Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t6WYibKwV-3oXiKEqD06A2ZkJ-I.roa
File:                     t6WYibKwV-3oXiKEqD06A2ZkJ-I.roa (raw, json)
Hash identifier:          h8FF+2vYITTSbB3knJZFdA0rGxAnzX+Jw2jmPhCjVY8=
Subject key identifier:   B7:A5:98:89:B2:B0:57:ED:E8:5E:22:84:A8:3D:3A:03:66:64:27:E2
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       018CC9BAA281089B455279E0473E6112EA95
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t6WYibKwV-3oXiKEqD06A2ZkJ-I.roa
Signing time:             Tue 02 Jan 2024 10:31:40 +0000
ROA not before:           Tue 02 Jan 2024 10:31:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        178.253.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 04 Feb 2024 19:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:ba:a2:81:08:9b:45:52:79:e0:47:3e:61:12:ea:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jan  2 10:31:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7a59889b2b057ede85e2284a83d3a03666427e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:b4:29:d4:36:d2:8f:13:e4:65:60:b7:38:
                    ec:df:e7:f3:8a:59:9e:cc:0e:3f:95:30:91:17:39:
                    88:b0:d2:a7:48:8d:07:4a:e4:18:7a:31:d3:59:cd:
                    84:e7:7a:47:f2:13:06:58:a2:66:84:a1:a1:0e:76:
                    9d:9d:0c:17:c5:cd:3d:96:17:93:cf:34:b0:f6:cc:
                    13:15:d9:35:60:5a:b2:67:2c:77:40:bc:9f:29:3b:
                    ec:34:59:13:2a:01:bf:53:b1:55:f9:0d:a3:ad:8b:
                    43:1d:32:01:bf:da:6f:35:8b:37:38:b4:c8:ea:45:
                    7a:d9:52:63:a2:1d:6d:5b:25:40:45:7a:bd:e6:a6:
                    af:90:41:b1:7b:09:aa:66:f1:99:ee:c7:98:7e:c2:
                    46:b3:19:af:ba:c5:42:5b:12:66:4b:eb:61:40:0a:
                    16:2a:a1:47:32:11:f8:5f:bf:df:c2:d6:7f:7f:e4:
                    84:c0:f2:b1:84:43:e1:f2:7a:4c:64:1a:82:f6:d8:
                    b4:5e:cc:27:e6:87:67:2d:ca:45:09:6a:ae:cf:92:
                    ea:5b:19:25:68:98:80:51:cc:99:7d:69:89:d7:02:
                    da:ef:75:bc:5b:cd:38:c2:75:66:5b:e3:03:5f:ba:
                    54:7b:bd:4e:0e:3c:d9:d6:e0:e8:0a:41:c3:df:87:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A5:98:89:B2:B0:57:ED:E8:5E:22:84:A8:3D:3A:03:66:64:27:E2
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t6WYibKwV-3oXiKEqD06A2ZkJ-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:ce:8a:e1:b5:f1:49:03:49:7c:65:b6:4e:27:e3:e9:44:
         6c:dc:51:bd:dd:83:0f:fd:4c:03:61:d6:34:d6:a9:70:5c:ad:
         64:85:f5:c6:ac:77:b9:e6:74:5e:4c:50:79:f8:48:91:83:e0:
         0a:ce:b7:65:6c:86:e8:15:e0:e5:8e:8d:5c:f7:95:ac:04:4b:
         43:06:74:cf:b7:8f:57:2c:56:75:7d:7f:7c:f6:90:19:85:2d:
         03:df:4f:ce:8e:b9:85:c0:ca:d6:8f:18:2b:c3:6e:a4:ad:ed:
         c6:8b:d1:18:0f:87:cc:97:8c:7b:91:fc:e7:f7:cb:af:93:c1:
         d2:85:9c:c0:06:5a:8a:fe:b9:80:8a:ac:33:91:03:ab:d6:e1:
         d1:31:1e:c4:b4:82:2d:e3:2f:ed:ad:2c:77:21:40:6c:98:a7:
         12:6f:ce:d7:c9:c4:29:2a:df:39:d0:fb:bb:1b:2d:21:10:14:
         92:82:83:e6:e1:bb:10:4a:13:ff:f9:57:24:20:db:b8:81:30:
         1e:3b:75:14:d2:33:f2:90:a4:23:2a:61:7a:7f:19:a2:34:d1:
         28:1b:fc:93:9f:a4:d3:ef:63:d3:56:eb:5a:b0:06:f4:64:91:
         e3:2b:ec:49:67:a0:fe:78:1a:1f:af:a8:de:a4:9a:73:10:62:
         38:1e:3c:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJuqKBCJtFUnngRz5hEuqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMTAyMTAzMTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2E1OTg4OWIyYjA1N2VkZTg1ZTIyODRhODNkM2EwMzY2NjQyN2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnq0KdQ20o8T5GVgtzjs3+fzilme
zA4/lTCRFzmIsNKnSI0HSuQYejHTWc2E53pH8hMGWKJmhKGhDnadnQwXxc09lheT
zzSw9swTFdk1YFqyZyx3QLyfKTvsNFkTKgG/U7FV+Q2jrYtDHTIBv9pvNYs3OLTI
6kV62VJjoh1tWyVARXq95qavkEGxewmqZvGZ7seYfsJGsxmvusVCWxJmS+thQAoW
KqFHMhH4X7/fwtZ/f+SEwPKxhEPh8npMZBqC9ti0Xswn5odnLcpFCWquz5LqWxkl
aJiAUcyZfWmJ1wLa73W8W804wnVmW+MDX7pUe71ODjzZ1uDoCkHD34dbSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLelmImysFft6F4ihKg9OgNmZCfiMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvdDZXWWliS3dWLTNvWGlLRXFEMDZBMlprSi1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv0QMA0G
CSqGSIb3DQEBCwUAA4IBAQBbaM6K4bXxSQNJfGW2Tifj6URs3FG93YMP/UwDYdY0
1qlwXK1khfXGrHe55nReTFB5+EiRg+AKzrdlbIboFeDljo1c95WsBEtDBnTPt49X
LFZ1fX989pAZhS0D30/OjrmFwMrWjxgrw26kre3Gi9EYD4fMl4x7kfzn98uvk8HS
hZzABlqK/rmAiqwzkQOr1uHRMR7EtIIt4y/trSx3IUBsmKcSb87XycQpKt850Pu7
Gy0hEBSSgoPm4bsQShP/+VckINu4gTAeO3UU0jPykKQjKmF6fxmiNNEoG/yTn6TT
72PTVutasAb0ZJHjK+xJZ6D+eBofr6jepJpzEGI4HjxJ
Generated at Sun Feb 4 21:01:49 2024 by rpki-client on console-fra.rpki-client.org