:23:05:43:e0:3b:7d:bc:18:4c:d8:42:1c:
                    b8:c3:5f:11:9e:d5:13:e5:9f:c1:fb:0e:4b:02:a5:
                    96:a5:24:86:9e:76:31:bd:7c:29:ce:04:6f:23:3c:
                    ce:1a:ec:c0:13:ea:1b:b0:fe:c6:b5:1b:dd:58:91:
                    42:13:e4:88:db:de:02:47:5a:3a:5b:02:8f:a2:e9:
                    26:bf:9a:ff:67:14:dd:55:0e:64:d9:35:9e:55:be:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B1:BA:73:D0:DE:27:C1:FB:F3:F3:9C:9D:A9:8E:B5:3D:F9:0C:B9
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/jLG6c9DeJ8H78_OcnamOtT35DLk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:38:45:1b:a1:3a:d0:b7:ab:3e:5b:15:09:65:e1:f3:e4:
         b1:f9:12:b3:75:cf:d2:0a:c6:51:14:c1:a5:a9:90:c6:49:bb:
         e4:d2:f7:a5:89:fd:3e:07:9e:21:06:a4:71:17:08:6f:c5:5c:
         e2:dd:41:e8:62:b8:c8:eb:3a:8f:8e:e1:02:f9:e4:2d:2b:2f:
         bf:00:a3:bf:6a:5c:1c:ed:29:b5:6a:a3:da:41:dd:f8:19:e2:
         60:67:9a:7e:10:01:5c:c9:5b:47:43:50:a0:27:99:39:ba:c3:
         b0:fb:1d:7e:d2:d0:f6:0c:19:fc:e9:33:69:02:bf:d7:52:be:
         0e:63:f8:d6:13:8d:12:ec:a5:59:77:07:87:d1:a5:fb:3b:4b:
         26:4a:bc:a0:60:24:11:d6:fa:39:34:1a:2f:74:74:5c:68:90:
         13:8e:b4:ca:83:41:e2:7a:17:7a:80:1a:24:eb:b5:94:1c:78:
         ec:f8:a7:19:3d:e7:0c:76:44:7d:c5:51:c1:61:20:63:57:24:
         80:cf:d3:a9:54:20:e2:b8:e9:a8:62:08:19:91:3f:8c:d4:c3:
         4b:2b:11:c0:41:6f:cf:de:56:18:c9:82:e1:81:27:d7:43:bd:
         38:6b:59:99:e9:66:d7:72:7e:3b:db:47:b4:9a:d6:48:0c:a0:
         9a:c4:b0:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS4T2GyZsPbajPsnjzoUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwMTAxMjE0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2IxYmE3M2QwZGUyN2MxZmJmM2YzOWM5ZGE5OGViNTNkZjkwY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8BK3LHB7p1LUEvv1esDnQKGvS05
T6VCWnbQ9URznmpmWWb9hqh4atq7kFp2mSFExHp0Za6I6sE9XQElFU+ivb/TyNvn
F+WmzGZW4RLERtwSZBApzPEp+yt6IAZV6W+0LetGWmMiLQCPKeOlfCUUnissfYvI
YKqtVU7Qu1Gn8mfD/dF5SsvyJmlA+6OTEgNwrTofoU22wW+hqStzWB+u6fePkT+e
HAUjBUPgO328GEzYQhy4w18RntUT5Z/B+w5LAqWWpSSGnnYxvXwpzgRvIzzOGuzA
E+obsP7GtRvdWJFCE+SI294CR1o6WwKPoukmv5r/ZxTdVQ5k2TWeVb6w2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIyxunPQ3ifB+/PznJ2pjrU9+Qy5MB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvakxHNmM5RGVKOEg3OF9PY25hbU90VDM1RExrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk1MA0G
CSqGSIb3DQEBCwUAA4IBAQBVqThFG6E60LerPlsVCWXh8+Sx+RKzdc/SCsZRFMGl
qZDGSbvk0velif0+B54hBqRxFwhvxVzi3UHoYrjI6zqPjuEC+eQtKy+/AKO/alwc
7Sm1aqPaQd34GeJgZ5p+EAFcyVtHQ1CgJ5k5usOw+x1+0tD2DBn86TNpAr/XUr4O
Y/jWE40S7KVZdweH0aX7O0smSrygYCQR1vo5NBovdHRcaJATjrTKg0Hiehd6gBok
67WUHHjs+KcZPecMdkR9xVHBYSBjVySAz9OpVCDiuOmoYggZkT+M1MNLKxHAQW/P
3lYYyYLhgSfXQ704a1mZ6WbXcn4720e0mtZIDKCaxLA3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org