Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/nD_L13zf7AD3iEC-kmDTtmGmvd8.roa
File:                     nD_L13zf7AD3iEC-kmDTtmGmvd8.roa (raw, json)
Hash identifier:          aR1CsuhQt0K2u2TX66l8u5Qhaq5SWQH19cLKin4AMSU=
Subject key identifier:   9C:3F:CB:D7:7C:DF:EC:00:F7:88:40:BE:92:60:D3:B6:61:A6:BD:DF
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       01856B8A12FFF1B78C4F3EAF4F588E4E15B7
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/nD_L13zf7AD3iEC-kmDTtmGmvd8.roa
Signing time:             Sun 01 Jan 2023 04:14:49 +0000
ROA not before:           Sun 01 Jan 2023 04:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207560
IP address blocks:        46.229.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:8a:12:ff:f1:b7:8c:4f:3e:af:4f:58:8e:4e:15:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  1 04:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9c3fcbd77cdfec00f78840be9260d3b661a6bddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:af:76:57:9b:65:40:1b:99:2b:d9:a3:61:
                    04:e5:9f:7f:07:21:89:4f:ca:70:08:09:2f:d9:06:
                    5c:5a:cc:4c:8d:a2:3f:de:a6:58:23:b9:ec:8c:bd:
                    47:7a:71:3b:6e:33:4e:4e:5b:ae:4a:d6:e9:7c:f4:
                    85:38:c9:34:5f:aa:24:63:9b:31:44:b7:6f:ff:d6:
                    64:f1:91:03:4e:da:67:05:39:7e:76:ac:d4:72:10:
                    61:60:6d:8c:25:35:cb:12:fb:76:88:a2:62:a2:bf:
                    0d:13:49:8d:16:ce:9b:12:43:c1:6a:f9:ce:f3:c6:
                    57:dc:9e:e7:ca:de:c5:89:9f:7b:a9:fc:4f:c8:8f:
                    c3:f6:9c:cf:2c:e7:bf:18:22:37:3e:0e:99:23:d4:
                    16:16:8c:77:6a:1a:e8:0e:c0:80:33:1c:8f:8e:e7:
                    dc:c9:25:f8:8b:a4:21:42:39:f8:ad:ba:22:03:8f:
                    52:03:3c:e6:44:67:fc:4f:af:43:f5:e8:26:f1:1c:
                    4f:26:f9:19:62:bf:b8:fa:54:47:89:63:fb:5c:bd:
                    53:70:53:45:cb:ba:7e:8f:41:79:3b:a0:e4:57:ef:
                    2c:1b:99:aa:fb:b1:0d:38:79:14:b1:f6:ea:0a:5f:
                    ee:ae:62:d6:bb:f0:96:cb:f7:fc:a5:5a:23:84:34:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:CB:D7:7C:DF:EC:00:F7:88:40:BE:92:60:D3:B6:61:A6:BD:DF
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/nD_L13zf7AD3iEC-kmDTtmGmvd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:b8:31:6c:97:e0:2c:9f:cf:05:4f:02:46:d3:83:66:a8:be:
         fa:1e:d5:c0:1e:bf:e2:61:81:57:a5:ee:d3:9e:e4:49:7c:c7:
         c9:4c:34:ab:df:69:8f:3a:a1:d0:69:ad:67:f3:b5:e6:5a:6c:
         ca:cf:28:1e:e9:2d:4b:27:47:ac:91:52:5f:e9:75:e2:3a:ed:
         ab:c8:63:de:07:c2:41:f4:6f:8d:fb:c0:e5:23:dd:07:96:5f:
         51:34:78:a2:3d:e2:c7:5e:03:8a:bd:14:3d:b8:e0:89:ba:15:
         b6:24:73:3d:b1:71:bf:ac:fb:3d:b7:8d:6e:63:41:4c:82:cb:
         ce:bd:cd:03:c6:9f:5d:50:53:88:73:6f:df:44:83:f0:55:38:
         08:c8:ae:31:09:b8:9c:a6:2b:24:f6:26:0e:7c:13:0b:20:21:
         44:0a:a5:76:e7:3f:91:dd:15:a2:06:f8:17:ed:55:2e:46:e6:
         c5:ea:85:59:91:93:6a:91:5e:6c:2c:17:b9:55:68:eb:47:42:
         73:cd:b4:a2:76:05:86:10:2e:c5:a7:2d:38:2f:d3:7d:57:93:
         0c:c7:11:41:11:b1:fc:13:f3:de:45:58:91:b9:4b:49:23:d4:
         18:8b:f9:79:69:01:03:a6:ed:de:eb:47:65:32:b7:94:4f:c8:
         41:90:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org