Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46adshBjSPWTipyEg-2cYqKBrU0.roa
File:                     46adshBjSPWTipyEg-2cYqKBrU0.roa (raw, json)
Hash identifier:          q3/P1n+u+mGX5rqmjlK9FMkaAmIxyjAKWgyo6FTOB5M=
Subject key identifier:   E3:A6:9D:B2:10:63:48:F5:93:8A:9C:84:83:ED:9C:62:A2:81:AD:4D
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01892244F1DA247A9313D8F78D4E12939715
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46adshBjSPWTipyEg-2cYqKBrU0.roa
Signing time:             Tue 04 Jul 2023 18:58:10 +0000
ROA not before:           Tue 04 Jul 2023 18:58:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29437
IP address blocks:        193.230.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:22:44:f1:da:24:7a:93:13:d8:f7:8d:4e:12:93:97:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jul  4 18:58:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3a69db2106348f5938a9c8483ed9c62a281ad4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:ab:79:0a:a5:cf:3b:a8:48:b1:e6:d0:43:
                    fc:13:c1:a1:29:6e:69:cc:c5:81:91:2b:6b:9b:2b:
                    e2:74:dc:9c:77:9c:ab:82:1c:36:50:4c:ba:bf:d2:
                    8a:5e:9f:95:92:06:c6:55:f5:51:a5:39:fd:e4:2f:
                    37:63:e5:32:a7:64:76:7d:e0:f6:55:55:73:58:af:
                    c5:fb:91:48:e9:03:84:93:f5:9f:53:ad:d3:4c:fd:
                    b8:f4:ea:4f:57:a2:11:d1:43:6d:48:76:b6:71:ba:
                    f3:10:58:db:cf:d9:dd:b2:0d:fa:75:83:cf:cb:21:
                    e8:27:b0:20:66:9f:e0:2c:f0:e9:bb:4c:cc:ba:cd:
                    48:07:4c:11:39:25:9d:d5:40:dd:cd:56:45:ca:33:
                    cd:10:23:69:c6:0f:7b:d0:e9:21:ad:c0:36:ed:33:
                    b6:d6:e2:17:92:19:64:5e:ba:6b:bb:cb:49:ce:73:
                    0a:a0:fe:6d:3d:cf:48:f4:b0:af:c2:e5:ea:24:14:
                    48:6e:73:30:06:e7:fc:f4:26:8d:93:40:ba:12:57:
                    20:15:e9:94:cc:dc:a2:d3:98:58:36:cc:f1:5b:1e:
                    ad:6c:f3:03:f9:98:49:44:a3:c5:ad:32:1e:8d:1d:
                    7a:0e:04:d7:c9:e7:83:b8:54:ab:bb:ea:ec:f0:ed:
                    b3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:9D:B2:10:63:48:F5:93:8A:9C:84:83:ED:9C:62:A2:81:AD:4D
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46adshBjSPWTipyEg-2cYqKBrU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.230.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:c8:e8:a6:a3:4d:30:d4:7f:c0:59:ce:08:9a:aa:38:3c:
         c2:6f:57:24:1e:47:d6:94:5f:95:59:43:ce:11:24:12:f8:33:
         36:53:62:ff:5f:d8:d4:f2:c0:c5:3f:de:07:99:68:04:6b:c5:
         db:5a:e1:52:2c:da:e4:46:d6:52:43:6d:db:1a:9c:e1:e7:d6:
         47:7a:af:62:9e:d6:f5:85:fc:62:3f:18:7a:ad:d2:1f:57:27:
         3e:53:1e:20:96:20:a8:ad:cc:91:86:47:51:c9:80:e9:16:f1:
         94:05:7b:93:50:c0:97:c6:42:e9:ac:71:a6:23:32:28:33:17:
         3c:b4:4c:26:a3:b5:8e:f0:18:11:5f:59:37:27:6f:1e:da:cf:
         2d:f3:e2:72:be:c6:e5:11:86:fd:30:03:df:11:11:07:c4:25:
         a5:10:b2:e9:ef:30:ed:82:7b:aa:20:19:59:eb:9c:e2:62:96:
         ad:2c:f5:d1:2d:8a:bb:b9:60:0a:67:5c:f0:95:dc:88:d5:87:
         be:df:ec:e5:34:d6:b2:8e:23:f4:4c:10:86:19:e1:0c:4c:b2:
         86:c6:9b:25:e6:d5:79:0f:39:ac:73:21:ee:73:c3:70:12:48:
         a0:9e:e8:a3:10:f8:8e:7a:d4:f9:58:39:cc:96:8b:db:02:b1:
         1a:56:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org