Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl6mnNqzXjizmjS29o_f1Vd8Izw.roa
File:                     Rl6mnNqzXjizmjS29o_f1Vd8Izw.roa (raw, json)
Hash identifier:          3vezMyi4E2Kxs4yZKU4CTAlW4sgTFu9XDfCd0htGF1E=
Subject key identifier:   46:5E:A6:9C:DA:B3:5E:38:B3:9A:34:B6:F6:8F:DF:D5:57:7C:23:3C
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       01890D0B05D90FB1F545CD8CCBA7C8867C8A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl6mnNqzXjizmjS29o_f1Vd8Izw.roa
Signing time:             Fri 30 Jun 2023 16:02:53 +0000
ROA not before:           Fri 30 Jun 2023 16:02:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21082
IP address blocks:        94.176.214.0/24 maxlen: 24
                          94.176.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 19:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0d:0b:05:d9:0f:b1:f5:45:cd:8c:cb:a7:c8:86:7c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 30 16:02:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=465ea69cdab35e38b39a34b6f68fdfd5577c233c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:3b:02:e1:be:bd:da:12:60:e8:94:8b:3d:
                    36:ca:d9:48:54:0b:4f:f8:11:a8:53:c9:45:d3:e8:
                    7c:ca:4b:aa:41:b0:c3:9f:7c:e0:02:82:e3:86:57:
                    b0:67:f9:76:47:86:56:64:09:ea:41:41:78:4b:2b:
                    ad:a8:3e:b9:ea:7f:30:f2:d6:5d:34:2c:7a:61:fb:
                    97:7f:30:9f:5c:ae:81:d1:2f:6e:fe:e5:28:2a:4f:
                    59:e4:63:89:91:41:7a:d6:20:1c:06:8d:ca:e9:77:
                    ec:ef:c4:31:50:7d:24:d9:04:a6:2c:6e:bd:1c:02:
                    f0:37:0d:b1:42:c6:58:ab:b0:d3:9f:11:5d:ee:e9:
                    a5:65:56:14:82:71:51:0d:35:6e:c4:11:23:31:6f:
                    84:fc:ea:6c:63:1e:fc:dc:b7:21:ac:85:23:a0:0d:
                    31:30:24:69:c1:40:1e:c3:92:6d:ba:85:59:fe:40:
                    cc:7b:0a:cc:33:a2:9f:77:36:43:14:27:e9:8f:a7:
                    3d:8c:18:27:3d:af:b2:cb:e2:f6:ec:dc:b2:b0:94:
                    83:ca:d7:10:f0:0d:85:30:a8:c7:88:e6:48:d1:c8:
                    b6:d5:df:eb:b3:54:8a:d0:d0:25:c8:ba:4b:31:f1:
                    6e:ab:6e:f4:47:da:9a:b5:1e:ae:2a:25:f9:f0:b7:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:A6:9C:DA:B3:5E:38:B3:9A:34:B6:F6:8F:DF:D5:57:7C:23:3C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Rl6mnNqzXjizmjS29o_f1Vd8Izw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:75:2e:e2:fc:42:74:78:19:34:1d:92:a3:23:cc:f6:9c:
         81:72:6d:a4:56:58:c0:97:d0:8e:e0:52:0a:64:f5:a2:27:e9:
         d9:72:73:43:ac:fe:ba:28:f4:3f:0c:10:89:67:40:f6:78:48:
         a9:0f:7d:2d:65:7d:a7:a4:85:81:2e:2b:0c:81:f0:78:46:6d:
         9d:fd:6b:c7:64:02:14:e9:32:e3:4d:12:1a:06:de:f5:1f:a0:
         48:45:be:ce:7a:15:7c:24:10:4c:c0:02:2e:8c:4c:67:f0:69:
         aa:e5:09:95:21:73:d2:1a:ea:1f:cd:4d:cd:82:51:9a:81:e1:
         74:da:2d:4c:53:cd:b5:79:5c:1a:8b:b4:1a:29:7b:54:3d:0d:
         fb:c3:ec:54:86:a1:75:b3:bc:a1:a3:24:c9:f3:81:ec:c8:dd:
         3b:95:fe:74:a7:aa:b8:88:81:a5:02:51:a5:5e:ef:b4:f2:41:
         c1:e9:67:77:30:38:7c:44:bb:e1:a9:74:d7:36:6a:ce:b4:02:
         3e:48:24:fb:1f:b6:c1:e3:96:7c:3e:a3:c8:a2:1c:16:9c:a3:
         95:91:07:27:4a:6c:e9:cd:c4:99:6f:28:53:9c:db:23:06:8e:
         a2:2f:b2:92:e5:68:73:0d:a6:45:50:50:66:ec:02:ca:54:70:
         ac:5f:6e:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkNCwXZD7H1Rc2My6fIhnyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjMwMTYwMjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjVlYTY5Y2RhYjM1ZTM4YjM5YTM0YjZmNjhmZGZkNTU3N2MyMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7s7AuG+vdoSYOiUiz02ytlIVAtP
+BGoU8lF0+h8ykuqQbDDn3zgAoLjhlewZ/l2R4ZWZAnqQUF4SyutqD656n8w8tZd
NCx6YfuXfzCfXK6B0S9u/uUoKk9Z5GOJkUF61iAcBo3K6Xfs78QxUH0k2QSmLG69
HALwNw2xQsZYq7DTnxFd7umlZVYUgnFRDTVuxBEjMW+E/OpsYx783LchrIUjoA0x
MCRpwUAew5JtuoVZ/kDMewrMM6KfdzZDFCfpj6c9jBgnPa+yy+L27NyysJSDytcQ
8A2FMKjHiOZI0ci21d/rs1SK0NAlyLpLMfFuq270R9qatR6uKiX58LdjxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZeppzas144s5o0tvaP39VXfCM8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUmw2bW5OcXpYaml6bWpTMjlvX2YxVmQ4SXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXrDWMA0G
CSqGSIb3DQEBCwUAA4IBAQA1pHUu4vxCdHgZNB2SoyPM9pyBcm2kVljAl9CO4FIK
ZPWiJ+nZcnNDrP66KPQ/DBCJZ0D2eEipD30tZX2npIWBLisMgfB4Rm2d/WvHZAIU
6TLjTRIaBt71H6BIRb7OehV8JBBMwAIujExn8Gmq5QmVIXPSGuofzU3NglGageF0
2i1MU821eVwai7QaKXtUPQ37w+xUhqF1s7yhoyTJ84HsyN07lf50p6q4iIGlAlGl
Xu+08kHB6Wd3MDh8RLvhqXTXNmrOtAI+SCT7H7bB45Z8PqPIohwWnKOVkQcnSmzp
zcSZbyhTnNsjBo6iL7KS5WhzDaZFUFBm7ALKVHCsX24N
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org