Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa
File:                     SoxVAB1SfDC6pFzK5DY9nhbj57E.roa (raw, json)
Hash identifier:          HrDXbNZM6m0ZYYte3eMUGoKcVr99Q72IEFallkFKI+c=
Subject key identifier:   4A:8C:55:00:1D:52:7C:30:BA:A4:5C:CA:E4:36:3D:9E:16:E3:E7:B1
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       01856E2F993BE97AC6DA622AF3E3DF1AA10A
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa
Signing time:             Sun 01 Jan 2023 16:34:51 +0000
ROA not before:           Sun 01 Jan 2023 16:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42163
IP address blocks:        46.143.194.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:99:3b:e9:7a:c6:da:62:2a:f3:e3:df:1a:a1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  1 16:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a8c55001d527c30baa45ccae4363d9e16e3e7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:00:56:f9:74:bd:de:9c:91:0a:b4:9c:d7:
                    cc:4f:3a:ba:07:86:a8:61:69:df:20:4e:ad:de:e0:
                    e0:79:1f:9d:b1:ac:14:ba:ca:01:6a:d9:7f:13:9d:
                    b6:09:e8:09:01:73:3d:43:0e:79:00:66:2f:cd:67:
                    fe:5c:55:3c:4b:fd:4e:f8:42:60:49:db:d6:b2:aa:
                    e6:c7:c0:b9:32:8e:0a:68:f1:30:23:7e:53:94:db:
                    e6:a7:79:88:88:75:88:78:a3:56:58:a5:6a:32:5b:
                    b9:73:85:85:75:0d:57:7a:4d:c2:86:38:57:e4:f4:
                    43:51:51:7c:8d:93:25:d8:bb:f5:41:87:77:a9:09:
                    cb:ad:3d:9d:df:7d:e4:bc:4b:19:9e:ba:3f:d7:8d:
                    60:11:d4:ed:1e:41:95:21:38:f0:f1:dc:de:a7:38:
                    26:3c:bb:6c:a2:ea:b6:11:33:7e:c8:d7:24:33:46:
                    2a:2d:0f:21:62:9c:47:f0:72:ca:17:9e:c3:65:0d:
                    28:c2:be:80:a1:89:c1:68:c4:52:c4:34:1b:3f:8b:
                    76:1b:90:2a:0d:e8:76:b8:63:d5:87:01:0b:0f:f4:
                    38:71:b1:f9:61:93:aa:36:3d:21:de:75:51:5c:d2:
                    96:29:19:7e:db:5a:52:e1:e2:d6:f9:87:ef:2f:5f:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8C:55:00:1D:52:7C:30:BA:A4:5C:CA:E4:36:3D:9E:16:E3:E7:B1
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7a:16:1a:b5:af:ce:ec:c0:81:49:ce:02:4b:e9:eb:6d:b8:
         54:bb:ac:7b:23:56:a1:f5:35:05:00:2d:ea:06:37:ab:0d:19:
         fd:17:9f:d4:a4:e9:4d:5b:dc:3e:36:28:eb:81:71:60:c9:2e:
         0b:42:97:05:83:60:b7:14:37:08:9c:ad:fd:fd:61:a2:96:31:
         82:ea:1b:18:a5:fd:af:da:41:4a:83:0c:84:5c:ea:aa:60:73:
         28:9c:10:9d:5e:a4:f7:15:26:6d:63:77:83:7c:02:17:33:c7:
         ab:93:f8:1b:d0:3a:d0:4f:0d:53:a6:5d:dd:51:1b:ae:66:95:
         32:df:50:46:26:42:2a:9a:c5:70:fb:85:2a:ff:6e:87:85:2f:
         8b:12:4e:e1:38:0a:35:32:99:65:c0:2e:08:98:e0:91:5b:8c:
         d1:10:0e:0e:cf:91:db:49:b8:1d:3d:3c:1d:56:32:6c:19:05:
         e4:91:74:1b:8c:36:09:57:f9:4f:17:2e:a7:ae:3a:97:61:96:
         6f:5f:14:9a:b0:c6:7d:42:d8:96:db:e1:43:1f:5a:ff:95:48:
         a1:7d:f7:fc:8b:2a:ed:65:29:10:f7:17:0e:62:10:84:1d:61:
         3f:10:41:07:73:8a:96:45:60:fa:4d:0d:ce:4b:e2:a2:55:8c:
         84:49:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:37 2024 by rpki-client on console-ams.rpki-client.org