Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa
File:                     nixhTZIgUHgSX15NlLjBKHF13GA.roa (raw, json)
Hash identifier:          PAiKoiLop2X9GF9G9Eo+VuyQqB+bMzEkYAqINdrDWog=
Subject key identifier:   9E:2C:61:4D:92:20:50:78:12:5F:5E:4D:94:B8:C1:28:71:75:DC:60
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       0185707978FE30FA5469C81D4342ADDB162D
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa
Signing time:             Mon 02 Jan 2023 03:14:47 +0000
ROA not before:           Mon 02 Jan 2023 03:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        94.176.212.0/24 maxlen: 24
                          89.34.239.0/24 maxlen: 24
                          77.81.103.0/24 maxlen: 24
                          89.43.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Jan 2023 17:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:78:fe:30:fa:54:69:c8:1d:43:42:ad:db:16:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Jan  2 03:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e2c614d92205078125f5e4d94b8c1287175dc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:d1:10:b3:a6:33:d3:3e:5c:c2:9a:22:1d:
                    f8:6d:1e:36:aa:9a:04:1d:d7:f4:f5:45:22:cd:f3:
                    bb:02:70:6b:7a:e6:67:da:ca:74:1c:81:fc:92:93:
                    8c:c3:60:94:11:1b:91:b6:53:90:8f:e9:bc:91:00:
                    2f:4b:6a:e2:96:95:a7:8f:ac:04:e8:33:84:f8:a7:
                    6c:7d:43:e8:99:84:bc:b2:dc:fa:6e:9d:47:9f:1d:
                    0d:0b:83:c1:33:50:14:7c:d2:90:2b:4e:f8:05:00:
                    b6:87:12:3a:8d:ea:65:c5:07:1f:9c:d7:c9:5d:f7:
                    b7:44:bd:a5:0d:3e:ed:83:c2:69:a3:ea:88:94:92:
                    1a:6b:dc:f2:80:08:8a:a6:fa:ab:92:ae:38:25:a2:
                    2c:6c:84:4a:16:23:c9:f3:56:0f:27:cd:70:b4:5b:
                    fc:6b:00:97:2c:08:3f:f0:17:21:76:d8:57:39:a1:
                    98:8b:d2:3a:9f:a5:33:d8:8b:af:fc:6b:97:11:d3:
                    1b:30:6e:01:2b:e8:08:23:4b:74:04:e7:53:d8:78:
                    d6:2d:4e:02:50:8d:6d:19:e5:31:c9:cc:56:b3:c8:
                    91:d2:36:0f:a1:6e:f1:dc:67:f7:7e:9a:c4:6d:e4:
                    f7:d1:e4:f0:2e:8e:d8:da:75:20:95:84:2f:23:d6:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:61:4D:92:20:50:78:12:5F:5E:4D:94:B8:C1:28:71:75:DC:60
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.81.103.0/24
                  89.34.239.0/24
                  89.43.34.0/24
                  94.176.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:30:1b:db:c7:5d:82:76:dc:1e:da:54:d5:62:f3:27:e5:48:
         85:16:3a:90:95:70:18:2c:82:d4:56:e1:bb:4f:24:3e:b4:a6:
         17:11:7c:c9:95:ab:c7:33:d0:3f:ab:f7:4b:d2:43:b9:83:d7:
         c2:55:f5:20:17:4c:f9:a3:96:4b:f9:d6:fe:e4:38:2f:eb:88:
         c0:d4:b2:da:83:d1:8b:e5:f4:59:d0:e1:64:1a:17:04:dc:fa:
         d0:2b:2b:e7:74:1c:74:af:81:8d:ea:00:a2:58:5a:c0:4e:16:
         53:10:f7:8f:b1:73:d5:05:07:9e:3c:70:0d:de:1d:8e:30:71:
         cd:28:4b:b2:4e:df:e4:c4:bf:c4:da:f9:07:0f:28:bf:0e:68:
         02:53:2c:5f:39:02:36:c7:3a:76:95:b1:58:3a:64:f8:ff:ce:
         8a:4f:e8:12:73:b9:16:e8:ec:26:f3:d0:ca:e8:58:e7:25:21:
         87:4e:99:a4:b8:5c:d6:5d:d0:cd:bc:cf:65:3c:7f:d7:6c:99:
         04:a6:46:24:2a:f2:ab:cb:10:4c:a3:6c:a4:92:95:35:63:26:
         b0:fe:83:04:ad:ad:ef:c3:aa:04:eb:50:1b:88:64:8d:f8:72:
         ec:11:f3:a5:38:c8:d6:6e:89:a4:b9:5b:e5:7e:f6:77:52:d0:
         72:8c:01:1c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVweXj+MPpUacgdQ0Kt2xYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjMwMTAyMDMxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJjNjE0ZDkyMjA1MDc4MTI1ZjVlNGQ5NGI4YzEyODcxNzVkYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz7RELOmM9M+XMKaIh34bR42qpoE
Hdf09UUizfO7AnBreuZn2sp0HIH8kpOMw2CUERuRtlOQj+m8kQAvS2rilpWnj6wE
6DOE+KdsfUPomYS8stz6bp1Hnx0NC4PBM1AUfNKQK074BQC2hxI6jeplxQcfnNfJ
Xfe3RL2lDT7tg8Jpo+qIlJIaa9zygAiKpvqrkq44JaIsbIRKFiPJ81YPJ81wtFv8
awCXLAg/8BchdthXOaGYi9I6n6Uz2Iuv/GuXEdMbMG4BK+gII0t0BOdT2HjWLU4C
UI1tGeUxycxWs8iR0jYPoW7x3Gf3fprEbeT30eTwLo7Y2nUglYQvI9b5lwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ4sYU2SIFB4El9eTZS4wShxddxgMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvbml4aFRaSWdVSGdTWDE1TmxMakJLSEYxM0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVFnAwQA
WSLvAwQAWSsiAwQAXrDUMA0GCSqGSIb3DQEBCwUAA4IBAQCrMBvbx12Cdtwe2lTV
YvMn5UiFFjqQlXAYLILUVuG7TyQ+tKYXEXzJlavHM9A/q/dL0kO5g9fCVfUgF0z5
o5ZL+db+5Dgv64jA1LLag9GL5fRZ0OFkGhcE3PrQKyvndBx0r4GN6gCiWFrAThZT
EPePsXPVBQeePHAN3h2OMHHNKEuyTt/kxL/E2vkHDyi/DmgCUyxfOQI2xzp2lbFY
OmT4/86KT+gSc7kW6Owm89DK6FjnJSGHTpmkuFzWXdDNvM9lPH/XbJkEpkYkKvKr
yxBMo2ykkpU1Yyaw/oMEra3vw6oE61AbiGSN+HLsEfOlOMjWbomkuVvlfvZ3UtBy
jAEc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org