Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa
File:                     HUH1nreA4IgKOpNmJXSpAfA7yRU.roa (raw, json)
Hash identifier:          obcmH1WVixjQBSpeoq+dAgVwZmgNMldHTy7aVj0e7cs=
Subject key identifier:   1D:41:F5:9E:B7:80:E0:88:0A:3A:93:66:25:74:A9:01:F0:3B:C9:15
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       0185714C1324DF07C912BC46F398651D184F
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa
Signing time:             Mon 02 Jan 2023 07:04:49 +0000
ROA not before:           Mon 02 Jan 2023 07:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        2a12:3e80:300::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 05 Feb 2023 16:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:4c:13:24:df:07:c9:12:bc:46:f3:98:65:1d:18:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Jan  2 07:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d41f59eb780e0880a3a93662574a901f03bc915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:28:fa:6d:11:7d:2c:ca:a4:d5:15:f5:07:
                    1e:81:df:b6:b6:c1:43:bb:20:85:7a:7c:78:3b:a0:
                    8f:0a:86:28:7b:28:69:75:9a:95:49:e6:88:4a:02:
                    ea:95:67:1e:d7:ad:97:dc:d2:80:5a:02:72:23:c0:
                    c6:43:a2:54:d0:3c:cb:41:a9:39:94:94:c4:2a:50:
                    98:97:66:c9:5d:2c:56:4b:e7:31:7c:5e:d5:08:16:
                    c2:5d:82:12:8a:e7:b5:66:58:cd:ac:54:45:32:8e:
                    9a:31:7f:d9:b2:65:12:12:34:f4:f7:34:30:73:94:
                    07:aa:65:34:2a:c6:03:22:1d:1f:92:29:2c:82:ac:
                    85:fc:03:89:df:18:bf:c7:fb:da:cd:5a:0b:3a:8e:
                    15:e1:10:3c:f2:56:1b:a7:bb:a9:d7:5f:10:6c:c1:
                    68:7b:59:4a:6e:6c:9c:4f:21:94:c6:b6:8d:63:3c:
                    1a:ee:ae:bb:56:9e:be:60:7a:b3:28:13:6b:ec:72:
                    e8:97:1b:ff:f6:5c:b8:9c:f2:e7:47:67:37:c4:a1:
                    68:8d:26:3a:3b:80:4d:06:7e:6e:92:3a:14:97:f3:
                    40:d6:c4:db:73:98:d0:54:59:45:ab:7a:c1:42:90:
                    6d:66:22:de:34:9b:e3:bb:e2:4d:1b:81:fc:f9:46:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:41:F5:9E:B7:80:E0:88:0A:3A:93:66:25:74:A9:01:F0:3B:C9:15
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/HUH1nreA4IgKOpNmJXSpAfA7yRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:3e80:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:cd:fc:3f:45:61:19:4a:54:cb:d2:69:63:0a:6f:b2:94:
         f7:0a:f6:5f:e4:ec:09:c2:82:30:26:8a:0b:da:36:e3:f8:1f:
         f9:ff:cf:3e:ec:15:36:61:37:7f:01:21:52:4e:3f:be:d6:f1:
         e8:39:00:f7:d5:90:66:84:eb:50:24:1c:b6:9e:80:52:af:6e:
         9c:de:01:4f:56:5c:d2:00:c3:50:05:a0:7a:72:59:88:7a:1a:
         f7:49:18:89:31:62:db:2a:50:63:46:30:cc:8d:9a:07:03:5a:
         6f:56:c5:97:a6:f6:93:b1:2c:21:11:db:45:dc:a9:ca:c3:3a:
         7e:f0:55:90:e8:fb:ad:d7:b7:3b:15:3a:c8:06:f1:76:ec:e4:
         56:bc:cf:f9:b7:40:d1:f7:69:58:63:2f:69:51:63:94:17:95:
         aa:aa:14:4c:86:28:6b:14:fb:7b:03:64:85:aa:f6:2a:d7:cf:
         85:0d:d4:2f:e2:f4:26:4c:1b:ef:04:6c:f7:34:16:f3:1f:ce:
         ca:e2:08:51:64:68:a6:2a:97:7b:9a:7d:9f:55:a2:37:6d:41:
         c7:03:9b:ba:cc:2e:98:f3:59:98:6f:1c:1e:1a:35:c6:4e:ff:
         35:25:ee:b9:ff:84:a3:b8:f3:f9:f6:60:68:75:50:84:af:43:
         98:20:8b:67
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVxTBMk3wfJErxG85hlHRhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjMwMTAyMDcwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDQxZjU5ZWI3ODBlMDg4MGEzYTkzNjYyNTc0YTkwMWYwM2JjOTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Yo+m0RfSzKpNUV9Qcegd+2tsFD
uyCFenx4O6CPCoYoeyhpdZqVSeaISgLqlWce162X3NKAWgJyI8DGQ6JU0DzLQak5
lJTEKlCYl2bJXSxWS+cxfF7VCBbCXYISiue1ZljNrFRFMo6aMX/ZsmUSEjT09zQw
c5QHqmU0KsYDIh0fkiksgqyF/AOJ3xi/x/vazVoLOo4V4RA88lYbp7up118QbMFo
e1lKbmycTyGUxraNYzwa7q67Vp6+YHqzKBNr7HLolxv/9ly4nPLnR2c3xKFojSY6
O4BNBn5ukjoUl/NA1sTbc5jQVFlFq3rBQpBtZiLeNJvju+JNG4H8+Ub0eQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB1B9Z63gOCICjqTZiV0qQHwO8kVMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvSFVIMW5yZUE0SWdLT3BObUpYU3BBZkE3eVJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI+gAMw
DQYJKoZIhvcNAQELBQADggEBAKR2zfw/RWEZSlTL0mljCm+ylPcK9l/k7AnCgjAm
igvaNuP4H/n/zz7sFTZhN38BIVJOP77W8eg5APfVkGaE61AkHLaegFKvbpzeAU9W
XNIAw1AFoHpyWYh6GvdJGIkxYtsqUGNGMMyNmgcDWm9WxZem9pOxLCER20XcqcrD
On7wVZDo+63XtzsVOsgG8Xbs5Fa8z/m3QNH3aVhjL2lRY5QXlaqqFEyGKGsU+3sD
ZIWq9irXz4UN1C/i9CZMG+8EbPc0FvMfzsriCFFkaKYql3uafZ9VojdtQccDm7rM
LpjzWZhvHB4aNcZO/zUl7rn/hKO48/n2YGh1UISvQ5ggi2c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org