Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Tg49jpfAkBkx-6UP4qVx8JsyXrg.roa
File:                     Tg49jpfAkBkx-6UP4qVx8JsyXrg.roa (raw, json)
Hash identifier:          swGXfRAJZmYock1fK6wJbEwaVdremA02kl19efzkZxw=
Subject key identifier:   4E:0E:3D:8E:97:C0:90:19:31:FB:A5:0F:E2:A5:71:F0:9B:32:5E:B8
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       01867E5EF3E592A34AD58CF03D6D6260479D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Tg49jpfAkBkx-6UP4qVx8JsyXrg.roa
Signing time:             Thu 23 Feb 2023 13:03:17 +0000
ROA not before:           Thu 23 Feb 2023 13:03:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        46.34.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Feb 2023 15:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:5e:f3:e5:92:a3:4a:d5:8c:f0:3d:6d:62:60:47:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Feb 23 13:03:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e0e3d8e97c0901931fba50fe2a571f09b325eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4b:61:f7:3b:48:c2:28:fc:6e:c5:b2:85:90:
                    c6:49:3d:f0:55:d5:80:eb:a1:10:21:08:dc:54:75:
                    9a:e3:58:e7:66:6d:bc:cd:80:2d:53:93:28:3e:50:
                    2e:75:fc:99:f3:a6:54:27:03:20:21:5d:cb:00:96:
                    df:54:31:6f:71:8e:bd:e9:19:fe:05:90:38:64:c1:
                    f0:0c:7e:41:93:8a:81:06:0e:af:ee:31:ed:5d:07:
                    9a:5b:cc:d2:9c:0f:1b:2d:e5:72:b1:09:43:f3:74:
                    bf:dc:73:e2:13:9f:dd:19:e9:56:8c:b5:38:f3:72:
                    f4:3f:8f:4b:50:14:83:51:5f:e7:4a:80:2c:85:5d:
                    cb:53:90:78:4f:a5:ef:38:d1:7d:d9:7e:b9:2b:b9:
                    a0:18:27:84:92:65:67:6f:5a:fd:d1:39:ed:c5:35:
                    e2:fe:7d:90:13:32:40:5c:d4:f3:fa:a7:79:5e:d1:
                    11:26:41:a3:b6:10:0d:c0:5a:b8:54:0f:ac:b1:78:
                    34:89:72:22:e8:8d:9b:32:80:9f:a5:0e:95:f3:9e:
                    7d:39:df:6b:b0:9a:2a:72:5f:a4:8e:65:99:9e:54:
                    a0:5d:6c:4f:0f:82:60:4f:3e:04:33:d5:18:0e:b8:
                    a7:ef:68:d0:25:ca:d3:8c:f1:14:44:25:91:40:ec:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:3D:8E:97:C0:90:19:31:FB:A5:0F:E2:A5:71:F0:9B:32:5E:B8
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Tg49jpfAkBkx-6UP4qVx8JsyXrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:bc:a4:fd:45:5c:6b:a1:c1:f2:c3:c8:59:04:3d:c7:d8:60:
         12:b6:56:9a:e5:c8:4a:1a:81:ae:e3:dc:37:4a:71:18:e6:48:
         6c:f3:f8:d6:e5:a2:1e:05:5c:4a:6b:0c:ee:06:1c:1b:b7:56:
         19:08:d0:e2:f6:1f:47:c7:fc:eb:aa:b7:01:5e:5c:f7:5c:01:
         4f:4f:8e:b1:07:88:74:0d:78:dc:db:a3:42:71:de:56:37:f4:
         df:9e:0c:d5:78:5d:05:0d:d5:d5:74:e0:bd:5e:87:89:89:a0:
         9a:4a:8d:d1:bb:83:30:60:bd:fb:1f:24:12:4e:6c:36:44:c0:
         93:fb:fa:99:18:94:c9:c2:6b:ef:27:92:ae:c2:1c:38:7e:d3:
         c5:61:3b:78:83:75:13:11:fa:24:87:54:ba:8d:7a:3e:db:58:
         df:fb:6e:5e:f9:e2:83:9d:b1:fd:86:d3:7e:28:9a:f9:f5:48:
         0d:90:d6:48:98:1c:0f:b5:6e:4c:c3:71:05:e0:61:f6:f9:f6:
         fb:92:4f:85:9a:ee:da:10:3d:b9:e2:d0:ac:3e:e4:14:c1:0b:
         bc:ad:a3:2f:0f:b5:8c:b5:22:a8:b1:5f:bf:c9:56:6f:07:7d:
         08:a3:2f:c2:36:67:b4:7e:53:68:e9:54:53:75:42:53:56:6a:
         85:4f:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org