Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa
File:                     eMAbD24Z-k8KEb0osVgrE9LeL7g.roa (raw, json)
Hash identifier:          E8OyEG2fwlXWW1FuupYrAMnzpI+Pf+PeM0FYy1J3g9o=
Subject key identifier:   78:C0:1B:0F:6E:19:FA:4F:0A:11:BD:28:B1:58:2B:13:D2:DE:2F:B8
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       018B04A7715F73EB4D457E4D8EE3C3B0368F
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa
Signing time:             Fri 06 Oct 2023 11:02:44 +0000
ROA not before:           Fri 06 Oct 2023 11:02:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13213
IP address blocks:        213.21.231.0/24 maxlen: 24
                          213.21.238.0/24 maxlen: 24
                          213.21.244.0/24 maxlen: 24
                          213.21.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:04:a7:71:5f:73:eb:4d:45:7e:4d:8e:e3:c3:b0:36:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Oct  6 11:02:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78c01b0f6e19fa4f0a11bd28b1582b13d2de2fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:7e:b8:ab:00:c7:5a:47:b4:9b:42:72:fd:
                    21:ce:be:2f:cb:52:36:e2:a2:e1:9c:64:c1:40:d5:
                    c0:08:61:c6:67:64:b4:96:9a:79:e8:f4:c2:4f:7b:
                    63:36:e7:11:0b:5d:13:dc:a7:72:5c:70:dd:7e:d8:
                    29:ac:d3:42:4d:b7:5d:20:9a:a7:ea:2e:6c:c9:19:
                    a2:7b:19:4b:21:93:f7:bf:60:2f:cc:b5:7a:3d:3a:
                    1f:e8:d6:6b:f1:af:f6:61:06:b9:44:5a:72:6e:f0:
                    99:0e:ba:68:f7:17:a5:8e:e9:0a:2f:d3:00:69:3d:
                    07:74:66:48:c2:d6:f9:0f:87:f6:b0:f1:97:82:f6:
                    7e:fd:e8:ca:79:dc:30:9c:4e:b1:be:5a:d2:4c:1b:
                    55:7c:09:05:21:c6:c9:8e:00:bb:92:89:d7:a9:9e:
                    3a:b8:76:fc:30:c1:9c:19:7c:0c:d9:ed:9a:d7:ec:
                    30:0c:61:f9:eb:e2:09:eb:bf:b3:30:92:6c:35:94:
                    fa:e6:2c:aa:14:60:e2:45:ad:52:63:11:b0:cf:22:
                    79:66:74:3e:c6:5c:3a:95:ed:6e:4b:db:be:28:6c:
                    bb:27:da:7e:b4:26:b6:10:0c:cd:d4:bd:3e:65:21:
                    fb:28:9a:63:c3:f0:9b:f7:19:b5:40:09:f5:51:c8:
                    d2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:1B:0F:6E:19:FA:4F:0A:11:BD:28:B1:58:2B:13:D2:DE:2F:B8
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/eMAbD24Z-k8KEb0osVgrE9LeL7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.21.231.0/24
                  213.21.238.0/24
                  213.21.244.0/24
                  213.21.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3a:7a:42:ae:26:7e:83:d4:21:7f:36:6a:d7:b3:fd:12:6c:
         93:b7:f0:77:7e:0f:70:ce:08:a8:28:00:0d:5c:91:c0:85:92:
         af:f7:d3:c4:73:c7:71:6d:67:78:d8:c3:a6:24:f2:75:06:c0:
         50:c4:63:51:4f:eb:4c:69:b8:4d:f2:1b:a8:f7:ce:84:5a:57:
         69:3b:9d:51:36:db:5f:fd:1b:bd:e7:53:80:9b:9a:a4:14:c1:
         fd:7b:e3:76:79:dd:cd:fa:c3:c6:b3:1b:26:66:7e:f0:16:71:
         11:1e:df:c1:22:91:68:28:75:37:fb:df:bc:76:93:83:25:f1:
         5e:5b:d4:c6:4d:3d:b4:5b:4b:80:78:8a:cb:70:1c:dd:84:7a:
         48:3c:cc:4d:00:4b:84:2b:0e:3d:eb:1c:4c:e9:c9:b4:cf:09:
         d3:da:8a:b7:8c:ca:35:80:8d:35:29:a2:48:71:cd:92:f3:20:
         e4:72:73:bc:5c:36:14:a5:3a:3e:c6:00:86:74:1f:b5:e2:b4:
         98:81:23:07:ff:ef:b0:cb:b2:8e:d6:3d:e5:bc:9c:d8:fd:db:
         76:5c:f9:1f:9e:cf:7d:8c:28:ba:09:21:53:31:f8:49:ed:46:
         9a:26:02:5c:54:f0:72:0c:03:b4:1f:7d:e6:41:4a:cb:54:bc:
         67:10:16:09
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYsEp3Ffc+tNRX5NjuPDsDaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjMxMDA2MTEwMjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMwMWIwZjZlMTlmYTRmMGExMWJkMjhiMTU4MmIxM2QyZGUyZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaF+uKsAx1pHtJtCcv0hzr4vy1I2
4qLhnGTBQNXACGHGZ2S0lpp56PTCT3tjNucRC10T3KdyXHDdftgprNNCTbddIJqn
6i5syRmiexlLIZP3v2AvzLV6PTof6NZr8a/2YQa5RFpybvCZDrpo9xeljukKL9MA
aT0HdGZIwtb5D4f2sPGXgvZ+/ejKedwwnE6xvlrSTBtVfAkFIcbJjgC7konXqZ46
uHb8MMGcGXwM2e2a1+wwDGH56+IJ67+zMJJsNZT65iyqFGDiRa1SYxGwzyJ5ZnQ+
xlw6le1uS9u+KGy7J9p+tCa2EAzN1L0+ZSH7KJpjw/Cb9xm1QAn1UcjSFwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHjAGw9uGfpPChG9KLFYKxPS3i+4MB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvZU1BYkQyNFotazhLRWIwb3NWZ3JFOUxlTDdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQA1RXnAwQA
1RXuAwQA1RX0AwQA1RX4MA0GCSqGSIb3DQEBCwUAA4IBAQBrOnpCriZ+g9QhfzZq
17P9EmyTt/B3fg9wzgioKAANXJHAhZKv99PEc8dxbWd42MOmJPJ1BsBQxGNRT+tM
abhN8huo986EWldpO51RNttf/Ru951OAm5qkFMH9e+N2ed3N+sPGsxsmZn7wFnER
Ht/BIpFoKHU3+9+8dpODJfFeW9TGTT20W0uAeIrLcBzdhHpIPMxNAEuEKw496xxM
6cm0zwnT2oq3jMo1gI01KaJIcc2S8yDkcnO8XDYUpTo+xgCGdB+14rSYgSMH/++w
y7KO1j3lvJzY/dt2XPkfns99jCi6CSFTMfhJ7UaaJgJcVPByDAO0H33mQUrLVLxn
EBYJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org