Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/52IL6rFyw4satjmNJF_M6_j-Ssw.roa
File:                     52IL6rFyw4satjmNJF_M6_j-Ssw.roa (raw, json)
Hash identifier:          k/mgN+hrlff2N9C+074AR2Tlabh2iEU8szTKPuX4ylE=
Subject key identifier:   E7:62:0B:EA:B1:72:C3:8B:1A:B6:39:8D:24:5F:CC:EB:F8:FE:4A:CC
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       01856B8A1293CBAFA115EA63A3E54D57B51C
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/52IL6rFyw4satjmNJF_M6_j-Ssw.roa
Signing time:             Sun 01 Jan 2023 04:14:48 +0000
ROA not before:           Sun 01 Jan 2023 04:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204549
IP address blocks:        46.229.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:8a:12:93:cb:af:a1:15:ea:63:a3:e5:4d:57:b5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  1 04:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7620beab172c38b1ab6398d245fccebf8fe4acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:ad:54:fe:27:3f:36:0e:44:15:cd:99:69:
                    5e:91:f3:29:93:34:d6:37:62:63:88:93:34:00:78:
                    92:17:85:02:5f:dd:cf:8c:89:67:9b:e8:da:1e:eb:
                    c6:bf:c0:ce:2f:f6:6c:eb:ce:9d:f2:94:7c:c7:9c:
                    29:b2:d5:78:20:d6:da:16:57:73:40:67:1d:f1:57:
                    3f:d7:86:b2:98:cc:40:af:65:92:51:f2:f6:cd:fd:
                    65:ef:9f:51:c3:fe:4d:15:4a:c8:bb:16:77:58:a8:
                    84:df:8a:0a:9a:69:06:5d:68:0e:6e:aa:43:8e:bf:
                    2b:10:a9:ea:75:7b:7b:0d:18:d6:e8:5a:b1:1f:c3:
                    e9:42:68:32:8b:67:28:c2:72:f6:b5:79:a7:cd:a5:
                    5b:79:29:ce:e4:5f:ab:64:fc:60:ca:9e:82:4a:88:
                    8d:09:ea:c7:8b:22:d8:7a:2d:e5:54:25:cd:07:8f:
                    44:e4:3b:84:12:76:b7:1a:35:e7:eb:59:a0:4e:d4:
                    5e:91:28:7d:0f:29:f9:b0:3b:11:64:52:60:80:75:
                    07:b3:21:85:2c:77:96:a0:8d:c0:16:cc:9f:28:7e:
                    a7:a2:52:9e:d9:94:6a:3f:da:c4:f6:b4:4c:4d:dd:
                    8d:e2:d3:0d:92:5c:a1:bd:4e:d6:98:e7:f3:d9:e6:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:0B:EA:B1:72:C3:8B:1A:B6:39:8D:24:5F:CC:EB:F8:FE:4A:CC
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/52IL6rFyw4satjmNJF_M6_j-Ssw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ea:2a:89:9e:66:68:ef:b3:da:bf:c3:85:16:5e:e2:e4:e4:
         21:09:15:8c:01:8f:fc:98:47:a5:d6:82:2d:4b:a9:dc:ce:35:
         0e:cd:40:66:35:6b:23:e9:2d:23:7e:89:d3:6f:3c:47:6f:a3:
         9a:00:27:4f:15:a9:28:6f:0c:dc:3a:f5:33:dd:6e:cd:95:6f:
         8f:1e:9f:01:3e:54:c9:35:c8:3c:99:5b:ba:c8:b4:58:8f:2e:
         76:a0:b4:61:ec:92:17:2f:d0:96:de:e5:75:dd:43:27:7c:fe:
         2b:bc:56:0e:f3:ec:68:70:d0:c6:e0:6e:81:4a:53:73:4b:e7:
         14:7a:6f:ef:5f:93:d8:26:73:83:bf:66:db:5e:13:ec:ed:b7:
         db:6d:82:aa:6c:4d:72:ca:d6:9f:0d:ff:aa:86:94:07:5e:a4:
         70:3b:d8:09:d4:66:99:5f:11:0e:a8:d6:ab:2a:1c:da:08:f9:
         c6:c9:ed:bd:21:08:e8:07:d2:1e:62:a6:97:5d:0b:a4:08:dc:
         f2:57:24:0e:70:b5:9e:9f:1d:47:e7:ab:30:d4:97:09:9b:ae:
         04:74:10:32:37:48:7d:bf:4c:f3:7a:86:5a:2b:48:f6:72:2a:
         c3:82:db:34:ba:b6:b1:41:46:bb:3a:21:b1:80:75:c7:c4:4b:
         67:71:69:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrihKTy6+hFepjo+VNV7UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw
ZDJlZDYwHhcNMjMwMTAxMDQxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzYyMGJlYWIxNzJjMzhiMWFiNjM5OGQyNDVmY2NlYmY4ZmU0YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s+tVP4nPzYORBXNmWlekfMpkzTW
N2JjiJM0AHiSF4UCX93PjIlnm+jaHuvGv8DOL/Zs686d8pR8x5wpstV4INbaFldz
QGcd8Vc/14aymMxAr2WSUfL2zf1l759Rw/5NFUrIuxZ3WKiE34oKmmkGXWgObqpD
jr8rEKnqdXt7DRjW6FqxH8PpQmgyi2cownL2tXmnzaVbeSnO5F+rZPxgyp6CSoiN
CerHiyLYei3lVCXNB49E5DuEEna3GjXn61mgTtRekSh9Dyn5sDsRZFJggHUHsyGF
LHeWoI3AFsyfKH6nolKe2ZRqP9rE9rRMTd2N4tMNklyhvU7WmOfz2eZLXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdiC+qxcsOLGrY5jSRfzOv4/krMMB8GA1UdIwQY
MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt
ODhiMDE2YmJkNTgxLzEvNTJJTDZyRnl3NHNhdGptTkpGX002X2otU3N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx
LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU4MA0G
CSqGSIb3DQEBCwUAA4IBAQBs6iqJnmZo77Pav8OFFl7i5OQhCRWMAY/8mEel1oIt
S6nczjUOzUBmNWsj6S0jfonTbzxHb6OaACdPFakobwzcOvUz3W7NlW+PHp8BPlTJ
Ncg8mVu6yLRYjy52oLRh7JIXL9CW3uV13UMnfP4rvFYO8+xocNDG4G6BSlNzS+cU
em/vX5PYJnODv2bbXhPs7bfbbYKqbE1yytafDf+qhpQHXqRwO9gJ1GaZXxEOqNar
KhzaCPnGye29IQjoB9IeYqaXXQukCNzyVyQOcLWenx1H56sw1JcJm64EdBAyN0h9
v0zzeoZaK0j2cirDgts0uraxQUa7OiGxgHXHxEtncWm6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org