Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa
File:                     0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa (raw, json)
Hash identifier:          OJAlvnhTR8IZ82b4OowOcvafK3A9DFpAKyuUZF8mOgc=
Subject key identifier:   D1:1D:04:F8:07:44:D9:28:82:8B:69:D4:AD:69:12:4B:37:EF:60:E7
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01863B79E0256D375CBDF552E5C2126FEF74
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa
Signing time:             Fri 10 Feb 2023 13:18:08 +0000
ROA not before:           Fri 10 Feb 2023 13:18:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197100
IP address blocks:        46.34.32.0/21 maxlen: 21
                          46.34.32.0/19 maxlen: 19
                          46.34.48.0/20 maxlen: 20
                          46.34.60.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 10 Feb 2023 13:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3b:79:e0:25:6d:37:5c:bd:f5:52:e5:c2:12:6f:ef:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Feb 10 13:18:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d11d04f80744d928828b69d4ad69124b37ef60e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:18:90:53:d3:8c:0f:e9:ab:90:0c:f7:62:
                    db:fb:52:ac:0d:4c:4c:6b:ce:37:9c:14:3b:63:7d:
                    83:e5:66:42:59:7e:54:0c:22:be:45:b9:56:da:ed:
                    bd:a6:f5:3b:67:3a:6c:2b:3b:3d:20:06:91:31:80:
                    b8:0c:80:45:24:aa:f4:e2:8f:48:79:b5:b1:38:c8:
                    66:22:a5:01:8b:0d:e1:08:06:d6:59:26:42:b4:28:
                    c5:38:7d:12:da:ce:4f:6d:c7:77:a0:5f:95:4b:c9:
                    43:6a:8c:20:d4:9c:24:3a:b2:93:80:ff:01:77:ee:
                    ad:7d:5c:4a:8c:5d:9f:13:e2:c5:a5:39:cf:54:0d:
                    03:be:4e:ba:fc:6d:61:79:9a:ba:3e:c3:a8:19:de:
                    3e:63:da:cc:ad:01:27:60:ee:73:a7:e4:32:9f:a4:
                    42:95:96:29:2f:a3:b5:a8:eb:3a:65:e7:cf:ab:32:
                    fa:90:c3:c4:43:78:77:cb:cf:d7:54:d3:6d:02:71:
                    66:77:b9:4b:f5:ba:ad:cd:71:4e:c1:b7:d7:98:75:
                    c9:25:35:f5:e5:72:6a:a5:ac:24:f7:f2:97:a9:5d:
                    e8:26:49:c8:c6:12:93:a8:1c:ac:83:11:f0:ec:c5:
                    ab:c6:d0:43:8a:a5:81:5e:d1:69:93:15:d9:1e:3f:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1D:04:F8:07:44:D9:28:82:8B:69:D4:AD:69:12:4B:37:EF:60:E7
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:d8:fd:ec:9b:a1:07:45:dc:f3:1f:32:aa:32:0f:a6:54:b4:
         2d:74:a9:8e:66:10:61:1f:a1:7a:12:ce:1b:c2:2d:25:87:44:
         15:78:de:26:40:5d:ae:15:da:9b:67:44:34:5f:a4:84:dc:1b:
         b1:28:eb:92:97:27:fe:43:14:4e:02:09:c5:22:32:ca:6c:dc:
         f9:9b:f5:b1:07:00:3d:5b:2a:c6:99:42:95:52:35:12:4a:59:
         3b:f0:e0:cf:af:68:10:45:f9:dc:c7:85:ec:39:6e:ab:41:10:
         73:bf:17:d0:a0:2c:79:22:59:1f:68:29:63:13:47:d1:88:31:
         7a:cb:87:4c:bd:3b:76:aa:61:de:41:7b:bb:0b:79:0f:a7:a1:
         96:56:31:ad:b3:44:e6:ca:e3:d1:51:75:cf:7c:53:4e:9e:a4:
         fa:61:51:9f:7c:e4:c8:e8:2a:ba:17:aa:9b:39:3f:78:a7:6d:
         05:4c:dc:ea:45:fc:8a:08:6a:80:94:8e:33:88:7b:0c:dc:0e:
         60:54:dc:f0:60:e8:92:7a:08:e4:7a:66:63:0e:c3:8d:0b:37:
         00:c2:26:ae:eb:35:c9:ed:c1:55:21:de:78:44:f9:66:92:91:
         67:e2:55:ad:b3:bf:c4:b5:fb:01:57:1b:1f:ca:9c:08:99:45:
         3e:cd:bc:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY7eeAlbTdcvfVS5cISb+90MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMjEwMTMxODA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTFkMDRmODA3NDRkOTI4ODI4YjY5ZDRhZDY5MTI0YjM3ZWY2MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2YYkFPTjA/pq5AM92Lb+1KsDUxM
a843nBQ7Y32D5WZCWX5UDCK+RblW2u29pvU7ZzpsKzs9IAaRMYC4DIBFJKr04o9I
ebWxOMhmIqUBiw3hCAbWWSZCtCjFOH0S2s5Pbcd3oF+VS8lDaowg1JwkOrKTgP8B
d+6tfVxKjF2fE+LFpTnPVA0Dvk66/G1heZq6PsOoGd4+Y9rMrQEnYO5zp+Qyn6RC
lZYpL6O1qOs6ZefPqzL6kMPEQ3h3y8/XVNNtAnFmd7lL9bqtzXFOwbfXmHXJJTX1
5XJqpawk9/KXqV3oJknIxhKTqBysgxHw7MWrxtBDiqWBXtFpkxXZHj8jJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEdBPgHRNkogotp1K1pEks372DnMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvMFIwRS1BZEUyU2lDaTJuVXJXa1NTemZ2WU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiIgMA0G
CSqGSIb3DQEBCwUAA4IBAQBY2P3sm6EHRdzzHzKqMg+mVLQtdKmOZhBhH6F6Es4b
wi0lh0QVeN4mQF2uFdqbZ0Q0X6SE3BuxKOuSlyf+QxROAgnFIjLKbNz5m/WxBwA9
WyrGmUKVUjUSSlk78ODPr2gQRfncx4XsOW6rQRBzvxfQoCx5IlkfaCljE0fRiDF6
y4dMvTt2qmHeQXu7C3kPp6GWVjGts0TmyuPRUXXPfFNOnqT6YVGffOTI6Cq6F6qb
OT94p20FTNzqRfyKCGqAlI4ziHsM3A5gVNzwYOiSegjkemZjDsONCzcAwiau6zXJ
7cFVId54RPlmkpFn4lWts7/EtfsBVxsfypwImUU+zbwz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org