Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa
File:                     4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa (raw, json)
Hash identifier:          LhquLDYs4LWf5H0QA+tVADJi78ifDRVGAaF7LExChjg=
Subject key identifier:   E3:F8:AB:AB:AF:E5:6E:71:AF:43:E1:99:FF:07:F6:89:FC:DD:E6:D5
Certificate issuer:       /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial:       01856CCAF9012412087F74559A64AF2BBCB0
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa
Signing time:             Sun 01 Jan 2023 10:05:19 +0000
ROA not before:           Sun 01 Jan 2023 10:05:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49218
IP address blocks:        46.165.0.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:f9:01:24:12:08:7f:74:55:9a:64:af:2b:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
        Validity
            Not Before: Jan  1 10:05:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3f8ababafe56e71af43e199ff07f689fcdde6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:4a:cc:39:ab:12:42:45:37:7a:eb:53:4e:
                    a9:1e:58:6c:1e:b4:90:b3:ef:fe:a3:98:f2:c2:30:
                    c6:4e:1c:7e:d6:02:6d:cb:d8:03:e8:11:c9:c0:ae:
                    58:84:43:9c:61:d0:76:e2:fd:2f:2b:dd:33:1a:10:
                    17:12:36:4f:22:05:c8:8e:61:4c:7f:a6:b2:a8:c8:
                    b7:08:69:ce:be:28:be:55:fc:91:8c:2c:31:8b:81:
                    98:e3:61:eb:84:00:70:d7:4d:83:bb:89:06:25:8d:
                    e5:83:8d:c0:1e:7e:fd:be:24:3f:00:9b:dc:97:9d:
                    63:8c:9f:84:19:2a:11:a0:e2:c3:6a:6c:1b:f5:18:
                    65:d7:42:18:db:da:f3:7f:9d:41:c9:cb:ca:42:57:
                    8e:10:77:65:af:88:88:ba:90:65:26:09:dc:05:74:
                    8b:47:9e:a6:c1:3c:0f:24:b2:8f:a3:3c:2e:10:b4:
                    15:65:76:b4:be:29:bf:3a:89:c1:de:a6:6a:c1:af:
                    d8:e1:e2:4e:e3:1e:cd:5d:53:d7:bd:0e:dd:58:f4:
                    45:bd:a3:55:76:a2:cc:10:3a:25:22:d1:67:40:f5:
                    fd:32:0f:f8:99:82:48:fa:61:90:75:d9:38:21:29:
                    97:df:72:aa:ac:84:62:34:c9:72:5b:28:15:4e:85:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F8:AB:AB:AF:E5:6E:71:AF:43:E1:99:FF:07:F6:89:FC:DD:E6:D5
            X509v3 Authority Key Identifier:
                keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.165.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:47:0c:cd:98:5e:8d:ad:16:18:21:cf:cf:48:b5:67:a1:b4:
         95:4f:2b:6f:09:04:76:c5:c0:b3:9e:b2:fa:86:da:27:ea:4a:
         d3:11:c6:31:be:22:c1:1f:91:44:65:f4:39:87:19:d8:12:5c:
         fb:b7:a9:87:f1:54:34:15:eb:d5:3b:1b:fb:af:05:d7:4a:d8:
         ae:17:bb:93:d0:57:65:ca:98:c8:a6:29:05:83:eb:72:82:03:
         90:7e:10:cc:ab:74:94:eb:bf:10:52:3e:03:65:08:93:ec:44:
         a8:2f:b1:f9:fb:fe:10:7b:e4:e5:95:ef:10:aa:a3:3d:14:ec:
         66:e7:05:6b:27:c5:b1:db:ce:f6:61:73:6d:4e:0b:57:89:cd:
         cf:e5:f5:24:45:90:f5:7e:4f:ed:ee:0d:22:1f:b5:b3:d6:16:
         32:fd:77:05:bc:cc:06:53:59:8b:73:ec:fd:e7:fe:62:d1:9e:
         0b:25:f9:a1:a9:8c:a5:ab:ac:df:d0:db:94:f4:be:6b:44:fc:
         3b:fa:27:a7:a2:0e:99:bd:22:c9:0e:48:a9:26:4b:0d:f9:b7:
         a3:a5:bc:8e:18:1a:66:48:b2:5d:7a:51:21:9a:7e:2d:f0:1f:
         70:c5:de:ca:44:83:03:00:45:ab:e7:bf:d8:8d:db:b5:45:96:
         d2:d0:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org