Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/plRKwPjd0iLbbPkKh-RF9N_Qia8.roa
File:                     plRKwPjd0iLbbPkKh-RF9N_Qia8.roa (raw, json)
Hash identifier:          EDKYDyFa4thORxSUlT5pCnFv5PausC8djQ9Gy1MnjtA=
Subject key identifier:   A6:54:4A:C0:F8:DD:D2:22:DB:6C:F9:0A:87:E4:45:F4:DF:D0:89:AF
Certificate issuer:       /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial:       018CC9BC87FDB173CE744AAF23EBCEC11DDB
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/plRKwPjd0iLbbPkKh-RF9N_Qia8.roa
Signing time:             Tue 02 Jan 2024 10:33:45 +0000
ROA not before:           Tue 02 Jan 2024 10:33:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6724
IP address blocks:        185.132.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 10:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:87:fd:b1:73:ce:74:4a:af:23:eb:ce:c1:1d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
        Validity
            Not Before: Jan  2 10:33:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6544ac0f8ddd222db6cf90a87e445f4dfd089af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:30:ed:08:9a:9c:fa:51:ef:e6:84:ba:c6:
                    20:7f:56:6a:71:9b:cd:33:f2:e2:44:f2:69:8f:50:
                    28:53:64:77:fb:f6:53:b4:eb:ca:59:f5:ef:f8:ba:
                    c8:1c:c0:2b:ac:2a:99:d0:eb:fa:ea:e6:0b:96:c8:
                    bb:70:24:5c:7e:61:37:bf:e9:d6:0d:f9:7d:85:b8:
                    7b:c6:50:b3:0a:48:91:2b:f9:31:97:d1:71:bc:da:
                    52:ab:e1:fb:7a:29:a4:45:56:16:ba:60:bc:50:81:
                    42:f5:53:9d:9c:6d:a2:18:15:5a:cd:5c:b4:e1:1e:
                    55:6f:a7:2a:eb:80:3c:d5:72:fe:ec:44:e0:55:4b:
                    14:81:6b:6f:65:13:7b:ea:b0:ea:e5:fc:c8:7e:b3:
                    66:0e:21:c0:56:08:83:e3:5f:49:53:2d:fc:14:8b:
                    20:f8:b8:7c:de:28:41:60:ba:e7:a5:dc:33:8c:9d:
                    67:e1:73:a8:5e:78:f4:56:c8:62:c2:0f:67:e5:71:
                    c1:4b:96:ae:8e:41:ad:6f:4c:14:a2:f4:91:70:fc:
                    74:48:4f:14:65:f4:76:9e:bf:97:83:de:0e:82:84:
                    a9:35:33:3a:8b:40:42:fd:87:4b:c8:e8:51:01:ed:
                    d0:eb:80:ca:01:23:e2:16:52:e1:b3:cf:96:04:ef:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:54:4A:C0:F8:DD:D2:22:DB:6C:F9:0A:87:E4:45:F4:DF:D0:89:AF
            X509v3 Authority Key Identifier:
                keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/plRKwPjd0iLbbPkKh-RF9N_Qia8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:56:9c:aa:fa:7e:18:e6:5e:a2:65:04:b5:3f:f0:ec:b3:ec:
         a2:97:af:e2:a4:c5:a4:63:28:77:f6:ec:81:a1:f0:aa:1c:46:
         00:fc:63:ed:e4:36:19:13:b8:cc:61:79:85:54:2d:b9:23:dc:
         f4:6a:80:5d:83:97:88:ca:d9:0a:e5:be:e2:f9:31:71:a0:57:
         58:9e:1d:80:44:33:a5:43:85:15:53:8a:08:d3:4d:32:2b:f3:
         5c:0c:9a:41:d6:e1:ed:49:fb:e2:99:32:49:df:cd:50:24:29:
         3e:0a:ee:af:2f:2a:b2:b4:da:2f:9c:eb:38:3c:76:0e:fc:a8:
         00:08:66:0d:c9:c0:00:31:fc:c4:31:39:2a:36:79:c9:f2:44:
         5d:b4:4f:03:56:d5:1e:0a:6b:d0:38:40:42:85:c3:92:9e:82:
         47:01:a9:86:39:2a:c8:ec:a0:cf:ba:9a:85:11:f3:5e:83:6e:
         86:e1:ef:ef:2f:1c:95:91:a4:e2:9f:0c:59:34:72:62:cf:93:
         d1:02:63:b8:2d:a7:2e:08:26:2c:d7:14:5f:ef:39:db:b0:ec:
         c8:6b:16:6f:4b:18:71:06:81:70:54:5e:0d:dd:9d:d1:cc:13:
         19:00:4c:36:74:52:c5:03:10:cb:17:1c:09:8c:90:8a:41:e5:
         ee:d5:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org