Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa
File:                     fIUI6WckXZOnAq_S5ymtdHtd2_g.roa (raw, json)
Hash identifier:          gHcYNKamDw3xgewUgbEQ56lyfIEKGV4lvyIFIJOKOs4=
Subject key identifier:   7C:85:08:E9:67:24:5D:93:A7:02:AF:D2:E7:29:AD:74:7B:5D:DB:F8
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       0187FC33DA38E2AE26CAE19B354C67C54989
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa
Signing time:             Mon 08 May 2023 16:31:09 +0000
ROA not before:           Mon 08 May 2023 16:31:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203727
IP address blocks:        185.46.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Dec 2023 17:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fc:33:da:38:e2:ae:26:ca:e1:9b:35:4c:67:c5:49:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: May  8 16:31:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c8508e967245d93a702afd2e729ad747b5ddbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:7e:8a:f7:1b:da:ae:46:15:72:c9:4e:d3:
                    c4:c0:84:16:79:b7:67:46:f3:90:c1:da:f9:e8:00:
                    2a:a9:cc:8a:f0:2b:08:cd:19:27:63:94:57:fb:94:
                    71:93:18:29:a8:87:ab:ed:ea:c3:69:75:3f:8d:e3:
                    32:13:14:a0:6e:06:36:be:a0:bd:97:0d:f4:5c:4a:
                    d8:af:0e:f1:a6:75:b3:0e:37:cf:6c:1e:27:45:5d:
                    98:50:b8:70:92:af:42:a9:8c:35:5d:b7:99:c4:85:
                    e7:56:1a:2f:c0:9c:2c:57:8f:26:6c:30:59:77:fe:
                    95:3f:7b:24:7c:dd:85:48:7c:59:07:b2:2d:f3:83:
                    01:4c:91:aa:a9:64:60:aa:4b:c1:56:0b:39:27:89:
                    19:ee:af:44:7b:f1:48:df:86:fd:dc:aa:41:65:e5:
                    db:13:16:32:a5:80:21:f4:b3:75:6b:09:58:e1:08:
                    d2:7c:8f:60:ac:83:ed:cc:ac:0b:84:04:fb:90:89:
                    72:46:0b:96:65:f9:76:0a:d0:95:14:f6:63:1d:db:
                    39:ec:f7:1b:ff:e9:c5:72:d3:c4:57:95:46:7f:58:
                    7e:4b:48:f8:75:cc:e3:de:c7:2d:64:1c:8a:a8:38:
                    66:57:41:ed:e3:16:1c:ca:f8:2a:c8:0b:0b:f0:e8:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:85:08:E9:67:24:5D:93:A7:02:AF:D2:E7:29:AD:74:7B:5D:DB:F8
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:96:11:74:aa:84:68:67:d6:cf:f8:7e:de:05:44:fd:36:fe:
         3f:a7:e1:62:cb:d5:ca:1b:a8:ef:55:e2:0a:c6:50:8d:47:a5:
         df:5b:9a:4a:1a:07:51:27:91:c5:8b:17:2a:79:56:ee:76:22:
         26:ae:f8:de:1e:e0:76:7d:5f:72:85:5e:e5:d5:ea:c6:ef:62:
         d3:48:6b:24:63:1e:f1:c7:d5:fd:6f:16:6e:57:2f:f4:4b:9b:
         d9:1b:be:91:73:28:29:51:d8:a1:5c:fd:99:86:ea:fb:7c:a6:
         43:69:97:81:2b:91:55:2d:97:f8:b9:e9:f0:49:79:09:6c:49:
         7c:17:bc:ae:cf:17:96:81:02:e8:e2:24:76:04:26:2c:73:74:
         3b:c1:4e:51:2b:d1:d4:1f:b9:2f:fd:f3:b9:0d:a8:e3:6a:22:
         4e:b9:20:2b:a4:89:0b:02:20:8b:90:32:1c:d6:51:ae:bb:b4:
         54:6c:b5:c0:86:6c:cb:20:5c:ab:bd:08:57:66:81:ce:e1:ff:
         2e:0b:ae:90:38:cb:27:1d:1a:cc:fa:2c:ed:1d:85:73:88:cc:
         71:0d:10:4e:06:15:ff:87:82:62:b1:25:9a:ce:76:4f:30:06:
         0d:fc:28:7f:e6:0a:ed:98:e4:c2:69:7e:c6:9e:6f:8c:1a:a1:
         7a:f2:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org