Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/w2sY8D5vsWKSFVHxkMHZ72c7pfc.roa
File:                     w2sY8D5vsWKSFVHxkMHZ72c7pfc.roa (raw, json)
Hash identifier:          MgEDbo+E39HfIeMeolHIgvmK5QTBws8YIKk2XwBZWQQ=
Subject key identifier:   C3:6B:18:F0:3E:6F:B1:62:92:15:51:F1:90:C1:D9:EF:67:3B:A5:F7
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       018794864BE65D3297E382C1FE1123BB2B7F
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/w2sY8D5vsWKSFVHxkMHZ72c7pfc.roa
Signing time:             Tue 18 Apr 2023 13:20:41 +0000
ROA not before:           Tue 18 Apr 2023 13:20:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205320
IP address blocks:        185.167.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 May 2023 13:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:86:4b:e6:5d:32:97:e3:82:c1:fe:11:23:bb:2b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 18 13:20:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c36b18f03e6fb162921551f190c1d9ef673ba5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:a7:47:74:9d:68:3f:9e:6d:d6:2f:52:eb:
                    f6:2e:bd:c8:47:fe:10:3d:1a:2c:1a:50:5d:a5:4e:
                    5a:ff:d4:ce:e7:b8:b9:d4:b6:85:92:f2:4e:ce:b1:
                    75:cf:15:0a:4d:73:72:7c:30:45:02:ab:ac:53:42:
                    07:5d:96:ff:22:8b:c0:9d:98:bf:c2:fd:8b:56:13:
                    28:e4:69:a1:97:45:e4:b0:1e:b8:16:cb:35:85:26:
                    e3:12:5a:f1:22:a2:6e:38:98:79:2f:71:db:79:73:
                    82:09:03:4d:f0:3b:5a:20:d2:22:69:32:55:a5:61:
                    7c:e4:a7:ed:d2:f7:23:ad:a1:90:54:c7:49:45:cd:
                    60:6d:f2:5a:e0:a6:fc:9e:a1:0a:6c:6d:a1:85:dc:
                    f2:59:a4:b7:88:cc:73:c1:f5:bc:f0:05:34:26:64:
                    ea:85:af:83:e5:e8:4b:95:d0:ef:ee:08:64:35:36:
                    09:ab:9b:cd:2b:ad:f4:58:93:88:fa:a5:7c:ec:bb:
                    c3:34:de:2a:4d:82:0e:6a:c3:21:80:c8:1a:23:3f:
                    5d:dd:a3:ea:dd:58:66:5d:64:c1:7c:3b:08:0c:ec:
                    29:0c:50:8a:61:34:72:66:8b:a6:c8:a2:9c:ee:21:
                    58:b4:7e:87:4c:89:9d:f0:60:0b:0e:15:d7:2c:05:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:18:F0:3E:6F:B1:62:92:15:51:F1:90:C1:D9:EF:67:3B:A5:F7
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/w2sY8D5vsWKSFVHxkMHZ72c7pfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:23:1e:77:8b:e3:05:f2:b2:42:95:1c:23:c6:65:fa:ea:9d:
         52:48:1e:3d:71:09:e5:52:b2:3d:b9:4c:1d:1c:9e:72:d1:44:
         51:88:96:63:16:1f:4d:ec:ff:ba:7a:e7:86:8b:77:0f:60:ca:
         16:f5:f6:2b:c3:5f:87:b0:a4:dd:de:71:ce:43:05:1c:d1:19:
         9a:1a:f3:66:ce:38:8d:6c:f5:cc:46:26:c6:22:83:f0:49:09:
         f3:8c:29:27:79:72:52:f3:4a:41:3c:b8:a1:6e:73:d0:e3:1f:
         3f:c1:92:1e:96:a8:49:ea:b8:2f:15:ea:67:01:dd:b1:7d:7d:
         cb:eb:4b:81:37:5c:b3:8b:c4:6e:1d:49:ae:ef:f8:4a:c9:63:
         20:cf:d5:ff:e2:f8:45:16:4e:82:f4:fd:1d:48:35:e0:c9:c3:
         65:5c:fc:68:ce:7a:fb:f5:b7:a2:fe:49:e5:5c:3c:c0:68:70:
         65:56:6a:b7:35:43:d4:af:a8:2d:20:73:cf:74:aa:6c:77:7c:
         f2:44:80:9b:f7:86:92:44:c0:09:35:c3:7c:5c:a3:9a:f4:81:
         79:45:23:44:70:0c:da:fa:44:88:8c:50:7d:6e:56:14:78:b0:
         a3:19:5a:ed:85:24:90:04:18:64:21:d0:aa:4f:a7:df:bb:3d:
         bf:87:42:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeUhkvmXTKX44LB/hEjuyt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjMwNDE4MTMyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzZiMThmMDNlNmZiMTYyOTIxNTUxZjE5MGMxZDllZjY3M2JhNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0KnR3SdaD+ebdYvUuv2Lr3IR/4Q
PRosGlBdpU5a/9TO57i51LaFkvJOzrF1zxUKTXNyfDBFAqusU0IHXZb/IovAnZi/
wv2LVhMo5Gmhl0XksB64Fss1hSbjElrxIqJuOJh5L3HbeXOCCQNN8DtaINIiaTJV
pWF85Kft0vcjraGQVMdJRc1gbfJa4Kb8nqEKbG2hhdzyWaS3iMxzwfW88AU0JmTq
ha+D5ehLldDv7ghkNTYJq5vNK630WJOI+qV87LvDNN4qTYIOasMhgMgaIz9d3aPq
3VhmXWTBfDsIDOwpDFCKYTRyZoumyKKc7iFYtH6HTImd8GALDhXXLAXZ/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNrGPA+b7FikhVR8ZDB2e9nO6X3MB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvdzJzWThENXZzV0tTRlZIeGtNSFo3MmM3cGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafpMA0G
CSqGSIb3DQEBCwUAA4IBAQC+Ix53i+MF8rJClRwjxmX66p1SSB49cQnlUrI9uUwd
HJ5y0URRiJZjFh9N7P+6eueGi3cPYMoW9fYrw1+HsKTd3nHOQwUc0RmaGvNmzjiN
bPXMRibGIoPwSQnzjCkneXJS80pBPLihbnPQ4x8/wZIelqhJ6rgvFepnAd2xfX3L
60uBN1yzi8RuHUmu7/hKyWMgz9X/4vhFFk6C9P0dSDXgycNlXPxoznr79bei/knl
XDzAaHBlVmq3NUPUr6gtIHPPdKpsd3zyRICb94aSRMAJNcN8XKOa9IF5RSNEcAza
+kSIjFB9blYUeLCjGVrthSSQBBhkIdCqT6ffuz2/h0Ll
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org