Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cWyiFTh_eVTGwDTwwSYiiU3uWd4.roa
File:                     cWyiFTh_eVTGwDTwwSYiiU3uWd4.roa (raw, json)
Hash identifier:          KxI9aX/aOEXPqSThxTHOfGzOJB4KmQ1EsDHHtC3mN1s=
Subject key identifier:   71:6C:A2:15:38:7F:79:54:C6:C0:34:F0:C1:26:22:89:4D:EE:59:DE
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01856C53D055ACD8BCC42E35E61A007C7E30
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cWyiFTh_eVTGwDTwwSYiiU3uWd4.roa
Signing time:             Sun 01 Jan 2023 07:55:10 +0000
ROA not before:           Sun 01 Jan 2023 07:55:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204223
IP address blocks:        160.20.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:d0:55:ac:d8:bc:c4:2e:35:e6:1a:00:7c:7e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 07:55:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=716ca215387f7954c6c034f0c12622894dee59de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:12:b3:af:58:88:60:d2:1d:8b:65:ad:68:
                    44:0e:f5:6a:9b:73:d7:e9:f0:27:12:b6:a6:f8:5e:
                    58:21:c0:9e:26:ed:b0:4c:0c:03:d5:e0:5f:04:d9:
                    4c:b0:c5:89:b0:ea:8f:24:2b:e5:2a:01:cf:a6:5d:
                    c4:91:bb:e0:62:de:b0:08:a3:b9:fa:67:58:92:cc:
                    30:30:45:a0:59:b9:aa:a2:cd:9e:d4:23:b1:8e:2a:
                    d5:f5:7a:70:bc:8b:c6:24:33:ad:2a:dc:42:87:15:
                    cb:3f:8f:a2:f7:c7:62:d4:e6:d5:fb:02:52:08:95:
                    b0:91:a2:d1:3e:62:ae:96:7d:e1:6f:78:a6:84:ff:
                    c5:2e:b8:65:26:7a:10:3d:5d:86:1d:8f:f8:a3:05:
                    f7:dc:ec:f3:09:a1:2e:04:d7:0b:e1:55:9f:00:85:
                    75:a0:3d:c1:c8:d8:37:71:0d:ed:9f:a4:eb:eb:80:
                    9e:36:cd:04:4b:e2:bd:74:a8:13:04:04:62:4c:14:
                    c8:3c:3f:f5:45:55:cb:ba:87:37:61:38:1f:7e:75:
                    a9:5a:ec:9f:16:da:83:cf:4b:35:61:de:6d:42:4d:
                    3d:f8:67:58:92:1d:ec:73:85:f5:ba:2c:11:8d:95:
                    0d:d4:8e:b0:d7:3e:b7:d1:19:54:cd:11:6a:b5:a7:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6C:A2:15:38:7F:79:54:C6:C0:34:F0:C1:26:22:89:4D:EE:59:DE
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cWyiFTh_eVTGwDTwwSYiiU3uWd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:75:f3:a0:67:f0:ee:81:c9:a9:60:6f:3f:a9:27:bb:cc:
         1b:de:89:35:e5:ca:f8:df:92:17:08:7f:28:17:09:9d:8b:50:
         6a:72:1c:51:76:43:cb:8e:29:90:c3:f8:a1:00:39:53:d0:f8:
         60:ed:5e:95:b1:74:a3:db:50:9b:06:3c:e3:29:c0:02:82:d7:
         1c:3e:ad:84:c7:c0:2b:af:71:1e:85:25:67:3a:0a:a6:0e:c7:
         16:b6:05:0a:a8:d8:24:ba:86:ad:44:ec:86:25:3c:b8:77:41:
         39:83:4a:d4:86:50:df:da:aa:5f:21:77:7e:f3:a1:e1:e5:79:
         c8:d4:8c:5d:fc:a2:e7:84:f2:35:f2:86:27:a6:9c:af:ce:dc:
         f9:60:9d:2c:de:18:f6:cd:75:97:15:97:a9:b9:e7:bc:53:a5:
         67:24:7c:50:76:9a:5f:29:04:ff:e8:72:f3:9c:96:70:94:14:
         c6:4c:19:03:6e:a8:36:50:60:ce:41:e2:1a:3c:03:c1:40:38:
         8e:12:ca:c2:0b:61:2f:5e:74:49:30:42:2d:7e:50:8e:fd:3a:
         46:81:ec:6c:5f:36:5b:e1:9e:b4:a3:04:94:69:48:8c:f8:fc:
         42:98:66:5b:51:eb:6d:50:b4:f9:21:40:e0:f4:2f:ad:1c:81:
         50:89:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org