Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4aYEn1RJweWxcnmBY19JtygGS6o.roa
File:                     4aYEn1RJweWxcnmBY19JtygGS6o.roa (raw, json)
Hash identifier:          PtzPpF8n7yDNwjMVa0EF0fkUWQ4nBzzcjUU6dWEQXZc=
Subject key identifier:   E1:A6:04:9F:54:49:C1:E5:B1:72:79:81:63:5F:49:B7:28:06:4B:AA
Certificate issuer:       /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial:       0190B28B087C6D4A7C1CAA359042053B9139
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4aYEn1RJweWxcnmBY19JtygGS6o.roa
Signing time:             Sun 14 Jul 2024 18:39:34 +0000
ROA not before:           Sun 14 Jul 2024 18:39:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205733
IP address blocks:        94.154.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 09:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b2:8b:08:7c:6d:4a:7c:1c:aa:35:90:42:05:3b:91:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
        Validity
            Not Before: Jul 14 18:39:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e1a6049f5449c1e5b1727981635f49b728064baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:9f:55:a1:b8:d2:13:ed:4a:f8:6b:31:06:
                    45:0c:50:80:17:ba:c3:e6:37:cc:2c:82:20:87:9c:
                    83:ae:9f:3b:65:d1:eb:5d:31:d8:25:1f:5f:43:01:
                    3a:d8:c4:5c:a6:e3:f6:0c:62:9a:44:31:56:35:44:
                    75:1a:a9:fe:c5:d5:90:18:36:57:a1:01:71:a1:11:
                    6d:1f:49:67:21:63:bd:12:07:c5:66:af:a9:8a:9a:
                    32:ab:ee:41:93:cf:54:e5:b6:c8:1b:77:7e:51:87:
                    54:41:3f:c6:99:30:9f:5c:57:c5:ff:d6:ab:5a:18:
                    04:a4:41:47:29:80:f0:d4:6f:b2:c3:ef:69:3d:66:
                    a4:59:96:32:43:99:38:53:d9:d3:f3:d3:16:92:19:
                    e9:91:a0:44:aa:f0:81:1c:fd:4a:17:b1:f2:50:92:
                    85:fd:a4:f9:b7:cc:db:73:8b:b8:62:56:f9:84:53:
                    c2:c8:be:5d:94:06:a2:73:7a:0b:82:01:99:8c:a8:
                    e2:47:a7:43:ea:3c:17:99:57:41:72:8f:ff:55:ad:
                    6f:7d:80:89:c5:ca:6a:49:0d:78:27:89:97:e8:8a:
                    aa:73:2d:52:72:74:25:8a:65:10:eb:61:69:97:01:
                    9b:e5:ee:28:43:28:73:1f:73:c6:98:81:f6:17:c7:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:04:9F:54:49:C1:E5:B1:72:79:81:63:5F:49:B7:28:06:4B:AA
            X509v3 Authority Key Identifier:
                keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4aYEn1RJweWxcnmBY19JtygGS6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:00:8f:f4:d9:ee:2e:ca:3c:7a:14:fc:a7:09:6d:46:b9:7e:
         5f:85:58:74:82:0a:20:7b:4d:1a:af:19:a5:b6:7c:04:7a:48:
         f8:85:f3:77:3b:8e:3d:56:60:03:f9:6d:7b:26:3c:a1:94:ff:
         e9:b3:57:52:55:dd:b2:76:fd:c3:7e:18:02:96:93:e9:bb:ec:
         1d:37:e8:24:e0:91:4f:eb:5c:12:cd:52:1d:e1:60:66:0b:15:
         55:83:cc:59:af:64:e7:d4:08:22:78:9f:81:a3:07:de:47:d2:
         8a:81:e1:51:e6:28:fd:f8:77:bc:12:76:3a:f5:c3:fa:26:f2:
         2a:67:c5:3d:84:1d:70:73:53:45:19:41:fb:1f:69:f8:da:4d:
         3c:ee:e5:65:07:7e:19:f8:c1:90:ab:6c:ab:f0:5b:95:7d:c8:
         50:56:ac:2f:06:81:87:79:7f:a8:ec:7a:99:4b:05:b2:f9:69:
         84:af:ad:a1:d4:62:6f:5d:79:f0:bc:1b:bb:48:30:02:8f:02:
         fb:6c:9f:b2:7e:64:2b:83:68:72:17:dd:1d:12:71:02:4e:e5:
         be:09:3c:47:25:9b:0b:ea:c9:52:16:4b:27:9e:2f:b2:eb:62:
         4e:e3:b7:20:70:08:f3:db:b2:11:50:1c:34:43:32:f6:b8:98:
         36:da:a2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 12:05:54 2024 by rpki-client on console-ams.rpki-client.org