Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zVZlWyWBhm78Xgg1-w2VPA_mDHA.roa
File:                     zVZlWyWBhm78Xgg1-w2VPA_mDHA.roa (raw, json)
Hash identifier:          AGCx61pz5owzm3ykMv9RjbIQiLqty2oF+tZBU7q+7vI=
Subject key identifier:   CD:56:65:5B:25:81:86:6E:FC:5E:08:35:FB:0D:95:3C:0F:E6:0C:70
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0188A414617782AD00FF82F4305E4604DCBD
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zVZlWyWBhm78Xgg1-w2VPA_mDHA.roa
Signing time:             Sat 10 Jun 2023 06:52:59 +0000
ROA not before:           Sat 10 Jun 2023 06:52:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212886
IP address blocks:        176.57.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a4:14:61:77:82:ad:00:ff:82:f4:30:5e:46:04:dc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 10 06:52:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cd56655b2581866efc5e0835fb0d953c0fe60c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:73:c6:50:dd:6a:91:9f:32:a2:f9:f2:4d:
                    58:4b:18:6b:b9:17:c7:87:fe:9f:96:8e:32:1c:b4:
                    86:e3:44:c9:9a:ed:c4:cd:8c:ad:3a:88:9d:0d:fd:
                    53:de:31:fd:6c:68:13:72:28:bf:e9:7c:73:30:d0:
                    7e:a0:f4:ba:dc:b0:a5:ca:3c:12:62:85:0a:b6:4b:
                    50:eb:0c:ba:89:37:7b:28:a6:bc:4d:32:b1:28:a1:
                    fb:b6:a6:5b:9e:7e:3d:92:31:36:28:59:c8:fa:f2:
                    5d:3b:ba:23:18:19:79:83:4e:68:68:2b:21:0f:42:
                    8e:5b:15:18:53:cf:9f:95:a0:04:1c:7d:20:d1:09:
                    b6:9b:e8:6a:78:89:b0:86:ce:fa:75:05:ae:71:24:
                    63:bf:23:b9:ca:7d:b9:d9:43:bf:6f:9e:60:24:c2:
                    54:d5:c3:a9:e8:8b:a6:e0:c6:e3:16:c2:1a:cb:30:
                    7d:b8:c2:2d:d5:38:47:39:f2:a4:ed:6b:e6:d8:35:
                    c7:b8:e3:b9:3b:d4:ac:b6:5d:7d:da:6d:c3:f0:ee:
                    e0:3d:f0:58:9e:41:56:4a:de:24:3c:bd:c7:d8:29:
                    d5:65:e5:79:ae:44:3f:bf:4f:7e:74:0d:4c:cb:eb:
                    49:c8:bb:b8:75:1d:9a:a4:fa:3d:82:ec:ff:1c:9b:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:56:65:5B:25:81:86:6E:FC:5E:08:35:FB:0D:95:3C:0F:E6:0C:70
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/zVZlWyWBhm78Xgg1-w2VPA_mDHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:12:8a:67:e1:48:0c:ba:aa:9b:6d:6a:94:4a:b0:cb:6a:
         48:a0:f1:3a:e5:b8:83:2a:5f:99:8b:d9:29:56:93:d2:53:b2:
         2d:d6:d6:a6:22:b1:1e:48:d7:1d:3b:48:04:be:0e:c4:2f:a0:
         bd:01:31:16:14:42:5f:53:32:4a:38:ff:de:c7:1d:1a:3b:f3:
         c7:23:8e:e8:a2:c1:56:1e:60:11:c8:d8:6b:a9:df:2a:85:c3:
         3b:07:dd:aa:39:b1:6c:93:fe:42:f1:4f:83:60:d3:a9:c2:36:
         3d:84:87:ed:2c:8c:d0:b7:fa:5f:4c:4f:46:6e:fe:76:f6:fe:
         de:da:cf:e3:b1:b4:b2:05:89:64:f5:1c:7b:b6:ce:8d:07:22:
         90:79:4b:b7:81:96:4c:03:b1:a4:e6:e1:6c:11:7c:4f:e4:e2:
         ba:d9:22:70:b1:04:ad:90:05:aa:0b:85:09:77:8e:c2:c0:39:
         13:05:58:fd:04:6f:45:5c:3b:5e:00:0b:01:9f:d6:e6:ab:90:
         05:7f:b7:9c:c9:94:c9:53:6f:5c:b0:96:20:50:d8:e7:37:10:
         ba:3c:48:2b:88:7b:7c:00:3a:75:0d:f6:5d:a9:f6:51:e6:f1:
         fc:af:2e:65:ff:26:69:95:08:59:2e:a3:73:0c:6d:06:81:cf:
         be:4a:12:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYikFGF3gq0A/4L0MF5GBNy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjMwNjEwMDY1MjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDU2NjU1YjI1ODE4NjZlZmM1ZTA4MzVmYjBkOTUzYzBmZTYwYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplNzxlDdapGfMqL58k1YSxhruRfH
h/6flo4yHLSG40TJmu3EzYytOoidDf1T3jH9bGgTcii/6XxzMNB+oPS63LClyjwS
YoUKtktQ6wy6iTd7KKa8TTKxKKH7tqZbnn49kjE2KFnI+vJdO7ojGBl5g05oaCsh
D0KOWxUYU8+flaAEHH0g0Qm2m+hqeImwhs76dQWucSRjvyO5yn252UO/b55gJMJU
1cOp6Ium4MbjFsIayzB9uMIt1ThHOfKk7Wvm2DXHuOO5O9Sstl192m3D8O7gPfBY
nkFWSt4kPL3H2CnVZeV5rkQ/v09+dA1My+tJyLu4dR2apPo9guz/HJuYxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1WZVslgYZu/F4INfsNlTwP5gxwMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvelZabFd5V0JobTc4WGdnMS13MlZQQV9tREhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk0MA0G
CSqGSIb3DQEBCwUAA4IBAQCPjxKKZ+FIDLqqm21qlEqwy2pIoPE65biDKl+Zi9kp
VpPSU7It1tamIrEeSNcdO0gEvg7EL6C9ATEWFEJfUzJKOP/exx0aO/PHI47oosFW
HmARyNhrqd8qhcM7B92qObFsk/5C8U+DYNOpwjY9hIftLIzQt/pfTE9Gbv529v7e
2s/jsbSyBYlk9Rx7ts6NByKQeUu3gZZMA7Gk5uFsEXxP5OK62SJwsQStkAWqC4UJ
d47CwDkTBVj9BG9FXDteAAsBn9bmq5AFf7ecyZTJU29csJYgUNjnNxC6PEgriHt8
ADp1DfZdqfZR5vH8ry5l/yZplQhZLqNzDG0Ggc++ShIL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org