Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa
File:                     E4eOxviR1gLoHK7pcDgc8k-WjAA.roa (raw, json)
Hash identifier:          356DxlQbwYH9ug7JLANzuZyo+wSDHoG6CdAEqDwLkbA=
Subject key identifier:   13:87:8E:C6:F8:91:D6:02:E8:1C:AE:E9:70:38:1C:F2:4F:96:8C:00
Certificate issuer:       /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial:       01856E666BB74CCF71CBE401D3FBAEDFEC23
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa
Signing time:             Sun 01 Jan 2023 17:34:44 +0000
ROA not before:           Sun 01 Jan 2023 17:34:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        2001:67c:b08::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:66:6b:b7:4c:cf:71:cb:e4:01:d3:fb:ae:df:ec:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
        Validity
            Not Before: Jan  1 17:34:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13878ec6f891d602e81caee970381cf24f968c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:72:a8:07:3f:81:a0:9b:48:e4:fd:67:c8:
                    e0:db:af:da:07:31:69:db:58:26:b0:41:8c:e3:16:
                    82:b1:d0:97:ed:44:31:19:f4:3d:ba:9b:3e:00:54:
                    42:f6:f1:a4:64:2e:c2:bf:30:d1:8b:b9:ee:c2:ba:
                    26:d5:e3:2b:61:cf:1d:34:4d:f4:5f:cc:e4:54:86:
                    b0:12:bb:78:66:76:8f:57:65:ec:11:65:7d:d5:9c:
                    4c:62:74:97:34:68:fd:6a:78:ba:25:5a:bb:61:08:
                    26:b2:14:ca:50:1e:7c:82:bb:15:b1:c2:d9:ca:e6:
                    eb:27:78:4e:aa:90:87:52:2e:19:2a:57:d6:11:21:
                    ac:e7:bc:36:bb:8f:5d:dc:18:0c:6e:50:13:d9:81:
                    c2:60:f4:1e:e5:40:31:5c:7b:f5:90:37:4c:0d:8d:
                    c2:ef:8f:3c:de:54:a7:aa:c5:a0:c3:81:32:4c:52:
                    6c:81:09:8f:51:64:c5:a5:af:ca:6a:72:ee:45:4f:
                    01:7a:0e:d4:02:33:30:87:08:87:95:e3:35:af:bf:
                    9b:ae:b3:46:31:54:0f:87:99:ec:1a:22:b2:de:2f:
                    12:69:e4:f3:ca:cf:3c:ff:ce:69:dc:e9:39:59:69:
                    44:c1:44:b3:68:20:ba:12:ba:9a:0e:ba:7d:a1:b7:
                    8a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:8E:C6:F8:91:D6:02:E8:1C:AE:E9:70:38:1C:F2:4F:96:8C:00
            X509v3 Authority Key Identifier:
                keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:b08::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:96:0c:d0:c8:20:78:bb:eb:ce:a5:f1:9f:c5:26:e9:c8:0d:
         dd:02:d2:13:20:60:b0:d3:60:ad:3a:fb:2e:5d:56:7c:32:82:
         d5:1e:c8:19:51:91:b5:d6:6a:65:68:11:50:28:57:ab:4d:65:
         f3:5f:27:a0:88:ce:8d:89:83:99:70:e7:8b:82:e3:c3:ef:25:
         2c:60:4a:dd:09:e0:83:4d:df:1f:86:a0:78:c9:c6:68:00:a9:
         e9:ac:2f:60:99:9b:03:3f:81:8c:f0:52:66:36:7a:11:24:fa:
         b4:78:79:cb:6a:c2:b2:9a:88:3a:60:81:03:98:44:58:d9:e3:
         df:9d:43:6a:56:d2:2e:42:69:53:3a:ad:db:14:40:ff:c3:4e:
         71:83:74:50:f8:29:90:5f:da:0f:46:c1:6f:62:51:24:e6:c0:
         2e:e7:e2:76:31:41:fa:ad:58:34:81:ab:20:18:7d:d2:59:19:
         df:10:f2:83:80:b7:ce:49:e9:c2:6b:9a:e2:a9:81:16:8a:15:
         e9:27:c4:11:a7:2e:f6:d0:27:e1:21:e1:f0:d6:c8:19:74:1d:
         0c:a9:aa:9f:9a:3a:34:ef:1e:53:d8:94:f3:83:48:01:ff:d8:
         74:ae:a2:5e:28:5a:95:aa:06:a6:6d:0a:b9:cc:76:4d:df:41:
         45:84:64:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVuZmu3TM9xy+QB0/uu3+wjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzY0MTExYWVmZmE4NmJkMWVjM2NhODg1YjYzZGU3ZjU2
NTBmNmUwHhcNMjMwMTAxMTczNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzg3OGVjNmY4OTFkNjAyZTgxY2FlZTk3MDM4MWNmMjRmOTY4YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhlyqAc/gaCbSOT9Z8jg26/aBzFp
21gmsEGM4xaCsdCX7UQxGfQ9ups+AFRC9vGkZC7CvzDRi7nuwrom1eMrYc8dNE30
X8zkVIawErt4ZnaPV2XsEWV91ZxMYnSXNGj9ani6JVq7YQgmshTKUB58grsVscLZ
yubrJ3hOqpCHUi4ZKlfWESGs57w2u49d3BgMblAT2YHCYPQe5UAxXHv1kDdMDY3C
74883lSnqsWgw4EyTFJsgQmPUWTFpa/KanLuRU8Beg7UAjMwhwiHleM1r7+brrNG
MVQPh5nsGiKy3i8SaeTzys88/85p3Ok5WWlEwUSzaCC6ErqaDrp9obeKnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBOHjsb4kdYC6Byu6XA4HPJPlowAMB8GA1UdIwQY
MBaAFOt2QRGu/6hr0ew8qIW2Pef1ZQ9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgt
YjI4ODQ4ODhhZDNmLzEvRTRlT3h2aVIxZ0xvSEs3cGNEZ2M4ay1XakFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wM2IxZTctMzExMy00OGQ2LTliNzgtYjI4ODQ4ODhhZDNm
LzEvNjNaQkVhN19xR3ZSN0R5b2hiWTk1X1ZsRDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAsI
MA0GCSqGSIb3DQEBCwUAA4IBAQAolgzQyCB4u+vOpfGfxSbpyA3dAtITIGCw02Ct
OvsuXVZ8MoLVHsgZUZG11mplaBFQKFerTWXzXyegiM6NiYOZcOeLguPD7yUsYErd
CeCDTd8fhqB4ycZoAKnprC9gmZsDP4GM8FJmNnoRJPq0eHnLasKymog6YIEDmERY
2ePfnUNqVtIuQmlTOq3bFED/w05xg3RQ+CmQX9oPRsFvYlEk5sAu5+J2MUH6rVg0
gasgGH3SWRnfEPKDgLfOSenCa5riqYEWihXpJ8QRpy720CfhIeHw1sgZdB0Mqaqf
mjo07x5T2JTzg0gB/9h0rqJeKFqVqgambQq5zHZN30FFhGSH
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:25 2024 by rpki-client on console-fra.rpki-client.org