Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/n3Oo03QM5CamJyTaHVGxJIDt8XU.roa
File:                     n3Oo03QM5CamJyTaHVGxJIDt8XU.roa (raw, json)
Hash identifier:          44CSiD8mdTCyr/S+KPjGSFbskKSkogDS1izaFlDoIP0=
Subject key identifier:   9F:73:A8:D3:74:0C:E4:26:A6:27:24:DA:1D:51:B1:24:80:ED:F1:75
Certificate issuer:       /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial:       018BA8B156B9F672AE2557C5287D00340C4B
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/n3Oo03QM5CamJyTaHVGxJIDt8XU.roa
Signing time:             Tue 07 Nov 2023 07:31:16 +0000
ROA not before:           Tue 07 Nov 2023 07:31:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        160.214.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Dec 2023 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a8:b1:56:b9:f6:72:ae:25:57:c5:28:7d:00:34:0c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
        Validity
            Not Before: Nov  7 07:31:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f73a8d3740ce426a62724da1d51b12480edf175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:77:78:16:6e:45:cc:13:f0:59:33:8c:62:5b:
                    d6:63:7f:18:4e:ac:f8:4c:6a:0b:69:12:8a:1b:4f:
                    53:f6:db:de:fa:78:49:29:65:0f:85:54:6c:c2:27:
                    28:ef:1f:9b:9b:c5:e9:b8:2c:f3:7f:94:68:7b:7a:
                    5d:6c:2d:f3:00:46:fd:88:6c:15:c1:0d:67:5a:b6:
                    53:23:fc:d7:dc:35:6b:c8:55:56:fa:ab:24:fb:ba:
                    a7:35:98:62:c1:15:da:ed:c1:ed:c9:8b:ba:fc:3c:
                    93:3c:26:0e:a1:ba:e6:19:7e:cf:50:81:57:c3:aa:
                    b4:ce:75:b2:ec:b3:ad:1a:32:bc:ff:08:e5:c7:6c:
                    56:63:c2:00:f2:c7:0c:46:49:f4:16:8f:c3:2b:f5:
                    ae:e8:ee:84:a7:52:12:91:d8:3b:19:90:4b:53:15:
                    25:d8:4c:de:63:bb:b6:cc:50:54:2a:c2:d2:ea:cf:
                    83:be:31:b0:14:0a:1a:a1:e0:ed:80:97:16:e3:4a:
                    23:ed:6b:b7:6e:9d:d0:b4:e4:f4:f2:08:8c:42:27:
                    ab:b8:50:fc:39:08:4c:83:ff:e0:1c:56:a0:31:2c:
                    0b:8e:fe:ab:30:8d:58:19:13:db:5a:59:b4:af:7c:
                    1b:87:a8:7c:d2:fb:aa:f2:81:58:91:b1:0b:61:5e:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:A8:D3:74:0C:E4:26:A6:27:24:DA:1D:51:B1:24:80:ED:F1:75
            X509v3 Authority Key Identifier:
                keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/n3Oo03QM5CamJyTaHVGxJIDt8XU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.214.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5c:d7:b5:ca:c2:d4:41:56:de:86:36:44:88:ac:07:26:b3:
         49:dc:61:0b:d3:98:7d:ba:34:d6:c6:19:47:e7:d4:91:31:af:
         f0:e0:67:ea:2d:c8:f6:0a:e1:c4:67:dc:0f:4d:88:05:88:a0:
         3f:7d:4d:bc:74:93:d0:43:27:b6:6a:a3:aa:a6:51:5e:50:b0:
         ca:63:5a:53:82:7e:06:a1:75:76:56:06:40:0e:46:7d:e2:33:
         c5:eb:0b:cd:cb:02:e7:8d:2a:cc:71:6f:ac:a3:fd:cc:3a:d6:
         ec:f8:e2:25:08:94:d7:2a:85:ea:ba:5e:ad:59:aa:9f:76:03:
         b5:ad:cb:6d:40:6a:eb:b4:64:06:91:3e:53:3f:07:f0:19:2c:
         fa:de:08:1e:10:ab:e3:2c:25:97:e5:5f:1c:f1:de:de:aa:ac:
         56:22:c2:04:a4:e4:8d:72:00:d6:cb:3e:e4:0d:b8:bd:33:a6:
         a1:39:33:84:59:c6:56:c2:8a:8f:e9:2a:22:37:41:45:30:f9:
         bc:7b:b1:61:0d:8e:7c:9c:81:a9:07:88:e2:79:6b:ef:49:f2:
         2d:de:cf:cb:d9:c5:c2:85:4a:4c:9b:c3:34:88:84:5b:59:1f:
         31:ac:af:dd:77:2a:e8:37:27:7f:7d:b4:79:2c:28:9b:e1:ad:
         8b:3d:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:33 2024 by rpki-client on console-ams.rpki-client.org