Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa
File:                     Grk9n5mvdNRFgR12yY4vDxjKiXc.roa (raw, json)
Hash identifier:          H7yrD5624QylBLe6sn67WkBocPHF0s0DbTGQNGADr+M=
Subject key identifier:   1A:B9:3D:9F:99:AF:74:D4:45:81:1D:76:C9:8E:2F:0F:18:CA:89:77
Certificate issuer:       /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial:       018572BA4979F94D7A810FD3EB6CADF17210
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa
Signing time:             Mon 02 Jan 2023 13:44:49 +0000
ROA not before:           Mon 02 Jan 2023 13:44:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16262
IP address blocks:        46.8.52.0/23 maxlen: 32
                          109.248.169.0/24 maxlen: 24
                          109.248.168.0/24 maxlen: 24
                          46.8.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:49:79:f9:4d:7a:81:0f:d3:eb:6c:ad:f1:72:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
        Validity
            Not Before: Jan  2 13:44:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ab93d9f99af74d445811d76c98e2f0f18ca8977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:f8:15:9f:51:ec:aa:83:4a:9b:03:c3:3d:
                    d8:cc:fe:1f:18:03:96:e7:37:6e:dc:40:0f:5f:bd:
                    c8:c4:6b:98:af:eb:b1:09:2a:ab:e8:d4:2a:03:69:
                    9b:5a:25:b0:d3:cf:17:c5:e5:68:62:1b:29:b3:e8:
                    c9:df:71:c3:7c:a0:8e:7c:cf:38:fe:36:d2:bc:40:
                    a1:04:00:0a:0e:5f:92:6c:92:f0:b1:73:60:dd:e7:
                    1f:6b:ad:2e:c6:5f:5e:ad:2b:ae:27:3c:da:42:6f:
                    5c:97:0f:b8:71:74:04:f3:2a:3b:58:3b:5c:34:c4:
                    70:4f:db:89:5e:32:2e:48:21:d8:e8:24:a9:ad:d1:
                    7c:17:2b:31:cd:94:7b:9c:5c:d2:87:99:39:0f:38:
                    86:dd:e8:5a:84:82:3f:4f:1b:58:cc:67:44:93:94:
                    95:d3:62:7f:b1:c0:f6:99:a1:4b:f7:48:56:08:d5:
                    78:fc:51:cd:82:20:c6:d0:3e:0e:12:22:57:64:8b:
                    29:47:f4:98:4a:0a:f6:94:c7:3b:76:8f:3b:06:04:
                    8f:cd:ff:94:3f:d4:d7:b6:7c:73:c7:b6:02:83:2f:
                    46:47:9e:a7:b9:45:c0:30:07:73:bb:57:49:a2:de:
                    9a:13:7f:90:d9:68:02:aa:37:10:09:48:c3:ef:15:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:3D:9F:99:AF:74:D4:45:81:1D:76:C9:8E:2F:0F:18:CA:89:77
            X509v3 Authority Key Identifier:
                keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.8.52.0/23
                  46.8.153.0/24
                  109.248.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:92:9a:29:d5:ab:96:5e:4f:83:56:48:74:e6:92:d3:54:
         bd:17:1d:c1:81:53:71:aa:f5:43:b0:dc:e6:0b:fa:f7:1c:7c:
         c4:f9:ba:2d:95:87:a4:ba:09:19:c8:07:5c:d1:3d:ae:1e:81:
         92:5c:d3:a3:ec:a8:85:f0:ef:b4:c9:0c:27:90:17:df:64:34:
         8f:09:ed:e3:06:a0:d9:78:5c:c9:5c:f6:b4:47:de:24:34:e0:
         14:62:14:cf:e9:d2:4f:f8:ce:12:24:3f:bb:ea:e2:06:ca:76:
         76:e7:13:1a:a3:0d:1a:e3:58:b2:94:de:09:62:b4:9a:c2:6d:
         ad:03:29:43:63:d2:f2:57:c6:9c:e4:cd:db:f1:5c:38:a6:29:
         ed:b0:14:a7:9f:a9:a8:11:b0:f7:5c:a6:0f:a0:8f:3f:d2:7a:
         32:63:c5:41:f6:59:43:00:49:5e:98:fa:84:c7:7c:f0:10:0a:
         9d:ab:3f:44:1c:31:fc:e9:a0:e9:8c:d0:0f:fe:52:23:4a:17:
         d8:78:be:7b:74:1f:49:6b:1a:60:aa:57:c2:96:29:33:0c:b3:
         33:d0:ef:86:1e:0e:06:00:4f:82:36:3a:e3:d0:78:5b:2d:1d:
         46:3a:3d:f6:fc:ff:ee:2d:bb:0e:04:c1:71:ac:96:29:d2:67:
         52:15:09:00
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyukl5+U16gQ/T62yt8XIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwMTAyMTM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWI5M2Q5Zjk5YWY3NGQ0NDU4MTFkNzZjOThlMmYwZjE4Y2E4OTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6X4FZ9R7KqDSpsDwz3YzP4fGAOW
5zdu3EAPX73IxGuYr+uxCSqr6NQqA2mbWiWw088XxeVoYhsps+jJ33HDfKCOfM84
/jbSvEChBAAKDl+SbJLwsXNg3ecfa60uxl9erSuuJzzaQm9clw+4cXQE8yo7WDtc
NMRwT9uJXjIuSCHY6CSprdF8FysxzZR7nFzSh5k5DziG3ehahII/TxtYzGdEk5SV
02J/scD2maFL90hWCNV4/FHNgiDG0D4OEiJXZIspR/SYSgr2lMc7do87BgSPzf+U
P9TXtnxzx7YCgy9GR56nuUXAMAdzu1dJot6aE3+Q2WgCqjcQCUjD7xVJ/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBq5PZ+Zr3TURYEddsmOLw8Yyol3MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvR3JrOW41bXZkTlJGZ1IxMnlZNHZEeGpLaVhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLgg0AwQA
LgiZAwQBbfioMA0GCSqGSIb3DQEBCwUAA4IBAQBvIJKaKdWrll5Pg1ZIdOaS01S9
Fx3BgVNxqvVDsNzmC/r3HHzE+botlYekugkZyAdc0T2uHoGSXNOj7KiF8O+0yQwn
kBffZDSPCe3jBqDZeFzJXPa0R94kNOAUYhTP6dJP+M4SJD+76uIGynZ25xMaow0a
41iylN4JYrSawm2tAylDY9LyV8ac5M3b8Vw4pintsBSnn6moEbD3XKYPoI8/0noy
Y8VB9llDAElemPqEx3zwEAqdqz9EHDH86aDpjNAP/lIjShfYeL57dB9JaxpgqlfC
likzDLMz0O+GHg4GAE+CNjrj0HhbLR1GOj32/P/uLbsOBMFxrJYp0mdSFQkA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org