Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa
File:                     e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa (raw, json)
Hash identifier:          pQ6GgKXYS5LwxQuTukNWzqPM8fVebJWI450YNm559mY=
Subject key identifier:   7B:64:F5:5D:38:37:E4:20:86:65:37:E2:1E:E6:91:B4:09:84:39:9D
Certificate issuer:       /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial:       01888D39717DF5276D9360DAED276C0EE4EE
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa
Signing time:             Mon 05 Jun 2023 20:22:11 +0000
ROA not before:           Mon 05 Jun 2023 20:22:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48208
IP address blocks:        46.238.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8d:39:71:7d:f5:27:6d:93:60:da:ed:27:6c:0e:e4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
        Validity
            Not Before: Jun  5 20:22:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b64f55d3837e420866537e21ee691b40984399d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:4d:7d:7f:eb:e5:99:8f:00:e3:79:58:c1:
                    87:f0:fe:a6:03:d2:a8:cd:48:2e:8e:02:d2:17:aa:
                    d9:16:00:f7:99:5c:aa:0c:9a:a1:90:7b:a7:ec:3a:
                    7d:d4:92:37:6c:2b:53:ec:60:53:cb:52:a3:0e:ea:
                    c4:6b:7e:16:39:3d:60:1c:20:df:b6:1d:f9:d6:dc:
                    c7:25:0b:e9:b5:e8:10:62:2e:54:7f:6c:22:c2:a0:
                    c1:ee:4e:e2:f3:53:23:e4:93:c1:46:fa:80:4e:7f:
                    da:f9:28:6f:a0:86:36:25:f6:b4:f4:fb:4b:7d:06:
                    c0:17:62:50:c3:55:df:8c:a3:a2:2f:ea:1e:98:6f:
                    8d:a8:ab:8a:4d:de:e6:4b:82:7f:72:3e:bc:7e:88:
                    e8:87:e0:7e:cd:b6:fd:60:10:e2:ec:58:3d:d5:16:
                    7d:40:8f:aa:aa:b8:11:30:cc:66:62:50:24:c3:d4:
                    53:b2:05:b3:02:61:b8:6b:5f:89:cd:71:70:ba:ff:
                    92:cf:83:42:02:c9:17:10:8e:31:b8:d9:26:9f:58:
                    6c:59:41:4b:71:9d:cb:85:68:9e:f8:c8:9d:66:cf:
                    67:94:1c:9f:10:d1:4c:61:6f:93:4e:7c:b0:a5:34:
                    fe:ae:db:32:b8:9b:82:a0:a7:a9:c6:f9:d1:da:ce:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:F5:5D:38:37:E4:20:86:65:37:E2:1E:E6:91:B4:09:84:39:9D
            X509v3 Authority Key Identifier:
                keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/e2T1XTg35CCGZTfiHuaRtAmEOZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.238.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:43:2f:f8:83:4c:17:26:8d:ce:95:fc:5a:bc:f7:27:55:d1:
         17:0f:c5:eb:1f:cd:14:84:f4:87:97:3d:78:17:91:25:3b:f6:
         be:93:04:2e:ce:89:ad:77:f0:bb:13:06:b9:aa:f9:a2:c5:2d:
         d7:10:28:ec:f0:b9:eb:de:5b:86:02:40:4f:84:ac:24:2f:80:
         e0:4f:0b:db:85:ba:e3:4d:c0:95:c8:69:f0:f8:d5:0e:bd:c9:
         bd:5f:02:9a:b5:0e:d5:7e:93:15:2e:ff:1f:a0:21:8d:1d:66:
         0a:f9:62:e4:46:bb:ec:e5:c1:e0:48:fa:68:d1:4e:de:f8:63:
         b9:02:5d:08:af:e5:91:34:ed:4d:af:3b:bd:26:72:71:0d:97:
         f7:06:ab:e5:23:45:00:ef:52:28:df:f1:f1:a1:81:8b:55:05:
         e5:f7:02:01:a8:59:74:e6:2d:8b:f0:95:84:c4:37:92:80:b0:
         97:fd:7c:1f:f8:c3:d5:b7:42:25:c5:ee:1b:bf:f2:62:b0:41:
         57:08:82:8c:2d:ef:87:47:08:96:ff:37:f9:d1:6b:f6:9e:9d:
         93:40:6f:0a:a3:f5:8a:fb:fc:b8:5b:a1:88:f4:d5:ce:c7:46:
         f4:37:06:41:37:9a:20:2c:cc:dd:9c:37:6d:d0:06:08:4b:bd:
         0a:27:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:34 2024 by rpki-client on console-ams.rpki-client.org