Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa
File:                     HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa (raw, json)
Hash identifier:          N4+j05+zV+spwboQpickrGKZzShvOyTJUHjVBUZECVQ=
Subject key identifier:   1C:8F:9D:AC:72:7E:F2:8B:EE:14:FE:B7:5E:8C:A1:DA:8A:03:04:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018D1E61A4F963DF0C72FDE620B950BAEA0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa
Signing time:             Thu 18 Jan 2024 21:02:12 +0000
ROA not before:           Thu 18 Jan 2024 21:02:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215751
IP address blocks:        2a10:cc40:cc40::/48 maxlen: 48
                          2a10:cc40:cc41::/48 maxlen: 48
                          2a10:cc40:cc42::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 21 Jan 2024 05:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1e:61:a4:f9:63:df:0c:72:fd:e6:20:b9:50:ba:ea:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 18 21:02:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1c8f9dac727ef28bee14feb75e8ca1da8a03041b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:78:42:bd:6c:00:96:23:45:11:d4:c9:a3:
                    bd:28:c8:57:e9:f5:a1:82:10:df:85:ad:ef:b4:73:
                    21:80:a7:6d:0b:fe:95:d7:fd:03:f5:87:ef:23:3a:
                    be:62:53:aa:f5:f6:98:11:dc:97:fc:9a:74:59:a5:
                    c9:34:c0:aa:a6:62:d3:b4:52:c1:19:ee:a1:8d:85:
                    bf:17:88:8f:ba:6f:86:88:8e:3b:9a:98:c0:2f:68:
                    a1:db:60:0e:b3:1a:f2:76:ff:79:c9:c1:0d:a5:2d:
                    61:d7:67:54:35:17:2d:29:af:bc:2b:c8:1d:a2:1c:
                    07:18:d1:fb:df:8f:5d:b0:ea:20:6c:00:65:54:c3:
                    2b:b5:26:1c:3e:93:21:71:8f:ab:9c:2e:e0:65:83:
                    5e:d6:51:a9:64:dd:cf:a1:ed:0f:ee:fb:d5:05:d1:
                    30:91:e8:dc:98:aa:e6:70:a0:b3:4d:3b:b6:b1:59:
                    cf:70:d7:7d:f7:5c:84:09:31:ed:da:94:4f:90:9a:
                    2c:ba:80:b1:b4:78:db:7a:62:e7:53:f7:a4:ad:30:
                    69:52:a1:6d:02:00:cc:0a:6d:4c:c8:a0:77:68:62:
                    9f:eb:5e:15:52:3c:65:ba:f0:b4:a3:16:3e:45:d5:
                    e5:ea:0f:b5:35:16:ee:1d:ee:b2:db:d7:24:68:aa:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:9D:AC:72:7E:F2:8B:EE:14:FE:B7:5E:8C:A1:DA:8A:03:04:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HI-drHJ-8ovuFP63Xoyh2ooDBBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:cc40::-2a10:cc40:cc42:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:44:7c:2d:43:85:01:85:55:ca:1d:08:1f:ea:ab:2c:d5:
         24:54:6c:e5:69:af:36:2b:56:f5:14:0d:c4:bc:ef:ff:15:24:
         22:57:bf:09:65:53:6a:30:80:b9:74:c7:b3:93:c4:9a:4c:33:
         25:e3:9b:ea:b9:35:fd:ad:c3:07:3e:6f:3a:42:fe:fb:e9:ae:
         fa:d9:a7:0a:be:fe:78:b9:fe:9c:b4:99:fe:fc:1b:9d:12:af:
         c4:ad:75:5c:da:66:d1:84:64:ad:02:dc:a6:4c:f4:b7:fc:53:
         f2:5c:8e:e4:f7:4f:72:c6:49:27:db:71:b3:ed:43:03:24:cc:
         ea:0e:34:3a:96:20:aa:9d:0e:a4:b1:5e:63:a0:c7:59:1d:b4:
         86:ef:26:8e:07:16:fc:26:d3:f6:e5:9b:6f:12:11:96:75:cf:
         2e:3d:ed:f5:27:e1:f2:fc:ac:b1:f4:0f:e5:49:e0:5d:b7:96:
         b7:0c:d6:49:5e:b3:3d:29:04:84:e3:54:19:51:27:50:2f:f7:
         37:c6:b1:af:31:b8:10:89:63:f9:3c:33:b9:89:38:f1:2c:d3:
         cc:5d:98:b4:3e:fb:e5:76:a4:2a:d2:eb:cd:28:32:f4:9f:08:
         1e:7d:91:5f:e1:d0:2c:97:fa:7b:e8:57:48:73:c6:db:a7:33:
         05:2e:8c:db
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY0eYaT5Y98Mcv3mILlQuuoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwMTE4MjEwMjEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzhmOWRhYzcyN2VmMjhiZWUxNGZlYjc1ZThjYTFkYThhMDMwNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEt4Qr1sAJYjRRHUyaO9KMhX6fWh
ghDfha3vtHMhgKdtC/6V1/0D9YfvIzq+YlOq9faYEdyX/Jp0WaXJNMCqpmLTtFLB
Ge6hjYW/F4iPum+GiI47mpjAL2ih22AOsxrydv95ycENpS1h12dUNRctKa+8K8gd
ohwHGNH7349dsOogbABlVMMrtSYcPpMhcY+rnC7gZYNe1lGpZN3Poe0P7vvVBdEw
kejcmKrmcKCzTTu2sVnPcNd991yECTHt2pRPkJosuoCxtHjbemLnU/ekrTBpUqFt
AgDMCm1MyKB3aGKf614VUjxluvC0oxY+RdXl6g+1NRbuHe6y29ckaKonpwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFByPnaxyfvKL7hT+t16ModqKAwQbMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvSEktZHJISi04b3Z1RlA2M1hveWgyb29EQkJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwYqEMxA
zEADBwAqEMxAzEIwDQYJKoZIhvcNAQELBQADggEBAJaoRHwtQ4UBhVXKHQgf6qss
1SRUbOVprzYrVvUUDcS87/8VJCJXvwllU2owgLl0x7OTxJpMMyXjm+q5Nf2twwc+
bzpC/vvprvrZpwq+/ni5/py0mf78G50Sr8StdVzaZtGEZK0C3KZM9Lf8U/JcjuT3
T3LGSSfbcbPtQwMkzOoONDqWIKqdDqSxXmOgx1kdtIbvJo4HFvwm0/blm28SEZZ1
zy497fUn4fL8rLH0D+VJ4F23lrcM1klesz0pBITjVBlRJ1Av9zfGsa8xuBCJY/k8
M7mJOPEs08xdmLQ+++V2pCrS680oMvSfCB59kV/h0CyX+nvoV0hzxtunMwUujNs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:59 2024 by rpki-client on console-ams.rpki-client.org