Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa
File:                     66_9crKJsWDPetacNRyiW95MKKs.roa (raw, json)
Hash identifier:          0xqv6CsriPXeyRxh13dNf2Sw7c5flR1FiiizXV815dg=
Subject key identifier:   EB:AF:FD:72:B2:89:B1:60:CF:7A:D6:9C:35:1C:A2:5B:DE:4C:28:AB
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       018CC6B7AD44AF842818ADEBBA6C726CA8C4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa
Signing time:             Mon 01 Jan 2024 20:29:35 +0000
ROA not before:           Mon 01 Jan 2024 20:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212384
IP address blocks:        176.57.49.0/24 maxlen: 24
                          176.57.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 12:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:ad:44:af:84:28:18:ad:eb:ba:6c:72:6c:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 20:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ebaffd72b289b160cf7ad69c351ca25bde4c28ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:1f:14:5f:a4:22:f2:4e:31:11:32:a0:b0:
                    97:12:b5:93:c7:9f:b6:08:51:f3:90:15:dc:f3:fc:
                    e4:3a:72:af:0d:19:47:80:87:99:13:63:a0:a2:ab:
                    79:15:72:62:0c:41:70:34:b9:59:b6:5c:e0:c2:06:
                    f5:50:94:11:27:91:92:af:72:99:85:7a:1c:d6:3e:
                    0d:fa:e1:d9:40:e8:34:db:ee:cd:7f:e6:41:3d:c9:
                    67:7c:28:b9:80:b0:ab:23:6b:cc:7f:9e:9b:84:c4:
                    6b:bd:7a:68:3a:f7:96:12:8a:58:79:0c:4f:db:3e:
                    0e:63:b0:11:98:55:9b:03:c4:39:d0:08:3a:81:85:
                    c8:72:f0:e3:93:59:58:91:b2:e0:0a:17:68:89:d4:
                    8b:74:4d:71:b3:15:cb:13:a6:ed:d4:3e:81:fc:dd:
                    90:71:65:b9:2b:63:97:fb:5e:cd:1f:e2:4e:8d:25:
                    1a:1e:01:fd:12:7d:6d:62:73:02:34:bf:bb:dc:bd:
                    37:f7:94:ef:ac:f4:70:15:be:31:85:12:1c:aa:93:
                    a8:9e:92:26:3f:76:87:99:79:4f:87:c9:31:bd:95:
                    1d:e3:e8:0b:34:10:ea:5a:d1:72:5b:c2:cf:f0:1a:
                    68:28:12:a8:c0:50:6c:b4:47:3a:39:55:68:5e:27:
                    da:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AF:FD:72:B2:89:B1:60:CF:7A:D6:9C:35:1C:A2:5B:DE:4C:28:AB
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/66_9crKJsWDPetacNRyiW95MKKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:d5:42:c0:1f:ff:10:f6:ba:56:ba:3f:21:30:52:bf:e5:
         0a:ae:54:f9:20:ec:ac:25:3b:95:3b:cd:93:76:69:84:5d:e4:
         0c:91:0a:56:e4:c2:ac:f8:ee:8d:3e:e3:11:8e:fa:b1:f9:5e:
         7f:d9:cc:36:6e:26:1e:64:5f:1e:a6:17:c7:ab:c6:a1:df:61:
         a7:4b:22:06:60:f7:bd:f0:dc:64:e2:4e:df:60:b5:67:4e:2a:
         11:59:68:74:8c:60:80:f0:ed:6b:7c:f8:89:fb:ba:91:5a:df:
         10:0d:51:d7:e2:1e:90:8e:b5:d2:8d:44:b8:bf:18:2e:44:6d:
         b5:66:21:de:46:a9:b6:f7:46:1b:cd:06:4c:96:a8:37:c5:fb:
         23:d0:40:96:f7:b9:7f:92:b3:26:55:e3:95:d0:1d:b1:cf:bd:
         a7:05:f6:ac:18:7b:aa:65:68:d7:30:73:8a:e6:45:02:1f:44:
         14:a2:0a:5e:d9:e1:f6:fb:58:3b:40:88:31:0c:46:be:28:53:
         0e:b5:d5:62:86:f4:c1:52:80:02:3f:88:dc:ea:86:bb:1b:3c:
         9b:da:2e:70:db:67:a8:63:34:b8:39:31:73:16:e4:8c:cd:91:
         6c:de:64:54:1e:13:dd:7e:8a:d0:f6:d0:3e:fa:c0:4e:06:46:
         6f:c5:bc:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt61Er4QoGK3rumxybKjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmFmZmQ3MmIyODliMTYwY2Y3YWQ2OWMzNTFjYTI1YmRlNGMyOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo0fFF+kIvJOMREyoLCXErWTx5+2
CFHzkBXc8/zkOnKvDRlHgIeZE2Ogoqt5FXJiDEFwNLlZtlzgwgb1UJQRJ5GSr3KZ
hXoc1j4N+uHZQOg02+7Nf+ZBPclnfCi5gLCrI2vMf56bhMRrvXpoOveWEopYeQxP
2z4OY7ARmFWbA8Q50Ag6gYXIcvDjk1lYkbLgChdoidSLdE1xsxXLE6bt1D6B/N2Q
cWW5K2OX+17NH+JOjSUaHgH9En1tYnMCNL+73L0395TvrPRwFb4xhRIcqpOonpIm
P3aHmXlPh8kxvZUd4+gLNBDqWtFyW8LP8BpoKBKowFBstEc6OVVoXifadQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuv/XKyibFgz3rWnDUcolveTCirMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvNjZfOWNyS0pzV0RQZXRhY05SeWlXOTVNS0tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDkwMA0G
CSqGSIb3DQEBCwUAA4IBAQCfCNVCwB//EPa6Vro/ITBSv+UKrlT5IOysJTuVO82T
dmmEXeQMkQpW5MKs+O6NPuMRjvqx+V5/2cw2biYeZF8ephfHq8ah32GnSyIGYPe9
8Nxk4k7fYLVnTioRWWh0jGCA8O1rfPiJ+7qRWt8QDVHX4h6QjrXSjUS4vxguRG21
ZiHeRqm290YbzQZMlqg3xfsj0ECW97l/krMmVeOV0B2xz72nBfasGHuqZWjXMHOK
5kUCH0QUogpe2eH2+1g7QIgxDEa+KFMOtdVihvTBUoACP4jc6oa7Gzyb2i5w22eo
YzS4OTFzFuSMzZFs3mRUHhPdforQ9tA++sBOBkZvxbx5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:54 2024 by rpki-client on console-ams.rpki-client.org