Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ZEqAP6lKRCRyOFSELO3SnYSKjBE.roa
File:                     ZEqAP6lKRCRyOFSELO3SnYSKjBE.roa (raw, json)
Hash identifier:          SrQCKM+ZJ0a+Lh7XUhqmcWKSWm9sJoiZRjk9lHYUw98=
Subject key identifier:   64:4A:80:3F:A9:4A:44:24:72:38:54:84:2C:ED:D2:9D:84:8A:8C:11
Certificate issuer:       /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial:       018639B683C01B4D7C4AA6AD3E2239290810
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ZEqAP6lKRCRyOFSELO3SnYSKjBE.roa
Signing time:             Fri 10 Feb 2023 05:05:07 +0000
ROA not before:           Fri 10 Feb 2023 05:05:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199986
IP address blocks:        46.231.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:39:b6:83:c0:1b:4d:7c:4a:a6:ad:3e:22:39:29:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
        Validity
            Not Before: Feb 10 05:05:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=644a803fa94a4424723854842cedd29d848a8c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:4b:22:85:46:7a:b4:f7:f5:a4:11:ff:eb:
                    04:fe:81:e0:1e:2e:eb:f8:0c:04:e6:aa:f5:65:27:
                    4c:7b:a9:f9:50:a3:11:11:28:ca:6f:7f:16:f9:04:
                    fd:09:6d:f1:75:68:79:2a:fe:09:f1:65:43:cc:64:
                    a5:6a:d5:6c:e7:aa:54:ce:eb:37:b5:bb:d7:4d:b1:
                    d1:7b:e3:a2:26:6e:30:16:91:ef:ec:2a:a9:89:21:
                    7a:78:fb:40:22:05:fc:64:45:ca:6c:5a:e8:b7:14:
                    f5:93:ff:b5:db:58:2e:b4:08:96:c0:3f:f1:a8:38:
                    13:a7:83:45:8b:e0:21:e4:1e:84:82:fd:41:4f:04:
                    80:fa:0f:13:3e:b0:c4:47:f5:4f:e3:a8:b1:30:60:
                    e2:07:c1:48:bf:2c:bd:80:1e:9b:b8:a9:57:12:66:
                    f5:4d:b3:1d:cc:34:1b:55:ea:35:79:83:b7:3d:4b:
                    d2:cc:8d:48:18:e7:dc:4a:a2:f3:dd:98:78:fd:17:
                    14:36:51:2d:21:df:a0:21:48:41:25:d6:f5:86:75:
                    88:4f:38:53:5d:56:29:f6:20:82:1c:3d:27:c8:b5:
                    70:4e:94:e2:0b:aa:00:83:c6:9e:44:91:23:a9:d1:
                    61:e5:c3:0d:8c:4a:b5:fd:ac:d2:0b:79:c3:e6:8d:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:80:3F:A9:4A:44:24:72:38:54:84:2C:ED:D2:9D:84:8A:8C:11
            X509v3 Authority Key Identifier:
                keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/ZEqAP6lKRCRyOFSELO3SnYSKjBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.231.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:05:33:a2:73:5e:ab:56:a3:42:d4:90:58:5d:4f:fc:74:4f:
         51:2c:18:fb:5c:bd:7c:a6:b8:56:1e:c3:08:28:14:0d:7b:e8:
         2b:d1:04:77:80:bd:d7:80:39:94:0e:55:4e:fc:42:36:c5:55:
         93:13:00:77:4d:27:fa:e2:19:f4:19:d1:aa:5c:e0:72:d8:ae:
         d9:d7:13:38:6b:28:74:9b:01:77:4e:51:af:e8:5a:aa:78:0b:
         38:5a:39:33:c6:68:17:9f:fa:42:b1:f7:c6:45:c3:c4:56:5a:
         f0:c3:dd:ee:59:aa:88:29:a1:e3:a8:e3:e1:22:ed:1a:43:ed:
         5e:70:4f:1c:b6:e5:d7:86:8b:a7:e2:15:96:35:a0:1a:3b:c1:
         46:73:08:71:dd:a3:a1:3c:93:ce:e7:4a:85:bf:df:2b:45:9c:
         be:75:b1:84:53:e3:99:b1:a4:fb:4e:be:21:76:03:fd:f2:7a:
         86:bc:da:9b:ad:14:66:60:57:51:5e:98:d0:b0:09:8c:69:73:
         d5:27:e7:e7:90:4c:93:af:2a:15:92:f2:ae:3b:e5:bd:2c:1e:
         09:a7:f6:6c:14:30:fa:ab:b5:50:e6:82:33:71:ea:36:35:cf:
         fe:82:09:92:59:03:3e:c6:dd:c5:5d:fa:07:9c:13:1c:0c:92:
         45:51:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-fra.rpki-client.org