Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AiOrXQSQosUFDguuXUFS_RS9150.roa
File:                     AiOrXQSQosUFDguuXUFS_RS9150.roa (raw, json)
Hash identifier:          ErR6YFDnHPlCyJNG+Snx16IWMKO1nLlJO/tknJW42H4=
Subject key identifier:   02:23:AB:5D:04:90:A2:C5:05:0E:0B:AE:5D:41:52:FD:14:BD:D7:9D
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       0191C1F064FC4855BF2063958E7D75D8249C
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AiOrXQSQosUFDguuXUFS_RS9150.roa
Signing time:             Thu 05 Sep 2024 11:27:22 +0000
ROA not before:           Thu 05 Sep 2024 11:27:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47147
IP address blocks:        46.38.248.0/24 maxlen: 24
                          2a0a:4cc0:40::/43 maxlen: 43
                          2a0a:4cc0:80::/43 maxlen: 43

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 10:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c1:f0:64:fc:48:55:bf:20:63:95:8e:7d:75:d8:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Sep  5 11:27:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0223ab5d0490a2c5050e0bae5d4152fd14bdd79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:2a:d7:36:bf:8a:f1:c1:dc:f4:b9:71:e5:
                    1c:f8:cf:8a:87:65:c2:df:50:69:80:37:6b:57:29:
                    89:4e:6c:94:40:8f:be:da:c4:1f:2e:dd:c0:dc:9c:
                    b6:d5:40:24:59:32:ce:fa:55:91:d7:a3:41:c6:f8:
                    e2:01:de:bf:e2:06:ca:f3:9e:28:34:0b:d8:47:a3:
                    7c:86:d3:c1:e4:27:9d:9d:13:4d:ee:9b:3f:62:b3:
                    5b:da:87:f7:04:83:a9:e8:82:59:21:f9:79:34:1d:
                    6b:54:88:4e:fa:6a:f6:6a:db:be:37:48:08:c9:67:
                    70:b1:33:74:4e:ba:22:28:5c:ff:8e:dd:9e:bd:82:
                    81:b8:63:2b:48:29:5f:bf:29:16:b7:77:89:92:6a:
                    f4:89:a2:b0:6d:93:29:ff:c5:76:99:a6:6f:7a:26:
                    3f:02:48:c8:49:82:e2:7a:2a:d8:1e:fe:c1:4c:9b:
                    93:85:64:5f:3a:7a:e2:32:8b:b3:51:52:08:11:e7:
                    95:f9:60:0d:27:d4:47:77:c8:85:a9:f4:e9:30:1d:
                    82:72:83:25:32:6e:ca:d0:a5:3b:08:da:bd:ba:2a:
                    3b:c8:1a:bf:dc:d5:4a:3d:f0:db:ed:62:f0:a3:60:
                    ef:ad:1c:7f:f1:ca:51:b1:50:a5:c4:81:23:d6:7e:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:23:AB:5D:04:90:A2:C5:05:0E:0B:AE:5D:41:52:FD:14:BD:D7:9D
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/AiOrXQSQosUFDguuXUFS_RS9150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.248.0/24
                IPv6:
                  2a0a:4cc0:40::/43
                  2a0a:4cc0:80::/43

    Signature Algorithm: sha256WithRSAEncryption
         93:54:ed:3e:79:a5:1c:ec:ee:3c:1a:5c:3a:17:ad:43:5f:ba:
         47:3f:e2:f8:e7:0e:09:7b:26:df:51:bd:4f:14:ad:21:b3:c6:
         dd:61:35:25:49:8e:45:88:26:ce:00:1a:fe:a0:d5:90:25:cd:
         99:c8:69:22:98:17:92:a3:b5:f5:c9:73:09:0e:24:dd:75:2a:
         c9:5d:d9:00:5c:50:4a:59:c5:41:63:71:84:a1:b1:ef:c0:7b:
         86:88:fa:5f:b9:82:34:d0:38:b0:aa:e1:f2:2e:d6:8c:b9:85:
         28:92:6b:73:14:e4:4c:bf:23:3f:2c:b8:93:54:c6:89:6b:f7:
         c8:25:75:1a:70:70:c8:64:b5:b9:8c:5e:dd:a4:af:12:29:ee:
         a5:d7:7b:e2:fc:17:af:dd:2f:2a:00:d6:d8:7e:01:db:55:02:
         01:4f:d7:ca:10:ed:9f:aa:e8:50:93:23:73:5a:7c:a5:ec:86:
         0f:d4:89:7e:6c:68:cb:31:e6:f4:cc:d3:07:cf:0c:09:29:7f:
         ad:9e:bc:0a:e6:b6:cb:a8:24:07:1a:0b:77:71:8e:8c:26:7b:
         3b:c4:bb:f2:87:95:a4:57:83:e8:e0:7a:0d:18:c5:6a:3f:4a:
         56:23:99:cf:2b:fa:22:4a:ac:24:20:a0:fa:a4:d5:49:81:c9:
         60:0b:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----