Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/4rTWdRAgc2_gAhMzt2O2x1XSZ74.roa
File:                     4rTWdRAgc2_gAhMzt2O2x1XSZ74.roa (raw, json)
Hash identifier:          1pkptx67VD12d+RAT8WjpjYu1eUzWeFFZ64aEPgKIyI=
Subject key identifier:   E2:B4:D6:75:10:20:73:6F:E0:02:13:33:B7:63:B6:C7:55:D2:67:BE
Certificate issuer:       /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial:       01856FF0361E073C95A5A6783D27BE42575A
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/4rTWdRAgc2_gAhMzt2O2x1XSZ74.roa
Signing time:             Mon 02 Jan 2023 00:44:51 +0000
ROA not before:           Mon 02 Jan 2023 00:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25593
IP address blocks:        217.19.48.0/20 maxlen: 20
                          89.107.168.0/21 maxlen: 21
                          46.19.176.0/21 maxlen: 21
                          93.188.168.0/21 maxlen: 21
                          185.48.44.0/22 maxlen: 22
                          212.67.32.0/20 maxlen: 20
                          185.48.46.0/24 maxlen: 24
                          2a00:1a00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f0:36:1e:07:3c:95:a5:a6:78:3d:27:be:42:57:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
        Validity
            Not Before: Jan  2 00:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e2b4d6751020736fe0021333b763b6c755d267be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:7b:15:4b:76:76:2e:4b:a8:49:3d:cb:36:
                    76:88:db:6a:f0:e0:8a:7d:83:0e:61:ed:d2:0e:c9:
                    3d:90:34:66:7a:a7:40:34:29:2c:68:14:7d:f3:c8:
                    97:01:be:1f:ee:0b:8c:13:e3:70:52:fe:19:5f:1e:
                    25:c3:f5:c0:8a:0b:ce:c3:c0:20:6f:df:f0:91:1f:
                    4b:d9:6c:5c:e1:1c:57:85:e2:4a:d2:d1:95:3c:26:
                    f5:05:00:2a:f4:0c:21:ad:fa:e0:28:ad:f9:7a:c8:
                    00:1e:c7:af:5a:05:54:13:33:6c:aa:98:51:86:46:
                    8f:0d:d4:9a:c4:7c:36:22:0b:1c:c4:b5:29:26:1c:
                    d9:cb:26:57:00:4d:83:6d:ad:eb:24:15:39:6a:d9:
                    86:9e:c2:04:c1:a3:86:ac:32:31:51:8a:4e:b6:46:
                    c0:09:52:9f:f9:c9:07:d3:d0:e5:a9:59:0c:cc:b9:
                    28:ac:e6:3d:e0:d6:6d:3e:a6:e0:d2:e7:37:ba:cb:
                    a4:17:2d:07:cb:1d:e8:b9:df:2d:77:ec:25:c4:c1:
                    b7:99:69:12:b6:82:6e:80:2c:b6:1c:c1:ea:3a:3e:
                    51:56:a9:0a:0b:fc:d8:88:3e:1e:60:91:fb:62:25:
                    e0:36:19:37:dd:8b:d7:a2:40:15:cc:88:4c:95:c9:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:D6:75:10:20:73:6F:E0:02:13:33:B7:63:B6:C7:55:D2:67:BE
            X509v3 Authority Key Identifier:
                keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/4rTWdRAgc2_gAhMzt2O2x1XSZ74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.176.0/21
                  89.107.168.0/21
                  93.188.168.0/21
                  185.48.44.0/22
                  212.67.32.0/20
                  217.19.48.0/20
                IPv6:
                  2a00:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:34:ce:b6:a3:84:96:03:db:4e:0b:36:34:38:f3:b7:fd:6e:
         0f:e4:c6:e6:2e:e5:6d:ed:33:1c:52:d5:63:2c:c4:7e:00:d4:
         15:87:22:fd:f0:4f:52:d5:88:6e:8d:45:c7:6f:01:2a:9f:be:
         e7:eb:ac:ad:f8:75:00:db:65:af:af:d6:24:a8:fc:d5:32:29:
         ea:72:7b:cc:d7:47:eb:27:a2:58:cd:ec:9d:a9:de:bb:e6:ca:
         71:85:4e:1b:b8:52:dc:28:e7:2c:1d:57:8e:54:90:ac:e8:55:
         26:5f:d8:b7:07:fd:ef:01:bc:7c:fc:2f:06:0c:15:a7:7e:01:
         a2:7d:75:63:b5:54:4a:49:5c:84:d3:d4:ae:11:d7:bb:d4:58:
         cb:8b:f9:0a:c6:20:47:39:72:9a:c1:ff:f8:a3:f7:e6:fb:af:
         ff:74:20:85:82:01:ad:1c:f2:39:fc:0c:78:33:85:12:82:57:
         56:2f:ac:38:8a:2e:92:28:ce:4a:dd:1b:b0:13:7b:84:58:44:
         46:40:17:34:e5:c2:d9:fd:ad:96:93:7a:e0:1e:dc:61:3c:e6:
         1b:2c:f8:50:1b:7a:93:52:af:34:25:21:0f:b3:c5:02:89:c0:
         1f:69:63:73:21:43:ea:20:aa:f2:67:9d:00:5e:04:d7:58:fa:
         e8:00:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:59 2024 by rpki-client on console-fra.rpki-client.org