Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/r6oIGmHOfB1ZU6qur-TqBj4TnWY.roa
File:                     r6oIGmHOfB1ZU6qur-TqBj4TnWY.roa (raw, json)
Hash identifier:          yR83F+EGKSEAQC6VISi+ing4jaoqj3WCPVJeKWJp+5M=
Subject key identifier:   AF:AA:08:1A:61:CE:7C:1D:59:53:AA:AE:AF:E4:EA:06:3E:13:9D:66
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       018CCA2A36C1B622184B751F3A7C4301F541
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/r6oIGmHOfB1ZU6qur-TqBj4TnWY.roa
Signing time:             Tue 02 Jan 2024 12:33:33 +0000
ROA not before:           Tue 02 Jan 2024 12:33:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15828
IP address blocks:        46.148.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Mar 2024 05:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:36:c1:b6:22:18:4b:75:1f:3a:7c:43:01:f5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jan  2 12:33:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=afaa081a61ce7c1d5953aaaeafe4ea063e139d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:1d:41:3e:cc:03:1e:9e:e3:6e:2b:0a:61:
                    d2:75:6f:26:b1:a2:5c:b3:9d:3b:07:11:59:9f:8b:
                    10:b4:68:45:6f:f2:d9:db:46:de:ab:24:e5:9e:4f:
                    11:c5:59:4b:6c:61:db:d0:f1:47:d2:63:55:7a:87:
                    25:df:c7:00:35:22:42:75:b1:34:99:5d:3f:e2:c6:
                    fa:f2:47:89:af:f0:16:b8:44:46:c4:f8:c4:13:64:
                    5c:ef:2c:eb:7e:25:db:f7:fa:4e:40:5c:46:ad:84:
                    fe:5e:55:bf:88:3c:b1:79:1f:c5:2c:57:7b:80:38:
                    2d:b3:99:07:6c:6b:69:02:aa:f8:b0:56:be:b0:39:
                    24:78:5a:6d:ac:aa:3d:19:d1:61:c7:c5:8f:f3:78:
                    38:9d:10:1d:89:d2:67:4b:3c:b3:16:ed:63:43:c7:
                    80:75:f7:7d:53:96:2a:ea:dd:31:d9:78:1f:ce:2d:
                    00:a3:ff:ae:97:23:8f:cb:38:6a:c2:66:f1:15:11:
                    3f:5b:3d:d7:a6:c2:20:7f:ed:e5:46:f6:2b:10:65:
                    37:e3:07:3b:5f:a4:17:c2:b5:d4:b8:a0:00:70:27:
                    d2:87:f2:2f:1f:f5:42:65:78:3d:48:5a:ed:3b:2f:
                    04:63:6d:b2:de:68:4b:75:5f:0c:d1:f4:ac:a1:bf:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AA:08:1A:61:CE:7C:1D:59:53:AA:AE:AF:E4:EA:06:3E:13:9D:66
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/r6oIGmHOfB1ZU6qur-TqBj4TnWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:14:68:15:46:48:e2:64:48:c8:45:5d:fe:ca:ec:f9:86:2d:
         7b:d1:c7:ff:e5:42:5c:51:59:ad:fc:52:24:8b:1b:d5:13:6e:
         cd:02:c1:6b:29:1b:b8:25:28:56:11:17:41:2c:c9:38:df:18:
         73:a7:2f:62:08:6c:14:ea:4c:91:68:9d:80:ae:c6:c3:ce:d0:
         f4:40:fd:0b:82:75:8e:23:fd:b5:3a:17:8b:d9:c3:9a:90:d2:
         1c:23:e3:3f:cf:7a:db:fb:8f:b3:ea:25:2d:f4:ec:38:8a:0f:
         2e:49:3a:3b:67:21:19:5d:55:69:bf:fb:b5:df:f4:8c:5e:53:
         5c:8b:18:6b:9e:4e:7b:1b:b4:2d:3d:33:b3:4e:3b:5b:34:49:
         bc:ff:44:0c:06:47:37:ac:86:5d:ea:6b:0c:b5:fa:e6:c4:17:
         ef:8f:15:4e:d9:a8:10:53:e7:bc:b5:e8:13:89:b5:1a:a3:8a:
         3d:a4:d5:84:b4:06:04:0a:5b:c3:db:c1:2f:88:1c:ee:29:41:
         f5:2f:c8:1f:41:46:38:bb:9b:d8:79:13:29:d7:cf:8b:99:e0:
         c1:10:90:5b:d7:62:38:b2:b4:07:6d:48:79:85:c1:c8:06:3f:
         24:a3:ab:c3:be:6a:f3:91:6a:af:b2:21:ec:48:37:7e:9b:c9:
         13:9a:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org