Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/a-wvwvhfK0TKWooyLWXDBIpE3Lc.roa
File:                     a-wvwvhfK0TKWooyLWXDBIpE3Lc.roa (raw, json)
Hash identifier:          RU3HbNXmJA/4pRXKMZDsGd2tvl4VFg+ixuUrzKlyAsM=
Subject key identifier:   6B:EC:2F:C2:F8:5F:2B:44:CA:5A:8A:32:2D:65:C3:04:8A:44:DC:B7
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       018BA90A2B9E64172E9B19720A7D5D71E36C
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/a-wvwvhfK0TKWooyLWXDBIpE3Lc.roa
Signing time:             Tue 07 Nov 2023 09:08:17 +0000
ROA not before:           Tue 07 Nov 2023 09:08:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198964
IP address blocks:        46.21.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a9:0a:2b:9e:64:17:2e:9b:19:72:0a:7d:5d:71:e3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: Nov  7 09:08:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6bec2fc2f85f2b44ca5a8a322d65c3048a44dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:56:a0:8d:61:59:8d:47:55:e3:ef:2e:c6:
                    3c:eb:61:84:ed:1f:60:84:5a:52:c2:69:ee:8a:d9:
                    27:1f:02:83:b1:98:77:55:fa:46:af:17:46:25:a0:
                    dd:79:3f:23:fd:2f:d1:2d:5c:ea:70:b4:99:a3:da:
                    0f:d9:59:d8:f6:2c:db:e2:4d:c8:36:30:c8:19:23:
                    3c:cc:cd:82:60:e8:3c:54:85:7e:59:15:23:92:2b:
                    c1:ae:ca:c9:25:68:73:67:a6:e7:62:62:84:79:49:
                    2c:a7:dc:a7:1e:8d:a9:f7:66:1a:58:1e:1d:08:12:
                    8e:87:80:a2:61:47:8b:c6:76:ef:a2:8f:73:47:0b:
                    c2:5a:20:30:01:31:8f:fe:90:5f:83:cd:55:dd:6d:
                    0e:a3:0a:84:03:42:ac:8a:86:7a:6a:ee:9b:14:0a:
                    33:db:09:9c:52:18:43:40:76:b7:ba:55:a8:44:a0:
                    9a:90:62:28:2b:60:5a:03:25:76:c1:3b:fe:e6:7a:
                    d1:ed:b6:c5:b1:b9:9c:59:84:2c:ba:d6:6c:73:a3:
                    93:57:65:1f:bb:a9:67:d6:a4:c3:11:a5:53:c6:49:
                    ff:ee:50:84:03:a2:93:c9:5b:d1:14:2d:c7:a5:25:
                    cd:ee:81:03:25:d4:b2:95:a8:f1:c4:f7:e1:85:28:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:2F:C2:F8:5F:2B:44:CA:5A:8A:32:2D:65:C3:04:8A:44:DC:B7
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/a-wvwvhfK0TKWooyLWXDBIpE3Lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:64:87:d3:b5:17:75:e6:53:ed:2b:06:d0:0d:1f:b0:c5:3e:
         c0:1b:ea:53:12:ec:b8:47:10:d8:74:02:1a:68:4b:58:09:fc:
         1a:b8:fa:be:b2:99:e3:03:16:91:6f:d9:21:b7:a7:17:8f:82:
         5b:d7:3b:53:7b:4c:f0:f6:50:94:38:76:bd:78:68:76:70:6e:
         e7:7e:24:fc:25:0b:0f:35:ad:c0:b5:3d:ca:31:26:05:37:33:
         e0:2d:7f:6b:c1:8c:dc:5d:28:72:0c:fa:70:6a:84:e7:06:b9:
         86:05:ba:1c:ee:fd:d6:b5:fa:8a:1a:53:4f:26:21:1a:f7:a9:
         50:eb:96:bb:1f:28:12:a9:ed:ec:e8:04:e5:bf:b7:62:74:bc:
         7c:a5:ff:a6:f8:dd:c4:e8:9e:ad:5d:46:60:28:6c:96:7f:0a:
         8e:17:b8:f1:f6:6d:b0:29:6c:8d:6f:9a:98:d2:23:99:fb:20:
         cb:84:f5:d5:15:37:c1:5a:c8:48:16:8e:3b:c1:4e:4e:ea:19:
         e4:bc:20:bf:6d:62:07:ed:c4:4d:b8:35:2d:a7:99:ca:c9:8b:
         64:79:7a:52:fd:5d:ad:85:98:6d:8b:c6:50:2b:f3:80:e1:f1:
         43:c0:1b:2d:0a:f3:52:07:c3:cd:e6:5b:fc:88:10:b8:4d:ac:
         27:4b:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:45 2024 by rpki-client on console-fra.rpki-client.org