Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa
File:                     yc1TEPN1BLVkwo47NAkghSWkMpc.roa (raw, json)
Hash identifier:          Jq0YyCeJ5ovMG6xgvhsK5WXw2Vv/s2r5ggMSETGs0qs=
Subject key identifier:   C9:CD:53:10:F3:75:04:B5:64:C2:8E:3B:34:09:20:85:25:A4:32:97
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       018896528B6E3D4E0DBDBC2D95E7C3D32781
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa
Signing time:             Wed 07 Jun 2023 14:46:12 +0000
ROA not before:           Wed 07 Jun 2023 14:46:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16273
IP address blocks:        46.228.128.0/24 maxlen: 24
                          46.228.128.0/23 maxlen: 24
                          46.228.129.0/24 maxlen: 24
                          46.228.130.0/24 maxlen: 24
                          46.228.131.0/24 maxlen: 24
                          46.228.132.0/23 maxlen: 23
                          46.228.134.0/23 maxlen: 23
                          46.228.141.0/24 maxlen: 24
                          46.228.143.0/24 maxlen: 24
                          193.110.108.0/23 maxlen: 23
                          193.110.108.0/24 maxlen: 24
                          2a03:7800:a00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 14 Jun 2023 11:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:96:52:8b:6e:3d:4e:0d:bd:bc:2d:95:e7:c3:d3:27:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Jun  7 14:46:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c9cd5310f37504b564c28e3b3409208525a43297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:00:72:9a:b9:25:2c:09:2a:26:39:4c:42:
                    cd:d6:87:32:d5:5f:d6:9e:cd:94:43:0a:37:13:9a:
                    0d:ca:45:29:da:68:72:cd:d7:98:45:81:60:99:62:
                    dc:58:7f:25:c7:e9:57:8f:ae:24:2c:cf:c8:e3:aa:
                    13:9d:e1:2f:b2:d3:e9:67:1e:36:cb:ed:4f:13:f9:
                    8c:bf:8c:21:7c:ba:d1:47:5c:92:cc:32:aa:d2:38:
                    eb:18:7c:f8:1f:80:55:fb:af:d6:e7:1f:b1:d1:6a:
                    3c:78:14:c7:18:45:17:5d:d5:8d:cb:60:e0:41:33:
                    e7:13:34:3d:90:bf:3f:cb:d6:4b:4c:06:e3:be:c4:
                    26:d0:42:49:06:16:0a:08:d3:0f:c9:9b:f9:cc:9e:
                    a5:7c:ec:03:f6:d1:de:ac:06:19:b3:71:9a:6d:52:
                    0e:f7:68:bc:8f:fa:b1:c3:a5:ae:d6:e3:ad:9b:86:
                    5b:fe:40:07:a0:53:6a:d0:0f:1a:80:c3:fd:fb:71:
                    05:f8:5f:d8:55:b6:b8:33:ea:25:f0:54:a6:78:d1:
                    f3:44:af:d4:18:ce:07:05:16:e9:20:a4:3b:27:9c:
                    14:98:13:99:c9:32:6a:ae:fd:b7:3f:f0:39:1f:73:
                    f1:2b:54:7c:c6:f5:8a:1d:15:76:e8:6d:48:08:df:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:53:10:F3:75:04:B5:64:C2:8E:3B:34:09:20:85:25:A4:32:97
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.228.128.0/21
                  46.228.141.0/24
                  46.228.143.0/24
                  193.110.108.0/23
                IPv6:
                  2a03:7800:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:af:ae:77:81:2e:fd:54:6b:73:e6:1d:57:78:9b:f6:d0:c5:
         97:9e:95:1c:ac:ea:b2:91:9b:d6:10:c7:5c:af:74:b6:24:9a:
         a6:0d:1b:e1:64:f4:a8:53:0e:a6:0b:df:05:04:c7:74:26:ae:
         4e:14:96:63:61:3a:26:73:0f:05:5c:3e:ee:3d:ff:76:e9:f6:
         e7:b2:c0:89:3f:38:2a:2e:9b:dc:99:7a:51:bc:3f:59:97:52:
         21:6a:23:0b:4e:da:e0:65:f2:6f:5e:43:75:73:98:4b:5a:79:
         2f:42:bc:4f:9a:82:06:7d:e2:09:5f:40:e0:52:90:b5:54:5a:
         30:12:08:2e:c9:51:5c:83:30:6f:fb:63:67:65:00:72:6c:4c:
         88:73:11:02:0c:08:49:d0:4a:62:90:e8:32:46:ce:25:aa:cc:
         c8:ff:b8:b5:df:67:58:4d:0a:03:ae:9c:1b:45:8f:a4:e4:d2:
         5d:a2:97:7f:e4:52:b6:b4:d1:e9:0c:f8:46:1d:43:b5:33:b7:
         49:f1:55:7f:49:7f:4d:83:96:37:e2:d1:a5:ad:39:0e:70:af:
         51:9e:a3:00:ef:8b:d6:e6:ef:6c:33:88:c4:9c:9c:a4:59:22:
         c7:12:5b:47:57:5e:94:be:33:94:24:cf:ee:38:42:db:29:7e:
         4d:79:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org