Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa
File:                     VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa (raw, json)
Hash identifier:          Rh+eB0WCLWoBujTfiUWv5qsJ/EPb/N+p/f/U39yHyYs=
Subject key identifier:   55:28:94:AF:23:6E:E5:F6:67:E7:07:5E:27:C5:F2:06:E3:8B:48:ED
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       01857079ACBB151D21F5C731EF432084BE6C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa
Signing time:             Mon 02 Jan 2023 03:14:59 +0000
ROA not before:           Mon 02 Jan 2023 03:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201056
IP address blocks:        46.228.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:ac:bb:15:1d:21:f5:c7:31:ef:43:20:84:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Jan  2 03:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=552894af236ee5f667e7075e27c5f206e38b48ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:76:31:31:76:ab:b0:23:06:8b:67:24:e8:
                    67:21:58:93:a3:6e:4a:44:ad:8a:20:f7:f3:81:5d:
                    3b:69:c3:35:3e:67:dc:a0:b6:e8:bc:86:21:e5:12:
                    0b:f9:8f:37:12:41:57:58:1a:80:1a:a2:c3:f5:6f:
                    9d:16:d3:bd:4f:d6:ad:6d:cc:55:84:dc:e7:dc:e2:
                    01:83:35:3d:ec:96:12:f3:09:f5:a6:fd:f8:0a:07:
                    b1:cb:26:52:89:d4:3a:45:6a:76:17:72:33:40:a4:
                    23:6e:1c:9a:f6:40:53:72:16:57:db:cf:7b:42:d9:
                    b9:ca:b3:97:f6:44:d2:71:41:dd:ec:fa:85:85:57:
                    e9:5e:82:40:eb:44:42:4f:df:5f:4c:1d:4a:44:07:
                    5b:f2:a3:1b:be:c9:74:13:e5:80:79:3b:db:34:b8:
                    5b:1c:22:98:f0:59:f2:24:31:68:e8:54:ee:fc:90:
                    b0:40:02:40:8c:95:c0:11:5b:51:d1:f2:a9:2a:ae:
                    1e:06:68:83:1e:ba:7d:b6:9d:5b:5e:91:da:dd:e1:
                    4d:30:1d:53:12:32:e2:fe:b5:7a:ad:38:ce:55:5a:
                    ff:37:cb:ca:b1:0d:db:6c:7c:dc:71:ee:a9:be:92:
                    d8:67:f0:bb:89:bd:ac:f2:31:e0:9b:79:61:2b:bb:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:94:AF:23:6E:E5:F6:67:E7:07:5E:27:C5:F2:06:E3:8B:48:ED
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VSiUryNu5fZn5wdeJ8XyBuOLSO0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.228.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:b4:22:44:95:45:2c:f5:29:3e:93:ac:2f:ac:bb:82:03:
         5b:ca:ad:0c:71:7c:ff:3c:18:51:bc:bb:77:2a:30:2f:9e:c9:
         8d:3c:d0:e2:2e:75:03:96:39:e1:bf:9c:02:69:01:17:04:e0:
         3f:e1:87:03:1f:bf:c3:b8:15:f7:d8:eb:dc:fa:18:da:01:a7:
         ba:9b:17:22:c3:55:d1:f5:bb:b6:57:2c:e8:70:de:50:6f:8f:
         4c:45:78:37:23:d9:ec:c1:11:1a:a5:a7:da:c7:d1:13:17:07:
         a3:f3:2a:b2:93:e3:7b:ed:7d:20:52:f9:9e:63:5c:5f:f5:3f:
         8b:f8:6c:73:15:41:c1:72:df:fd:dc:0f:39:aa:d8:c9:ac:82:
         a7:12:25:dd:4b:f7:32:df:44:04:8b:15:a1:e5:0f:71:24:e1:
         70:ed:04:0b:da:f3:13:2a:c1:f1:ee:e7:1c:20:20:65:24:99:
         ca:15:fd:a6:64:f2:42:7e:1a:c3:26:1e:a0:1d:13:71:31:e2:
         26:21:72:07:09:dc:7d:88:d0:11:f3:92:7c:16:15:a7:0c:75:
         bd:43:4e:8d:e1:57:a8:7f:8f:4e:8d:c2:38:66:79:b7:31:ff:
         3a:2d:77:6e:9b:16:eb:49:9f:7c:49:e0:90:30:ef:8f:14:01:
         db:16:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:15 2024 by rpki-client on console-ams.rpki-client.org