Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/l56-Aw2GEVoGUMHubHzWIMlzOqU.roa
File:                     l56-Aw2GEVoGUMHubHzWIMlzOqU.roa (raw, json)
Hash identifier:          Jwis81AZVDEx0ndBZWGAuY65oyXCtiPycq5PZ+AaloM=
Subject key identifier:   97:9E:BE:03:0D:86:11:5A:06:50:C1:EE:6C:7C:D6:20:C9:73:3A:A5
Certificate issuer:       /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial:       0188BBCA3E1EA437801B323C344FE293407B
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/l56-Aw2GEVoGUMHubHzWIMlzOqU.roa
Signing time:             Wed 14 Jun 2023 21:22:53 +0000
ROA not before:           Wed 14 Jun 2023 21:22:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        213.145.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Jun 2023 14:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bb:ca:3e:1e:a4:37:80:1b:32:3c:34:4f:e2:93:40:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
        Validity
            Not Before: Jun 14 21:22:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=979ebe030d86115a0650c1ee6c7cd620c9733aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:cb:a0:7f:67:d3:83:ec:cb:65:07:dc:d9:
                    c9:74:71:b6:78:00:87:06:98:9a:81:75:11:9c:17:
                    b5:37:b9:f5:59:61:b9:a2:f7:bc:79:c0:21:d6:b4:
                    7b:00:7e:c0:7c:8a:aa:b8:21:79:3e:dc:3d:12:26:
                    e2:42:80:5d:61:f0:0f:6b:66:16:81:35:34:00:10:
                    76:da:fe:e5:ef:4c:2a:51:8b:49:24:0d:8b:49:3b:
                    4b:d6:9f:da:f3:41:2e:94:18:3b:40:ba:c4:d2:34:
                    4a:b6:81:cd:2d:59:3a:4a:19:97:88:13:11:12:32:
                    36:2b:7b:1a:57:50:f7:af:f9:00:20:01:b4:aa:cb:
                    ee:d6:13:ab:71:8a:9f:22:a8:96:11:8d:e1:44:fe:
                    fb:76:0d:de:46:7f:6a:6f:be:bf:9d:75:5d:fa:dc:
                    93:ee:37:c6:15:dd:f2:7f:a3:3d:2d:fa:4c:75:ef:
                    86:fe:9d:58:0f:76:2f:6b:32:eb:bd:cd:c8:8a:73:
                    9d:05:12:1b:48:16:33:16:d0:d3:a8:c3:97:b3:fb:
                    32:a4:e1:e1:cf:f4:ce:32:52:a7:38:5a:0c:b2:ac:
                    69:16:ff:2d:15:35:6a:18:1e:6f:ea:d5:7c:ed:ad:
                    53:02:03:de:f8:8c:32:3c:df:ad:25:29:e8:32:01:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:BE:03:0D:86:11:5A:06:50:C1:EE:6C:7C:D6:20:C9:73:3A:A5
            X509v3 Authority Key Identifier:
                keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/l56-Aw2GEVoGUMHubHzWIMlzOqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.145.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:60:2c:23:1d:6a:23:58:d5:91:0f:ba:c1:2e:7d:57:1d:a6:
         7a:f5:50:ca:1f:a8:c9:bd:ca:e3:10:d7:28:b7:a9:86:7e:ad:
         f1:f5:21:d2:26:98:a5:ba:08:ae:d4:78:db:35:4c:4e:d6:4f:
         e3:5d:20:15:19:16:af:9e:f0:87:93:89:6a:a4:0f:6f:fe:38:
         9e:ba:6f:22:39:b6:23:f5:55:d9:4d:8c:4c:8a:be:91:37:e9:
         12:64:91:8d:b8:74:d9:09:81:b5:88:be:ee:99:f8:c8:7d:b1:
         4c:73:3c:20:3c:18:b6:1f:91:f6:8a:3f:62:1b:40:ab:af:33:
         c4:4b:95:70:eb:8e:53:c8:41:c5:b1:1f:aa:7d:a2:bf:21:7b:
         c3:38:c0:00:f9:ed:7c:fb:6d:c4:16:2c:66:d0:43:25:84:0c:
         6f:90:cc:96:28:93:78:cc:ab:2d:35:ff:d9:60:5e:97:8b:b2:
         f4:97:26:bf:14:0c:03:4c:4a:ec:99:cf:8d:2b:90:ab:20:cb:
         e0:1c:02:ad:35:aa:5e:b5:9c:b7:89:f4:1b:ab:86:f9:27:67:
         2b:b6:b5:5f:26:b4:63:54:c4:93:05:f4:56:d0:dc:96:11:23:
         01:3c:61:4f:48:c2:7f:72:5b:ea:78:b2:70:32:ea:d4:15:06:
         e8:40:ee:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi7yj4epDeAGzI8NE/ik0B7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjMwNjE0MjEyMjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzllYmUwMzBkODYxMTVhMDY1MGMxZWU2YzdjZDYyMGM5NzMzYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVPLoH9n04Psy2UH3NnJdHG2eACH
BpiagXURnBe1N7n1WWG5ove8ecAh1rR7AH7AfIqquCF5Ptw9EibiQoBdYfAPa2YW
gTU0ABB22v7l70wqUYtJJA2LSTtL1p/a80EulBg7QLrE0jRKtoHNLVk6ShmXiBMR
EjI2K3saV1D3r/kAIAG0qsvu1hOrcYqfIqiWEY3hRP77dg3eRn9qb76/nXVd+tyT
7jfGFd3yf6M9LfpMde+G/p1YD3YvazLrvc3IinOdBRIbSBYzFtDTqMOXs/sypOHh
z/TOMlKnOFoMsqxpFv8tFTVqGB5v6tV87a1TAgPe+IwyPN+tJSnoMgH1rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeevgMNhhFaBlDB7mx81iDJczqlMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvbDU2LUF3MkdFVm9HVU1IdWJIeldJTWx6T3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFYMA0G
CSqGSIb3DQEBCwUAA4IBAQCVYCwjHWojWNWRD7rBLn1XHaZ69VDKH6jJvcrjENco
t6mGfq3x9SHSJpilugiu1HjbNUxO1k/jXSAVGRavnvCHk4lqpA9v/jieum8iObYj
9VXZTYxMir6RN+kSZJGNuHTZCYG1iL7umfjIfbFMczwgPBi2H5H2ij9iG0CrrzPE
S5Vw645TyEHFsR+qfaK/IXvDOMAA+e18+23EFixm0EMlhAxvkMyWKJN4zKstNf/Z
YF6Xi7L0lya/FAwDTErsmc+NK5CrIMvgHAKtNapetZy3ifQbq4b5J2crtrVfJrRj
VMSTBfRW0NyWESMBPGFPSMJ/clvqeLJwMurUFQboQO6D
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org