Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/a1xjpoSCn2KVfEMWF9pFYGhMXLc.roa
File:                     a1xjpoSCn2KVfEMWF9pFYGhMXLc.roa (raw, json)
Hash identifier:          +U7rmB18Gu3ej5/3q4zP+Kzj7YrzgL0PBMV9SxXqcQw=
Subject key identifier:   6B:5C:63:A6:84:82:9F:62:95:7C:43:16:17:DA:45:60:68:4C:5C:B7
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       018F013C6F2FD96B9371318B6F9853316105
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/a1xjpoSCn2KVfEMWF9pFYGhMXLc.roa
Signing time:             Sun 21 Apr 2024 15:18:08 +0000
ROA not before:           Sun 21 Apr 2024 15:18:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47376
IP address blocks:        46.148.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 28 Apr 2024 09:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:01:3c:6f:2f:d9:6b:93:71:31:8b:6f:98:53:31:61:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Apr 21 15:18:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b5c63a684829f62957c431617da4560684c5cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:48:5d:6b:d9:15:34:5a:5a:d2:0c:6f:79:
                    1a:f9:15:06:9d:7c:4a:39:ef:b8:5b:e9:88:61:14:
                    16:84:7a:69:ad:00:0b:45:d4:98:6a:7c:14:fd:c5:
                    81:7a:b8:5b:b4:86:a7:5e:74:72:32:86:0b:74:46:
                    28:0f:3e:23:c7:55:23:22:64:42:8b:e2:12:a6:fa:
                    22:16:fa:d2:1d:38:49:dd:29:ce:98:bc:99:b2:84:
                    85:53:9d:f5:c3:76:45:15:de:6e:ed:06:70:1e:e1:
                    87:fc:1f:7a:e5:d4:53:ab:1d:c2:39:dc:22:15:7e:
                    4e:9d:4c:f2:5e:b8:f2:66:f9:db:62:14:fb:2c:b1:
                    15:2f:38:2c:75:a1:73:c6:74:5f:02:c8:1a:4d:94:
                    f3:7a:37:62:b4:90:2c:71:4f:11:51:28:fd:91:bc:
                    bb:db:42:d6:ed:1d:3c:3c:43:f9:57:22:57:fd:ea:
                    9f:12:af:83:25:6a:26:f8:01:c1:7c:72:9b:9c:27:
                    d2:52:40:ac:b6:0f:d5:c3:ae:64:4e:6f:21:db:a6:
                    15:5d:c1:8f:19:59:a8:27:18:51:7d:19:fa:fc:0f:
                    58:dc:3b:b1:d5:b3:ce:8f:fb:d8:99:41:53:30:8d:
                    51:45:56:5b:7f:fc:78:89:52:0f:ab:43:c9:e0:0a:
                    ab:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:63:A6:84:82:9F:62:95:7C:43:16:17:DA:45:60:68:4C:5C:B7
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/a1xjpoSCn2KVfEMWF9pFYGhMXLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:64:ea:7f:bf:71:9e:1d:84:c4:d5:3c:13:58:7c:64:b8:
         c7:b5:32:87:2b:f4:39:8f:75:c8:c7:26:0c:90:3e:8e:4a:31:
         74:58:ad:92:68:d9:6e:00:91:05:55:c2:37:e5:a0:6b:fb:03:
         4a:1b:8d:c4:a8:49:8d:63:21:d8:18:2c:9e:7b:2c:07:76:f5:
         52:c2:40:7e:4f:d2:8f:10:0b:8a:90:52:24:5d:ac:a7:38:7f:
         4b:69:3e:13:54:99:e9:d6:6f:aa:f4:02:d5:88:b4:8f:9a:c3:
         79:a1:b9:78:50:4d:44:aa:a9:cf:38:1f:99:7d:be:88:fd:42:
         92:f6:f6:5e:79:94:d4:29:32:3e:d8:cf:9f:bb:9e:2d:eb:c3:
         cf:ff:75:e7:c7:67:dc:f1:f7:8b:88:f8:3c:23:2a:50:99:82:
         e8:0c:f4:0e:33:7e:9e:94:90:fa:47:82:88:74:3f:84:16:bf:
         2b:85:a3:30:c3:5f:84:7f:2f:57:09:5e:49:49:55:2f:51:f8:
         29:87:67:a5:c9:30:7f:73:44:18:b3:cb:f8:51:05:70:84:18:
         d9:94:3a:88:71:d4:d6:cb:5e:a3:d7:3f:75:c7:05:11:8d:06:
         f4:33:63:45:16:ab:4b:da:78:d9:91:26:bd:c4:aa:74:99:aa:
         32:0b:56:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8BPG8v2WuTcTGLb5hTMWEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjQwNDIxMTUxODA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjVjNjNhNjg0ODI5ZjYyOTU3YzQzMTYxN2RhNDU2MDY4NGM1Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmlIXWvZFTRaWtIMb3ka+RUGnXxK
Oe+4W+mIYRQWhHpprQALRdSYanwU/cWBerhbtIanXnRyMoYLdEYoDz4jx1UjImRC
i+ISpvoiFvrSHThJ3SnOmLyZsoSFU531w3ZFFd5u7QZwHuGH/B965dRTqx3COdwi
FX5OnUzyXrjyZvnbYhT7LLEVLzgsdaFzxnRfAsgaTZTzejditJAscU8RUSj9kby7
20LW7R08PEP5VyJX/eqfEq+DJWom+AHBfHKbnCfSUkCstg/Vw65kTm8h26YVXcGP
GVmoJxhRfRn6/A9Y3Dux1bPOj/vYmUFTMI1RRVZbf/x4iVIPq0PJ4AqrYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGtcY6aEgp9ilXxDFhfaRWBoTFy3MB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEvYTF4anBvU0NuMktWZkVNV0Y5cEZZR2hNWExjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpQrMA0G
CSqGSIb3DQEBCwUAA4IBAQB83GTqf79xnh2ExNU8E1h8ZLjHtTKHK/Q5j3XIxyYM
kD6OSjF0WK2SaNluAJEFVcI35aBr+wNKG43EqEmNYyHYGCyeeywHdvVSwkB+T9KP
EAuKkFIkXaynOH9LaT4TVJnp1m+q9ALViLSPmsN5obl4UE1EqqnPOB+Zfb6I/UKS
9vZeeZTUKTI+2M+fu54t68PP/3Xnx2fc8feLiPg8IypQmYLoDPQOM36elJD6R4KI
dD+EFr8rhaMww1+Efy9XCV5JSVUvUfgph2elyTB/c0QYs8v4UQVwhBjZlDqIcdTW
y16j1z91xwURjQb0M2NFFqtL2njZkSa9xKp0maoyC1bJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org