Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/4kEiC05aqGRadjmHkyqFPdsnfHw.roa
File:                     4kEiC05aqGRadjmHkyqFPdsnfHw.roa (raw, json)
Hash identifier:          FrQvC5XALlzYStaZ3JDSibcr1SDDFNzRyop3tsthzfw=
Subject key identifier:   E2:41:22:0B:4E:5A:A8:64:5A:76:39:87:93:2A:85:3D:DB:27:7C:7C
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019056A2A6E0A6DDD9D94E2A6E128AA40E47
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/4kEiC05aqGRadjmHkyqFPdsnfHw.roa
Signing time:             Wed 26 Jun 2024 22:20:18 +0000
ROA not before:           Wed 26 Jun 2024 22:20:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        195.93.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 00:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:56:a2:a6:e0:a6:dd:d9:d9:4e:2a:6e:12:8a:a4:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Jun 26 22:20:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e241220b4e5aa8645a763987932a853ddb277c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:25:06:8a:d2:da:66:3a:66:5e:59:25:10:12:
                    12:a5:c4:4c:f3:0c:54:9b:30:89:c5:80:19:b1:c6:
                    8a:f9:71:cd:5a:ac:ab:72:fa:da:69:91:e7:e2:20:
                    b0:64:76:ab:93:53:a1:82:04:62:55:ee:46:16:8f:
                    cb:8e:65:d8:96:f8:ae:d5:97:36:98:51:d6:64:6b:
                    ca:62:c1:cf:87:0c:4a:b2:b0:27:02:25:ea:77:b6:
                    c3:b4:0a:a7:f5:f7:d8:54:09:7f:be:24:61:45:6c:
                    cf:07:fc:1b:08:10:53:bd:fa:26:6e:a8:d0:5e:dc:
                    03:ef:27:f7:59:42:d6:d2:9e:45:c8:fd:49:26:b6:
                    8d:b1:bb:a2:de:59:06:b7:4d:66:e8:c2:1b:99:8a:
                    fb:05:e8:a6:0a:26:07:00:9b:2b:d9:62:eb:fb:b1:
                    43:93:8e:c7:18:50:e7:e0:a6:31:49:b4:c4:1f:31:
                    e0:ea:46:60:e9:ba:9a:a5:98:be:83:15:b1:9e:73:
                    40:46:89:d2:76:d0:90:1a:d5:0e:94:84:2d:06:7a:
                    2e:57:4d:50:c1:5e:a5:55:d3:aa:65:5f:e1:2e:9b:
                    cb:65:78:9f:e3:ee:f8:5c:7f:b9:c3:ca:48:30:48:
                    57:9d:d4:e9:4c:14:29:2c:8a:a9:fa:d1:89:1b:61:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:22:0B:4E:5A:A8:64:5A:76:39:87:93:2A:85:3D:DB:27:7C:7C
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/4kEiC05aqGRadjmHkyqFPdsnfHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:b9:64:07:d6:6a:d5:06:19:62:c0:d1:f5:a4:53:a9:fb:
         85:10:11:75:71:8f:d1:1b:7e:7b:bd:ab:6e:34:e3:ba:64:11:
         d0:a1:a4:fc:50:dd:4a:d1:5a:01:1f:19:fd:e8:09:dc:3e:c7:
         7e:ac:58:88:a8:da:8c:0b:cf:a4:e3:0a:de:14:c1:cd:d2:cb:
         f6:d7:d4:a3:8b:d5:0a:81:27:c8:e5:6a:ca:57:81:db:75:6b:
         d4:79:b4:e2:b6:05:5e:25:91:c0:89:70:68:2d:2c:7d:38:e6:
         ac:8d:58:9f:db:bf:9c:a2:90:a8:47:7c:d6:b7:c0:01:cd:09:
         d7:99:48:ac:dd:2c:91:38:ea:52:db:31:07:65:53:20:9f:d6:
         27:ad:b4:d0:c5:9d:47:f5:a2:0e:1f:38:7b:9a:8b:c1:3e:25:
         47:3d:1c:d4:91:80:b3:e4:5f:f2:39:c2:e3:2e:de:78:da:be:
         72:37:49:56:8c:f4:f6:d3:5a:de:ef:7c:2b:8c:d1:8b:4c:ef:
         07:8b:08:38:ec:96:d2:65:98:f6:69:4b:97:db:a3:8d:3f:62:
         a1:1b:2a:e0:16:5f:f7:64:e9:c5:d5:f9:8c:85:dd:ff:18:f8:
         24:df:97:be:e9:6d:38:1c:ab:dc:b9:fa:b6:e6:15:35:83:e5:
         e2:1a:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:39:34 2024 by rpki-client on console-ams.rpki-client.org