Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/eoWwR_u9tNqhto5YIHZBbmcIEH8.roa
File:                     eoWwR_u9tNqhto5YIHZBbmcIEH8.roa (raw, json)
Hash identifier:          JbXbhnjPKBtzulXGbZFXQZnXjRiZPWgZ6rjnFXe/YTo=
Subject key identifier:   7A:85:B0:47:FB:BD:B4:DA:A1:B6:8E:58:20:76:41:6E:67:08:10:7F
Certificate issuer:       /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial:       018B2086523156D5C10F235E5CD2059608FB
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/eoWwR_u9tNqhto5YIHZBbmcIEH8.roa
Signing time:             Wed 11 Oct 2023 20:55:55 +0000
ROA not before:           Wed 11 Oct 2023 20:55:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197644
IP address blocks:        212.64.199.0/24 maxlen: 24
                          212.64.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 15:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:20:86:52:31:56:d5:c1:0f:23:5e:5c:d2:05:96:08:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
        Validity
            Not Before: Oct 11 20:55:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a85b047fbbdb4daa1b68e582076416e6708107f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:ea:c7:e8:e2:2e:6d:ab:a0:43:45:0f:12:
                    d0:72:5f:a2:be:be:70:01:c1:bc:f7:31:57:2b:2f:
                    1a:c1:6e:ff:e6:08:b7:04:dd:82:48:93:28:c4:3d:
                    c5:d5:79:e9:15:7e:e7:26:39:24:b6:b7:c3:5d:73:
                    c4:6c:75:1d:3d:31:72:64:ce:bc:7b:b8:e5:3e:a1:
                    e1:b9:a5:d6:f5:1e:51:46:4f:fd:ea:3b:1c:45:d8:
                    ac:1b:f0:b9:39:c1:21:79:7e:41:27:95:d5:b7:30:
                    af:2f:0e:09:94:bc:02:48:00:da:03:75:85:4d:d6:
                    00:a4:3d:b5:51:71:fb:a5:6e:dd:76:b4:39:b0:5c:
                    78:7f:a3:59:b6:d7:2d:28:8b:f5:6c:e0:81:24:14:
                    b6:93:ff:bd:86:51:af:7f:21:1a:e2:cc:dd:dc:2f:
                    31:16:02:81:0d:67:02:bd:34:12:38:7a:8c:7b:2b:
                    df:87:15:0e:3b:ed:96:2f:51:cb:74:38:ee:a0:f4:
                    f6:c1:5d:be:b1:40:2a:c7:62:84:f2:24:ec:f4:4f:
                    9c:9c:39:bc:88:ae:d6:69:76:ce:54:8b:34:e6:dd:
                    67:33:2c:de:63:47:c1:5f:32:39:d6:93:c8:21:b9:
                    eb:f0:41:ed:28:1b:0a:a1:18:47:38:25:20:c8:f4:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:B0:47:FB:BD:B4:DA:A1:B6:8E:58:20:76:41:6E:67:08:10:7F
            X509v3 Authority Key Identifier:
                keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/eoWwR_u9tNqhto5YIHZBbmcIEH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.64.199.0/24
                  212.64.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:e6:ed:98:81:9d:d7:53:8b:05:ec:ba:87:f5:68:82:47:
         04:00:92:0b:83:45:35:8b:f0:8d:27:c7:be:6f:b6:dd:d6:83:
         c4:f7:c8:0d:ff:7e:4d:a2:f3:6c:06:84:74:6f:65:21:43:41:
         6a:cb:bb:1e:eb:fe:99:ef:20:c2:e7:ec:32:a5:8c:01:8c:54:
         4a:f3:88:f5:70:14:cb:02:a4:42:e6:bc:18:c4:e2:13:85:2b:
         02:80:f6:b4:e6:4a:3e:5a:57:c9:ab:23:d7:90:b2:4a:5f:0d:
         c3:16:32:f8:3e:95:3a:b5:96:45:98:80:e4:dd:fa:f5:a5:33:
         2c:64:29:4a:a1:86:93:41:78:21:a9:4e:bd:f1:dc:9b:a3:94:
         0d:60:10:48:60:41:15:e6:e7:0e:36:05:77:5a:6a:3d:aa:a9:
         cd:82:ac:53:45:7a:bd:f8:4f:db:aa:b1:d1:f4:a0:45:84:b0:
         e8:52:90:e1:01:ee:16:72:2e:61:88:f9:06:9e:4e:e1:ed:c0:
         9e:b8:bf:12:1f:93:00:68:3b:bd:66:16:c2:6f:04:e7:06:3c:
         0b:b9:41:be:f7:51:38:6f:be:8d:d1:40:b9:a2:bb:80:1e:ec:
         8d:56:b7:83:b5:21:8d:17:60:12:88:85:a6:77:5d:57:97:42:
         45:42:32:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsghlIxVtXBDyNeXNIFlgj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl
NWY0YjkwHhcNMjMxMDExMjA1NTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg1YjA0N2ZiYmRiNGRhYTFiNjhlNTgyMDc2NDE2ZTY3MDgxMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDDqx+jiLm2roENFDxLQcl+ivr5w
AcG89zFXKy8awW7/5gi3BN2CSJMoxD3F1XnpFX7nJjkktrfDXXPEbHUdPTFyZM68
e7jlPqHhuaXW9R5RRk/96jscRdisG/C5OcEheX5BJ5XVtzCvLw4JlLwCSADaA3WF
TdYApD21UXH7pW7ddrQ5sFx4f6NZttctKIv1bOCBJBS2k/+9hlGvfyEa4szd3C8x
FgKBDWcCvTQSOHqMeyvfhxUOO+2WL1HLdDjuoPT2wV2+sUAqx2KE8iTs9E+cnDm8
iK7WaXbOVIs05t1nMyzeY0fBXzI51pPIIbnr8EHtKBsKoRhHOCUgyPSCdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHqFsEf7vbTaobaOWCB2QW5nCBB/MB8GA1UdIwQY
MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt
NDRhYjdhOWQ3ZGVhLzEvZW9Xd1JfdTl0TnFodG81WUlIWkJibWNJRUg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh
LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EDHAwQA
1EDJMA0GCSqGSIb3DQEBCwUAA4IBAQAKs+btmIGd11OLBey6h/VogkcEAJILg0U1
i/CNJ8e+b7bd1oPE98gN/35NovNsBoR0b2UhQ0Fqy7se6/6Z7yDC5+wypYwBjFRK
84j1cBTLAqRC5rwYxOIThSsCgPa05ko+WlfJqyPXkLJKXw3DFjL4PpU6tZZFmIDk
3fr1pTMsZClKoYaTQXghqU698dybo5QNYBBIYEEV5ucONgV3Wmo9qqnNgqxTRXq9
+E/bqrHR9KBFhLDoUpDhAe4Wci5hiPkGnk7h7cCeuL8SH5MAaDu9ZhbCbwTnBjwL
uUG+91E4b76N0UC5oruAHuyNVreDtSGNF2ASiIWmd11Xl0JFQjIt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org