Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa
File:                     6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa (raw, json)
Hash identifier:          2QykpcsNptz8fETuOTKHFB5Dd/H9WQnzziRHVaq9OLI=
Subject key identifier:   E8:50:9C:AD:BA:A8:C0:59:70:9F:EA:04:82:3F:DC:D9:D1:BD:F8:AB
Certificate issuer:       /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial:       0187E6E492427FA33809CF39F02A14682BF7
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa
Signing time:             Thu 04 May 2023 13:12:31 +0000
ROA not before:           Thu 04 May 2023 13:12:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31898
IP address blocks:        2001:67c:9f0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 07 May 2023 14:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e6:e4:92:42:7f:a3:38:09:cf:39:f0:2a:14:68:2b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
        Validity
            Not Before: May  4 13:12:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8509cadbaa8c059709fea04823fdcd9d1bdf8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:4c:e8:40:36:4c:70:b5:a7:1f:63:3a:0d:
                    6f:e8:99:07:d5:04:03:5e:48:2e:6b:59:23:1e:5d:
                    3d:29:cc:cc:6f:e5:c3:65:e6:0f:d7:c2:0c:ea:0b:
                    f3:8a:1b:a1:96:04:30:ad:d9:54:c4:d8:96:ee:9c:
                    b8:72:fd:02:ca:be:dc:f1:70:30:95:7f:13:ef:e7:
                    38:bb:c3:cf:51:3e:14:6f:db:57:3d:6b:f2:c1:24:
                    d3:12:82:13:6e:38:a5:e2:94:5e:95:2a:fa:83:d2:
                    83:64:f9:41:f7:0c:51:70:46:d1:31:3e:90:60:94:
                    a5:ce:df:d8:76:69:d7:9b:b4:e4:7c:ba:a8:2f:cd:
                    35:28:ca:e9:58:a2:30:2f:88:c5:c1:ce:5f:77:83:
                    4f:8a:8a:5e:61:0c:02:b8:56:98:0b:69:56:ac:6c:
                    8a:da:9c:5f:e3:21:fb:5d:bd:56:3c:b8:7b:9e:75:
                    27:6c:8b:f7:c0:51:8e:b2:c0:6a:15:ca:f9:3d:6a:
                    8d:fc:36:1d:20:00:53:fe:4c:7c:f3:4b:7d:e2:f9:
                    36:30:fa:09:c7:39:6c:39:cf:88:ee:99:87:63:53:
                    e1:85:96:84:d9:2a:bc:89:5c:64:ef:d6:e4:04:ed:
                    ad:d9:de:0b:26:d9:1a:68:bf:73:94:e5:d3:f9:92:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:9C:AD:BA:A8:C0:59:70:9F:EA:04:82:3F:DC:D9:D1:BD:F8:AB
            X509v3 Authority Key Identifier:
                keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/6FCcrbqowFlwn-oEgj_c2dG9-Ks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:9f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:8b:10:2e:3b:5a:4c:d7:95:85:f3:55:5b:83:af:28:cd:
         6c:ab:03:7b:88:a4:f1:09:f2:2c:bb:a7:3b:df:88:f1:08:4f:
         8c:c9:1d:4e:f4:71:1f:fb:87:2f:52:d6:e7:5c:3b:40:00:68:
         4c:6f:5d:6d:c0:78:7b:84:47:a7:72:b4:d9:00:51:52:3d:5e:
         5c:0d:d3:97:fa:5a:c0:1c:c8:2d:72:b0:a8:0b:9f:cf:33:64:
         43:d3:d0:3e:02:d7:cf:96:74:a9:6b:d1:cd:23:e6:bf:e8:f5:
         2f:d4:4b:c0:17:c8:ea:95:76:0f:79:15:58:31:be:1b:74:86:
         22:6a:06:46:52:21:8f:c6:b7:44:93:97:79:ac:d1:2e:2a:46:
         f7:04:e0:1c:68:b9:0f:70:68:2b:1f:e2:4d:4b:a5:ba:02:75:
         51:5d:b5:55:a1:f7:c3:3f:c4:2a:6b:e2:3c:19:e2:75:83:74:
         a1:02:5e:95:33:78:cd:35:30:fa:1a:5c:11:d9:c1:75:cd:45:
         a1:23:b0:43:5c:27:e0:59:32:50:ab:c3:9a:b9:44:27:6d:d0:
         bc:b5:4c:3c:dc:03:a1:67:89:65:4c:f5:d2:55:fc:a0:a2:d7:
         ff:36:7e:ec:8e:d4:11:76:8d:e7:d2:48:c7:80:a5:f7:2c:10:
         a5:88:25:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYfm5JJCf6M4Cc858CoUaCv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjljZmI5MTMwOWQ1ZDkxZmZjMzJiY2FmMDZjMzZiMDk3
NzI1NTcwHhcNMjMwNTA0MTMxMjMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODUwOWNhZGJhYThjMDU5NzA5ZmVhMDQ4MjNmZGNkOWQxYmRmOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dM6EA2THC1px9jOg1v6JkH1QQD
Xkgua1kjHl09KczMb+XDZeYP18IM6gvzihuhlgQwrdlUxNiW7py4cv0Cyr7c8XAw
lX8T7+c4u8PPUT4Ub9tXPWvywSTTEoITbjil4pRelSr6g9KDZPlB9wxRcEbRMT6Q
YJSlzt/YdmnXm7TkfLqoL801KMrpWKIwL4jFwc5fd4NPiopeYQwCuFaYC2lWrGyK
2pxf4yH7Xb1WPLh7nnUnbIv3wFGOssBqFcr5PWqN/DYdIABT/kx880t94vk2MPoJ
xzlsOc+I7pmHY1PhhZaE2Sq8iVxk79bkBO2t2d4LJtkaaL9zlOXT+ZIsvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOhQnK26qMBZcJ/qBII/3NnRvfirMB8GA1UdIwQY
MBaAFIC5z7kTCdXZH/wyvK8Gw2sJdyVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGIt
MjdiYjBiODg3NWE4LzEvNkZDY3JicW93Rmx3bi1vRWdqX2MyZEc5LUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mZDk0ODItOGNkMS00ODk5LThjZGItMjdiYjBiODg3NWE4
LzEvZ0xuUHVSTUoxZGtmX0RLOHJ3YkRhd2wzSlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAnw
MA0GCSqGSIb3DQEBCwUAA4IBAQBo6YsQLjtaTNeVhfNVW4OvKM1sqwN7iKTxCfIs
u6c734jxCE+MyR1O9HEf+4cvUtbnXDtAAGhMb11twHh7hEencrTZAFFSPV5cDdOX
+lrAHMgtcrCoC5/PM2RD09A+AtfPlnSpa9HNI+a/6PUv1EvAF8jqlXYPeRVYMb4b
dIYiagZGUiGPxrdEk5d5rNEuKkb3BOAcaLkPcGgrH+JNS6W6AnVRXbVVoffDP8Qq
a+I8GeJ1g3ShAl6VM3jNNTD6GlwR2cF1zUWhI7BDXCfgWTJQq8OauUQnbdC8tUw8
3AOhZ4llTPXSVfygotf/Nn7sjtQRdo3n0kjHgKX3LBCliCXI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:51 2024 by rpki-client on console-ams.rpki-client.org