Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VeuKNK1TG6TqNk2Korv2Eu903l8.roa
File:                     VeuKNK1TG6TqNk2Korv2Eu903l8.roa (raw, json)
Hash identifier:          PtQdOsDA8lbLwoYhwGbLTplAjy4xx+im4m8zXY2zfjY=
Subject key identifier:   55:EB:8A:34:AD:53:1B:A4:EA:36:4D:8A:A2:BB:F6:12:EF:74:DE:5F
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       018636E6EABB302FC1E4321FA9C0874C8D81
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VeuKNK1TG6TqNk2Korv2Eu903l8.roa
Signing time:             Thu 09 Feb 2023 15:59:08 +0000
ROA not before:           Thu 09 Feb 2023 15:59:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        46.34.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 May 2023 07:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:e6:ea:bb:30:2f:c1:e4:32:1f:a9:c0:87:4c:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Feb  9 15:59:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55eb8a34ad531ba4ea364d8aa2bbf612ef74de5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:69:12:cf:f9:60:dd:1e:31:e1:9c:0f:18:82:
                    22:c9:3e:bf:08:ca:35:bb:7a:94:ee:dd:2e:d5:ea:
                    97:bb:f5:ca:b2:8f:4c:0a:ec:8d:60:0a:fd:fa:6a:
                    9c:6a:b8:26:a7:d9:96:32:3e:82:35:8f:0e:1d:66:
                    52:d8:95:98:40:b8:fc:33:0b:7d:11:d9:80:db:6b:
                    2d:e1:99:ff:b4:25:bd:61:b6:04:d4:af:95:00:b7:
                    4e:11:b3:bc:7c:4f:bc:d7:e7:e7:5b:38:c0:9e:e7:
                    72:97:e6:c1:b6:ff:0f:bf:a6:6c:14:45:11:36:96:
                    4d:a5:33:ff:71:67:4f:9b:d7:df:af:0e:c4:45:f4:
                    c9:fb:9e:2c:2b:54:9f:0b:56:b6:08:c7:eb:e5:93:
                    dd:c3:66:4d:bb:af:50:30:da:fe:14:29:c9:aa:ee:
                    51:63:3f:df:39:4a:19:3c:ea:04:7c:a0:cc:79:15:
                    a1:f0:1f:3e:16:2b:2b:51:cb:52:78:cd:68:16:ae:
                    90:11:36:10:e5:f0:e2:18:f2:c3:12:66:ad:33:20:
                    8b:47:4e:e7:13:13:ca:7e:aa:87:5f:d3:f3:36:b9:
                    c2:44:29:6c:fd:f3:c3:57:65:2f:56:82:93:a9:78:
                    59:4b:bd:84:70:47:37:d0:96:7c:e0:69:13:5a:69:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:8A:34:AD:53:1B:A4:EA:36:4D:8A:A2:BB:F6:12:EF:74:DE:5F
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VeuKNK1TG6TqNk2Korv2Eu903l8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.34.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:75:1b:2b:72:8f:99:a4:db:87:e6:a7:cf:db:6e:0a:7c:3e:
         97:1d:a7:a2:60:60:5f:63:08:6c:24:f1:8c:ca:24:5f:4d:c6:
         58:61:47:cc:32:32:f0:53:6c:bf:21:26:f7:ff:1c:e7:63:b9:
         ce:97:20:ed:6e:28:c5:d3:9f:7a:44:8d:43:f1:00:16:f0:22:
         d1:b8:99:97:f9:31:43:ac:50:7f:13:d3:47:5c:d1:46:b4:2b:
         0c:a7:1d:1e:79:7e:a0:83:c2:d2:a9:48:9e:e5:72:e4:00:3f:
         45:04:c3:1c:86:50:4f:b7:09:54:c9:f8:0b:d3:cc:4d:43:10:
         03:44:5b:ef:a1:92:d4:8e:75:0f:d2:9a:5e:ea:84:b0:f6:8c:
         b6:d6:2d:80:1d:fe:e7:b5:c3:35:1e:1d:37:60:39:8d:1c:ed:
         d1:15:f1:d6:14:8f:62:ca:f4:25:71:04:ac:33:27:8d:9e:e1:
         d1:74:20:f2:50:24:69:cf:a1:72:49:71:f6:90:c1:0e:3b:1c:
         51:ed:44:b9:20:02:05:2f:5e:3d:c7:9e:1d:4a:23:5d:39:ce:
         cc:94:11:da:7f:d0:b3:24:8b:b0:6f:5b:c9:4a:5e:94:8c:fb:
         88:2f:96:44:15:2c:6b:5a:b9:62:f4:84:ef:94:e5:7e:9a:3f:
         e9:37:08:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org