Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa
File:                     eej-c5oXhUHz6CXFj4BLEZiAlX4.roa (raw, json)
Hash identifier:          ZSGFLSPd12Cjihg/v2TqoPTUR0Jj+A1Ewdji3X5rZZg=
Subject key identifier:   79:E8:FE:73:9A:17:85:41:F3:E8:25:C5:8F:80:4B:11:98:80:95:7E
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       01856CC17F9919F1B77D58EEE5CAA7B418C9
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa
Signing time:             Sun 01 Jan 2023 09:54:58 +0000
ROA not before:           Sun 01 Jan 2023 09:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213120
IP address blocks:        2a02:2370:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:c1:7f:99:19:f1:b7:7d:58:ee:e5:ca:a7:b4:18:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  1 09:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79e8fe739a178541f3e825c58f804b119880957e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:f4:da:aa:43:5a:59:16:0f:08:b6:6f:b1:
                    86:a2:2a:db:0c:dd:f5:82:a1:db:1c:d8:27:5b:9c:
                    82:0a:55:e6:f3:44:f5:62:2d:fd:d2:a3:1c:13:20:
                    7f:8e:3c:6e:9d:fa:68:bc:69:22:29:38:c8:57:df:
                    9e:0d:1a:4c:0d:ae:0e:2f:52:bb:bc:a3:db:3a:1c:
                    07:a2:5a:74:82:67:9e:da:35:20:04:c3:cd:88:aa:
                    00:6f:55:f4:c2:4d:23:d7:cd:ee:a4:a2:92:fb:5f:
                    38:44:56:42:fc:7f:60:a5:2a:1d:b3:52:13:c2:54:
                    cf:31:65:7b:72:fd:ae:e8:8c:24:7c:68:6f:2e:1d:
                    ac:b3:74:a4:dc:ef:44:2c:bd:10:3d:1e:25:aa:49:
                    7e:86:09:15:95:e7:12:1a:fc:00:04:71:57:d0:af:
                    1f:62:28:5c:ce:6f:ae:1d:57:e5:44:a8:1e:56:38:
                    af:60:f9:1a:f4:f8:78:35:52:84:f0:3e:31:e1:b3:
                    e5:67:b6:7f:a0:95:3f:95:1f:d8:27:74:bd:56:14:
                    bb:4c:05:fa:f2:82:f0:50:28:d6:f8:29:5d:10:5f:
                    27:72:15:f3:76:92:d7:d5:6e:28:cd:30:91:8c:f6:
                    09:f7:9e:a4:b2:31:c2:1a:bb:31:16:da:9b:0b:ca:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E8:FE:73:9A:17:85:41:F3:E8:25:C5:8F:80:4B:11:98:80:95:7E
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eej-c5oXhUHz6CXFj4BLEZiAlX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:2370:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:c9:8c:2c:82:d6:6e:56:2a:f1:f6:19:06:5a:55:f4:42:
         ee:9b:c4:f1:b0:6e:47:ca:80:55:79:ea:85:97:10:d3:1c:e5:
         ce:21:d5:8a:b9:11:43:4b:66:ff:40:11:68:38:f3:bc:1a:38:
         8b:22:4a:4d:e7:d1:8f:2b:41:1c:a8:18:73:72:9d:be:42:1c:
         db:af:e3:8e:bd:a2:35:13:79:20:6c:dd:f3:93:d4:db:44:7b:
         f0:3c:ab:eb:e0:ba:db:8c:f6:86:9d:94:cd:b3:3c:6f:65:28:
         f9:49:e5:78:f1:b0:c8:06:2e:f8:4a:71:37:82:fd:cd:d2:88:
         76:c9:85:23:a2:f5:a0:75:a4:70:da:af:5e:52:72:09:73:bb:
         d3:6e:15:0c:40:12:bf:b4:31:d3:01:71:c3:a3:61:d6:39:60:
         c7:a8:d9:01:2c:34:e8:4d:4d:76:6e:f1:92:90:bd:2f:fc:5e:
         07:97:cb:bc:31:de:27:c1:44:31:5d:8f:05:82:d0:c1:d7:f7:
         df:a9:98:00:2c:e1:fb:65:23:b0:36:ea:95:f1:34:80:1f:8c:
         b0:68:54:84:76:c2:ac:54:c5:a9:98:0a:1c:c7:4d:99:d3:4e:
         94:37:6d:47:ed:41:ad:3c:e8:cd:1e:1e:5f:74:59:0f:3c:59:
         c4:18:c4:aa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVswX+ZGfG3fVju5cqntBjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjMwMTAxMDk1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWU4ZmU3MzlhMTc4NTQxZjNlODI1YzU4ZjgwNGIxMTk4ODA5NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+/02qpDWlkWDwi2b7GGoirbDN31
gqHbHNgnW5yCClXm80T1Yi390qMcEyB/jjxunfpovGkiKTjIV9+eDRpMDa4OL1K7
vKPbOhwHolp0gmee2jUgBMPNiKoAb1X0wk0j183upKKS+184RFZC/H9gpSods1IT
wlTPMWV7cv2u6IwkfGhvLh2ss3Sk3O9ELL0QPR4lqkl+hgkVlecSGvwABHFX0K8f
Yihczm+uHVflRKgeVjivYPka9Ph4NVKE8D4x4bPlZ7Z/oJU/lR/YJ3S9VhS7TAX6
8oLwUCjW+CldEF8nchXzdpLX1W4ozTCRjPYJ956ksjHCGrsxFtqbC8pGNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHno/nOaF4VB8+glxY+ASxGYgJV+MB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvZWVqLWM1b1hoVUh6NkNYRmo0QkxFWmlBbFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIjcBAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCnmcmMLILWblYq8fYZBlpV9ELum8TxsG5HyoBV
eeqFlxDTHOXOIdWKuRFDS2b/QBFoOPO8GjiLIkpN59GPK0EcqBhzcp2+Qhzbr+OO
vaI1E3kgbN3zk9TbRHvwPKvr4LrbjPaGnZTNszxvZSj5SeV48bDIBi74SnE3gv3N
0oh2yYUjovWgdaRw2q9eUnIJc7vTbhUMQBK/tDHTAXHDo2HWOWDHqNkBLDToTU12
bvGSkL0v/F4Hl8u8Md4nwUQxXY8FgtDB1/ffqZgALOH7ZSOwNuqV8TSAH4ywaFSE
dsKsVMWpmAocx02Z006UN21H7UGtPOjNHh5fdFkPPFnEGMSq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:32 2024 by rpki-client on console-fra.rpki-client.org