Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/QRGGi6kZ1EVxHRJvzxeFydiho7M.roa
File:                     QRGGi6kZ1EVxHRJvzxeFydiho7M.roa (raw, json)
Hash identifier:          n82yNfEGii0wVEHiUaRBUaZQphder2FKwrvNdWLUAVQ=
Subject key identifier:   41:11:86:8B:A9:19:D4:45:71:1D:12:6F:CF:17:85:C9:D8:A1:A3:B3
Certificate issuer:       /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial:       0189BB24CE10AF8677BD30242F648A6E84B2
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/QRGGi6kZ1EVxHRJvzxeFydiho7M.roa
Signing time:             Thu 03 Aug 2023 11:24:58 +0000
ROA not before:           Thu 03 Aug 2023 11:24:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399471
IP address blocks:        160.214.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 07:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bb:24:ce:10:af:86:77:bd:30:24:2f:64:8a:6e:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
        Validity
            Not Before: Aug  3 11:24:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4111868ba919d445711d126fcf1785c9d8a1a3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:70:ac:8f:89:46:6b:76:eb:19:38:99:9e:
                    1a:bc:4c:09:b3:5f:02:80:01:b8:dd:38:0a:7b:28:
                    5b:38:79:eb:fd:c2:64:f7:e3:06:95:85:0c:c0:03:
                    12:8f:f3:31:12:fe:c8:fb:5f:25:65:c8:f2:6e:70:
                    51:68:07:6c:8e:eb:4d:1c:e0:1d:22:a4:13:53:61:
                    48:34:2b:ef:1d:2f:38:b3:7e:eb:b5:f0:a3:ed:cc:
                    11:f9:de:e7:21:2c:94:be:ae:1c:3c:ff:52:49:2f:
                    c2:f4:39:43:d9:5e:00:96:5e:5d:d6:6f:d8:2c:54:
                    82:ad:09:42:3c:10:72:bf:35:31:13:7b:60:0e:f8:
                    94:aa:65:cb:5b:40:aa:fe:ac:3f:08:05:d3:d8:29:
                    4a:c6:36:bd:57:87:b5:ba:3c:e1:e8:f2:a9:84:79:
                    c9:7f:cd:0c:48:7e:64:10:69:0c:34:27:d5:de:83:
                    1c:1a:ed:c6:00:6d:29:32:db:0c:1c:87:ac:e3:7c:
                    32:28:3c:9a:40:0c:7e:05:b6:c6:d6:a5:e7:c4:b8:
                    99:0d:d1:4a:2d:fa:d6:90:0d:dd:ac:2b:f9:cf:b2:
                    4b:e1:8d:0a:b2:82:b8:bd:f3:70:fe:61:b8:38:78:
                    c5:86:68:f1:ca:8b:14:7d:27:4d:7b:e0:03:5c:92:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:11:86:8B:A9:19:D4:45:71:1D:12:6F:CF:17:85:C9:D8:A1:A3:B3
            X509v3 Authority Key Identifier:
                keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/QRGGi6kZ1EVxHRJvzxeFydiho7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.214.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:ee:25:79:b1:87:31:78:13:dc:3e:6b:be:82:1d:7d:64:
         85:be:d5:81:2c:8d:8d:b1:11:fb:b0:d4:9b:bf:82:20:d7:cc:
         8b:97:37:09:c7:94:bf:2e:16:b6:d2:f1:9d:02:6b:e8:6b:8c:
         4e:15:36:77:ff:49:1d:46:4e:0f:2c:d4:09:68:60:19:b9:9f:
         08:ea:b9:bd:42:a6:51:6f:a3:6c:5f:69:2c:61:09:fa:5e:7d:
         42:87:80:91:2a:de:83:14:28:56:31:39:16:5d:70:82:bb:86:
         37:fd:90:dc:24:f3:ee:a8:19:5b:50:74:b2:c9:bf:60:d1:9a:
         eb:05:6c:b0:ee:42:0e:00:5d:33:6a:01:17:11:32:c2:d5:8c:
         e4:6a:1b:87:ae:49:0d:a8:2c:36:75:08:d6:3c:f1:80:ba:a6:
         0b:4a:f2:ef:f2:2c:12:45:86:53:9b:14:4b:29:74:00:ce:4d:
         ea:9a:35:44:c7:c5:ae:13:c1:83:61:63:2e:79:08:0e:24:5a:
         f3:19:9a:d3:c7:06:3c:b7:c8:5d:a3:0f:8a:e5:93:b7:c6:29:
         b5:c3:45:51:72:12:2b:bd:25:fb:aa:17:77:03:5e:81:46:25:
         32:d5:c8:c7:88:66:92:f6:a0:24:6e:01:3b:c1:3a:78:6d:5f:
         4c:ef:fa:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm7JM4Qr4Z3vTAkL2SKboSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTc5MjY1ODAzYjc4MDRkMGZjY2Y1OTYyYThiMTYzNzQz
ZTBkMWUwHhcNMjMwODAzMTEyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTExODY4YmE5MTlkNDQ1NzExZDEyNmZjZjE3ODVjOWQ4YTFhM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqZwrI+JRmt26xk4mZ4avEwJs18C
gAG43TgKeyhbOHnr/cJk9+MGlYUMwAMSj/MxEv7I+18lZcjybnBRaAdsjutNHOAd
IqQTU2FINCvvHS84s37rtfCj7cwR+d7nISyUvq4cPP9SSS/C9DlD2V4All5d1m/Y
LFSCrQlCPBByvzUxE3tgDviUqmXLW0Cq/qw/CAXT2ClKxja9V4e1ujzh6PKphHnJ
f80MSH5kEGkMNCfV3oMcGu3GAG0pMtsMHIes43wyKDyaQAx+BbbG1qXnxLiZDdFK
LfrWkA3drCv5z7JL4Y0KsoK4vfNw/mG4OHjFhmjxyosUfSdNe+ADXJK5IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEERhoupGdRFcR0Sb88XhcnYoaOzMB8GA1UdIwQY
MBaAFGUXkmWAO3gE0PzPWWKosWN0Pg0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJlU1pZQTdlQVRRX005WllxaXhZM1EtRFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYmU4NjUtNmMwNi00ZDlhLThkYjEt
ZjdiYjZkOWEzYmU4LzEvUVJHR2k2a1oxRVZ4SFJKdnp4ZUZ5ZGlobzdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kYmU4NjUtNmMwNi00ZDlhLThkYjEtZjdiYjZkOWEzYmU4
LzEvWlJlU1pZQTdlQVRRX005WllxaXhZM1EtRFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoNZuMA0G
CSqGSIb3DQEBCwUAA4IBAQAONe4lebGHMXgT3D5rvoIdfWSFvtWBLI2NsRH7sNSb
v4Ig18yLlzcJx5S/Lha20vGdAmvoa4xOFTZ3/0kdRk4PLNQJaGAZuZ8I6rm9QqZR
b6NsX2ksYQn6Xn1Ch4CRKt6DFChWMTkWXXCCu4Y3/ZDcJPPuqBlbUHSyyb9g0Zrr
BWyw7kIOAF0zagEXETLC1YzkahuHrkkNqCw2dQjWPPGAuqYLSvLv8iwSRYZTmxRL
KXQAzk3qmjVEx8WuE8GDYWMueQgOJFrzGZrTxwY8t8hdow+K5ZO3xim1w0VRchIr
vSX7qhd3A16BRiUy1cjHiGaS9qAkbgE7wTp4bV9M7/pg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org