Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/GmoGcvPoVf0z5zTqM05i5s8WALQ.roa
File:                     GmoGcvPoVf0z5zTqM05i5s8WALQ.roa (raw, json)
Hash identifier:          1O60CXmO1yLTLY7mfSVwetwEoPT2Hjkz4luU7X8JHC8=
Subject key identifier:   1A:6A:06:72:F3:E8:55:FD:33:E7:34:EA:33:4E:62:E6:CF:16:00:B4
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       01876BCAC43F29FEB133FE91E6083E5E7FE0
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/GmoGcvPoVf0z5zTqM05i5s8WALQ.roa
Signing time:             Mon 10 Apr 2023 15:31:03 +0000
ROA not before:           Mon 10 Apr 2023 15:31:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56404
IP address blocks:        46.175.165.0/24 maxlen: 24
                          46.175.161.0/24 maxlen: 24
                          46.175.162.0/24 maxlen: 24
                          46.175.163.0/24 maxlen: 24
                          46.175.166.0/24 maxlen: 24
                          46.175.164.0/24 maxlen: 24
                          46.175.160.0/24 maxlen: 24
                          46.175.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6b:ca:c4:3f:29:fe:b1:33:fe:91:e6:08:3e:5e:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Apr 10 15:31:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a6a0672f3e855fd33e734ea334e62e6cf1600b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:50:ae:6b:b9:38:f3:a4:48:35:89:c8:fb:d8:
                    65:e5:13:7e:84:38:f2:1f:27:5b:8f:20:37:1e:fd:
                    35:78:68:0a:f5:03:23:32:c9:e8:25:79:1c:e1:ae:
                    3f:a7:f4:81:34:42:3f:37:8e:bc:19:7c:fb:69:96:
                    6c:1d:2a:15:5f:fd:17:d6:81:7a:0a:71:51:93:b8:
                    42:fa:3c:af:ba:78:fb:99:59:f0:39:0e:7c:84:69:
                    ea:88:7e:d9:25:4f:ec:52:d1:a1:c6:b5:79:b4:f9:
                    8f:c5:bb:63:a3:86:2c:6c:9d:06:7d:c5:ae:66:79:
                    ac:b6:1c:b4:d2:f6:35:03:3a:88:79:d9:4a:f7:74:
                    35:b9:ec:78:f3:06:12:80:93:50:bd:af:0c:9d:2c:
                    d4:80:00:f5:25:21:29:60:02:7c:1c:ed:b0:0b:05:
                    38:34:af:d0:06:0c:f4:27:0c:58:f6:b7:ac:87:f6:
                    51:22:e8:2e:09:30:a4:c8:ee:11:ef:b8:eb:7d:b9:
                    c5:42:36:de:10:d5:e4:c4:70:a2:d6:ae:84:7f:26:
                    60:82:03:f3:ad:cc:f5:49:6e:9f:ca:7c:42:e6:1b:
                    8a:78:d4:07:04:54:2c:ce:9d:e2:03:f1:b0:1b:33:
                    d1:96:3d:70:24:ed:17:e5:68:b0:4f:56:5d:5a:74:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:06:72:F3:E8:55:FD:33:E7:34:EA:33:4E:62:E6:CF:16:00:B4
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/GmoGcvPoVf0z5zTqM05i5s8WALQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:6d:50:a7:36:3f:f5:ad:12:33:a1:99:c6:6b:e9:dc:23:26:
         71:6a:14:d9:7e:55:68:ad:c1:29:1c:23:da:d1:60:c7:03:7c:
         b3:10:57:0b:17:f7:66:36:f7:25:a4:9a:58:51:db:1a:74:8f:
         c2:fa:29:55:ed:fc:db:e8:22:36:05:1c:f8:8e:18:d4:1d:ed:
         e2:89:61:f4:02:5c:6c:02:0d:ca:ba:ae:e9:61:4b:bd:eb:4e:
         9f:c6:9f:4f:a6:83:78:44:c3:1a:b3:b3:d1:68:03:03:db:d1:
         6d:d9:ad:d7:a5:12:3b:9e:86:d7:fc:0f:51:c6:4e:7d:8d:d4:
         5b:30:dd:3a:55:95:ea:7e:38:a6:fb:84:4b:86:11:25:f9:64:
         5b:ac:bd:72:7a:1a:36:6d:e0:f6:1b:09:9f:c8:bd:dc:6d:99:
         50:c0:5b:00:e6:88:cd:34:84:5f:d6:84:e5:9e:2b:49:b3:f9:
         ce:14:31:0d:43:d3:2c:21:2f:e4:0d:44:ad:60:a1:8e:9e:6c:
         eb:cf:b7:21:fa:5c:23:a5:76:b9:87:2c:ec:35:9c:0c:80:a7:
         c7:19:aa:05:03:25:db:c6:6e:d2:ed:be:6b:d4:83:af:28:70:
         73:66:e7:8c:bb:87:ca:b7:3a:4e:9c:c5:cc:bf:c3:af:7a:d7:
         63:e3:11:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdrysQ/Kf6xM/6R5gg+Xn/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNmM0OTkyNDZkODEyZTUyZWNiYTdiN2Y1NWUyNmVkYWVm
NTM0NmUwHhcNMjMwNDEwMTUzMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZhMDY3MmYzZTg1NWZkMzNlNzM0ZWEzMzRlNjJlNmNmMTYwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVCua7k486RINYnI+9hl5RN+hDjy
HydbjyA3Hv01eGgK9QMjMsnoJXkc4a4/p/SBNEI/N468GXz7aZZsHSoVX/0X1oF6
CnFRk7hC+jyvunj7mVnwOQ58hGnqiH7ZJU/sUtGhxrV5tPmPxbtjo4YsbJ0GfcWu
Znmsthy00vY1AzqIedlK93Q1uex48wYSgJNQva8MnSzUgAD1JSEpYAJ8HO2wCwU4
NK/QBgz0JwxY9resh/ZRIuguCTCkyO4R77jrfbnFQjbeENXkxHCi1q6EfyZgggPz
rcz1SW6fynxC5huKeNQHBFQszp3iA/GwGzPRlj1wJO0X5WiwT1ZdWnSjBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpqBnLz6FX9M+c06jNOYubPFgC0MB8GA1UdIwQY
MBaAFMJsSZJG2BLlLsunt/VeJu2u9TRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgt
NDg3ZGE5MzU0YTY1LzEvR21vR2N2UG9WZjB6NXpUcU0wNWk1czhXQUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgtNDg3ZGE5MzU0YTY1
LzEvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq+gMA0G
CSqGSIb3DQEBCwUAA4IBAQCCbVCnNj/1rRIzoZnGa+ncIyZxahTZflVorcEpHCPa
0WDHA3yzEFcLF/dmNvclpJpYUdsadI/C+ilV7fzb6CI2BRz4jhjUHe3iiWH0Alxs
Ag3Kuq7pYUu9606fxp9PpoN4RMMas7PRaAMD29Ft2a3XpRI7nobX/A9Rxk59jdRb
MN06VZXqfjim+4RLhhEl+WRbrL1yeho2beD2GwmfyL3cbZlQwFsA5ojNNIRf1oTl
nitJs/nOFDENQ9MsIS/kDUStYKGOnmzrz7ch+lwjpXa5hyzsNZwMgKfHGaoFAyXb
xm7S7b5r1IOvKHBzZueMu4fKtzpOnMXMv8Ovetdj4xH4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:16 2024 by rpki-client on console-fra.rpki-client.org