Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/xhhYkj9zmJyPtprdnVu_Bi2wbSk.roa
File:                     xhhYkj9zmJyPtprdnVu_Bi2wbSk.roa (raw, json)
Hash identifier:          aF/mCaU7DB1bP8Ti5rbaL95MzCg6pFbjNxPzRS/ouXA=
Subject key identifier:   C6:18:58:92:3F:73:98:9C:8F:B6:9A:DD:9D:5B:BF:06:2D:B0:6D:29
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       01892B99C2876C94EB54812975FF2CD20FC1
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/xhhYkj9zmJyPtprdnVu_Bi2wbSk.roa
Signing time:             Thu 06 Jul 2023 14:27:24 +0000
ROA not before:           Thu 06 Jul 2023 14:27:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        103.112.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 19:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2b:99:c2:87:6c:94:eb:54:81:29:75:ff:2c:d2:0f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Jul  6 14:27:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c61858923f73989c8fb69add9d5bbf062db06d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:55:7b:66:c0:e3:dd:69:ef:00:d8:8c:39:
                    78:4f:dd:db:cd:02:de:53:bd:8d:66:f3:1c:02:aa:
                    fa:d2:db:5d:04:27:f8:ef:44:15:a1:fa:d9:e3:d3:
                    1d:f2:81:16:a4:d0:bd:d2:79:c2:b5:a7:f5:34:e4:
                    88:47:39:8f:e2:79:ec:a4:08:1f:5b:24:31:ad:a7:
                    20:28:4c:ed:8d:68:2e:bc:76:c0:db:d7:93:d3:cc:
                    34:83:3c:74:04:5d:98:4b:86:10:f5:95:30:27:5c:
                    a0:d9:46:0b:1f:ce:70:93:84:8d:1d:af:65:92:e9:
                    8c:66:e1:3a:b7:5c:c7:79:26:e6:d6:a4:71:40:05:
                    1e:b7:99:35:e2:3d:46:e6:3a:6f:9c:f6:3d:d3:b6:
                    37:cd:ae:c5:db:55:dc:33:60:c4:f4:f0:40:80:4f:
                    df:89:59:8e:2b:ec:e6:af:e2:9f:87:77:66:88:af:
                    69:a0:46:46:16:2c:f2:f1:70:15:f6:2c:2f:b4:29:
                    01:41:94:00:b1:42:1e:12:7f:d3:b3:12:64:82:ec:
                    74:ef:22:da:0d:d6:f9:6d:b8:8b:e0:44:a5:cb:bc:
                    57:bd:e9:46:de:6a:78:81:d5:0a:43:95:21:50:33:
                    c4:5b:34:f0:be:65:53:b7:9c:8d:c6:e5:3d:89:9d:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:58:92:3F:73:98:9C:8F:B6:9A:DD:9D:5B:BF:06:2D:B0:6D:29
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/xhhYkj9zmJyPtprdnVu_Bi2wbSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:30:58:30:72:49:84:98:b8:8f:85:af:8d:0e:ee:d6:b5:
         4c:08:34:6b:00:5d:00:31:5e:19:ea:fc:ef:4e:1b:02:c2:14:
         3e:01:30:81:a5:38:de:98:fa:13:6d:ba:97:f4:d3:d3:a1:32:
         4d:8e:08:9a:6b:cd:d7:b6:00:3e:f2:a5:4f:c4:3c:42:41:4b:
         61:e7:be:72:96:9f:36:03:18:c2:f9:5d:10:44:2a:60:d3:64:
         f8:a8:61:9c:c5:61:ca:bf:53:ae:09:74:11:4e:69:d6:9f:83:
         95:cb:f3:3f:40:39:cf:08:34:7c:56:71:99:3b:9f:ef:bd:f8:
         c9:cc:b7:3c:67:90:64:6e:95:50:22:cf:25:ef:6b:cc:0f:54:
         93:7d:14:c9:5f:f9:50:da:7b:2a:5b:b6:dd:10:27:73:3d:ec:
         a7:00:76:c3:c9:ef:f8:2c:b2:47:17:0f:b2:50:77:7e:2f:a1:
         b2:07:49:81:a9:4a:dc:5c:a2:b2:ce:f9:92:8d:67:e3:c0:d6:
         ca:73:b2:7e:27:e1:8b:06:d3:4a:dd:93:d3:ba:c0:a0:d0:35:
         05:e1:f1:71:a3:80:5b:15:8d:ae:37:41:4f:ac:52:85:f1:f6:
         9c:ae:b1:cf:5f:3c:94:ad:04:cd:8b:9b:89:6f:1d:fd:76:4c:
         d3:7e:79:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkrmcKHbJTrVIEpdf8s0g/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2VmMzdmM2RjZDYwN2Y5ODcxZDIzOTUwMmJhZGJmOWI1
NmJjNTcwHhcNMjMwNzA2MTQyNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjE4NTg5MjNmNzM5ODljOGZiNjlhZGQ5ZDViYmYwNjJkYjA2ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp1Ve2bA491p7wDYjDl4T93bzQLe
U72NZvMcAqr60ttdBCf470QVofrZ49Md8oEWpNC90nnCtaf1NOSIRzmP4nnspAgf
WyQxracgKEztjWguvHbA29eT08w0gzx0BF2YS4YQ9ZUwJ1yg2UYLH85wk4SNHa9l
kumMZuE6t1zHeSbm1qRxQAUet5k14j1G5jpvnPY907Y3za7F21XcM2DE9PBAgE/f
iVmOK+zmr+Kfh3dmiK9poEZGFizy8XAV9iwvtCkBQZQAsUIeEn/TsxJkgux07yLa
Ddb5bbiL4ESly7xXvelG3mp4gdUKQ5UhUDPEWzTwvmVTt5yNxuU9iZ36VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMYYWJI/c5icj7aa3Z1bvwYtsG0pMB8GA1UdIwQY
MBaAFCZ+8389zWB/mHHSOVArrb+bVrxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUt
MzYyOGYwNmRiY2M3LzEveGhoWWtqOXptSnlQdHByZG5WdV9CaTJ3YlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9kZWExM2QtNmRmZS00ZDliLTllZjUtMzYyOGYwNmRiY2M3
LzEvSm43emZ6M05ZSC1ZY2RJNVVDdXR2NXRXdkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3A8MA0G
CSqGSIb3DQEBCwUAA4IBAQBiHjBYMHJJhJi4j4WvjQ7u1rVMCDRrAF0AMV4Z6vzv
ThsCwhQ+ATCBpTjemPoTbbqX9NPToTJNjgiaa83XtgA+8qVPxDxCQUth575ylp82
AxjC+V0QRCpg02T4qGGcxWHKv1OuCXQRTmnWn4OVy/M/QDnPCDR8VnGZO5/vvfjJ
zLc8Z5BkbpVQIs8l72vMD1STfRTJX/lQ2nsqW7bdECdzPeynAHbDye/4LLJHFw+y
UHd+L6GyB0mBqUrcXKKyzvmSjWfjwNbKc7J+J+GLBtNK3ZPTusCg0DUF4fFxo4Bb
FY2uN0FPrFKF8facrrHPXzyUrQTNi5uJbx39dkzTfnmg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:17 2024 by rpki-client on console-ams.rpki-client.org