Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PEto82kCUwJ-Jj9i84ocfO9FDqI.roa
File:                     PEto82kCUwJ-Jj9i84ocfO9FDqI.roa (raw, json)
Hash identifier:          2PBnp2VcmBLtYxERoTkHFiPfs/AFCIse4NwGKRb1rD8=
Subject key identifier:   3C:4B:68:F3:69:02:53:02:7E:26:3F:62:F3:8A:1C:7C:EF:45:0E:A2
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       01856CE65B66994B0F3D810D6F0F642BBF22
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PEto82kCUwJ-Jj9i84ocfO9FDqI.roa
Signing time:             Sun 01 Jan 2023 10:35:14 +0000
ROA not before:           Sun 01 Jan 2023 10:35:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44851
IP address blocks:        46.10.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:5b:66:99:4b:0f:3d:81:0d:6f:0f:64:2b:bf:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Jan  1 10:35:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3c4b68f3690253027e263f62f38a1c7cef450ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:37:62:e5:42:4a:37:53:03:b2:39:59:05:
                    ef:88:0a:d7:b5:65:84:2a:ec:27:bd:2d:ef:fb:51:
                    10:1e:e8:14:c3:ad:83:ed:6f:a6:c1:36:09:51:cc:
                    75:34:7f:69:f1:0e:69:98:0b:74:df:4f:a6:26:15:
                    03:cb:0b:4c:19:03:e4:ef:fb:98:8e:00:3d:1c:53:
                    d8:6d:2b:53:5a:38:68:40:37:83:2c:03:c1:11:19:
                    5e:a8:1b:ce:d2:af:79:f9:17:5d:88:d3:b3:7e:4f:
                    02:ec:63:91:b6:e1:49:20:41:31:4b:26:8f:65:8a:
                    50:65:c5:2a:55:a5:55:e5:83:97:24:f5:68:8c:6b:
                    fe:a6:15:9b:28:93:3d:84:48:62:4f:fd:e5:99:6e:
                    23:56:da:c5:73:d9:97:04:31:0f:06:8f:12:31:42:
                    11:d5:3e:e8:07:90:c3:97:33:bb:e6:1e:cd:e5:94:
                    1e:ef:bc:fb:97:df:6e:db:0f:50:fe:33:13:88:f9:
                    00:5f:16:8c:1a:81:67:55:46:78:21:00:40:2e:6d:
                    3f:3f:b6:58:6c:9e:a4:a5:5a:ce:65:ae:b2:1d:7f:
                    74:c2:78:e5:d9:72:85:6d:e6:e5:ef:db:b5:17:81:
                    a8:e0:f8:f7:44:9a:d7:5c:5b:16:1e:17:5f:09:3f:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:68:F3:69:02:53:02:7E:26:3F:62:F3:8A:1C:7C:EF:45:0E:A2
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PEto82kCUwJ-Jj9i84ocfO9FDqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.10.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:f3:6b:89:0a:d2:6e:18:68:00:4b:16:2f:4b:33:27:4e:
         ac:d5:dd:d1:73:fd:b3:0b:1b:23:5c:0e:f0:08:0b:66:89:0f:
         cf:b5:36:89:e7:d0:df:dc:bb:4d:76:b4:f1:41:32:f5:b1:70:
         1f:ef:2b:06:c0:39:b3:b7:40:b2:65:71:14:e5:8c:a5:b6:3c:
         ce:61:08:a7:43:67:86:3c:fe:9e:8b:07:d2:a9:0d:bd:e4:84:
         e1:d8:f6:4a:f3:63:6a:4c:12:fb:3c:c1:74:6e:b1:d8:2a:ad:
         ef:bd:ab:fc:e4:8b:6b:4a:82:91:e7:a0:a9:fe:46:f8:58:e5:
         f1:78:2a:b7:3f:21:39:9f:ad:73:de:5d:03:ee:f6:38:71:7b:
         d4:d7:b2:0d:d8:82:0f:82:9d:f1:14:c0:85:34:b9:67:8f:92:
         ca:a9:ea:d9:40:91:0d:9d:d8:90:43:82:f0:0e:c4:9c:f1:f2:
         5c:09:d3:28:4d:29:47:bc:0f:c0:2d:74:75:7d:19:38:08:36:
         83:35:2f:a2:83:01:10:33:05:e2:43:af:dc:5e:4a:55:b6:ab:
         57:14:44:30:ce:f0:2d:e6:04:ba:54:22:73:50:ff:fb:b9:dc:
         56:ab:f7:e9:d0:db:d2:fd:fa:8c:fc:a4:ba:4b:72:ca:46:14:
         f2:9c:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org