Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1A9TBBqpe4jNxQk5tasifSgTuBc.roa
File:                     1A9TBBqpe4jNxQk5tasifSgTuBc.roa (raw, json)
Hash identifier:          moE1ElfmRhTpPP4ualrs2GurM8AiP2qBe7kcZ87f2ps=
Subject key identifier:   D4:0F:53:04:1A:A9:7B:88:CD:C5:09:39:B5:AB:22:7D:28:13:B8:17
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01887DCDB09851E7B0C241280B82A4F43740
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1A9TBBqpe4jNxQk5tasifSgTuBc.roa
Signing time:             Fri 02 Jun 2023 20:30:12 +0000
ROA not before:           Fri 02 Jun 2023 20:30:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200193
IP address blocks:        46.162.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Jun 2023 20:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:cd:b0:98:51:e7:b0:c2:41:28:0b:82:a4:f4:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  2 20:30:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d40f53041aa97b88cdc50939b5ab227d2813b817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:bd:3d:ad:e9:b2:c0:67:b7:52:5e:62:ed:
                    c1:77:38:3f:59:e3:14:68:2a:93:10:08:06:df:06:
                    5c:88:f6:bb:44:82:23:37:d5:b8:f0:d1:34:96:ec:
                    a6:a2:0f:73:ac:05:20:88:39:dc:60:20:a8:58:fd:
                    39:ec:e7:02:12:a5:66:d8:d8:03:3d:69:20:73:47:
                    31:bd:61:cb:82:e6:2f:e9:f6:bc:14:b1:a3:02:ea:
                    37:1e:6a:ea:de:73:6f:99:f8:28:fd:ee:83:de:71:
                    16:c7:41:ae:e2:8e:a8:e8:d1:40:e2:05:ab:8e:af:
                    c4:ad:48:16:47:2a:e3:90:41:9b:77:84:c4:ef:a1:
                    a1:99:76:16:f2:65:fe:ed:63:af:bc:f5:ed:4c:eb:
                    38:6b:4c:9e:ff:5b:ec:8d:1e:c6:25:49:57:e3:01:
                    22:5c:3e:83:8d:21:d2:dc:a2:93:18:c4:bd:b8:04:
                    ce:2e:29:23:a0:1e:b0:8a:f2:e9:43:9d:c5:ec:56:
                    5f:00:b6:6e:8c:52:f8:d1:84:cf:a8:02:99:ae:a8:
                    14:cf:0f:4a:69:8d:3c:0c:2e:ca:a3:d9:b1:a6:ba:
                    92:d2:b9:12:02:2e:46:0c:23:a9:60:87:2b:04:b5:
                    1c:7f:a8:c7:9f:40:3c:59:56:dc:4b:6a:e3:2e:4f:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:53:04:1A:A9:7B:88:CD:C5:09:39:B5:AB:22:7D:28:13:B8:17
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1A9TBBqpe4jNxQk5tasifSgTuBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:54:36:60:b4:2a:4c:25:49:64:10:96:70:d8:55:ca:19:
         cf:a6:53:da:c8:41:94:a0:22:61:83:e1:10:78:c7:38:c3:fc:
         16:2e:05:04:80:c2:95:93:c0:89:60:d0:df:02:19:66:80:fd:
         55:ab:1f:d0:0c:41:9f:95:6b:fc:a4:9a:69:92:0d:0d:cb:3c:
         f1:f7:d5:ca:5c:48:b8:b9:44:3b:db:9c:4b:0f:c3:e8:40:04:
         8c:48:e9:84:2b:7f:97:b6:07:b1:1a:c2:67:18:6d:c0:a7:05:
         9c:81:3b:ae:15:66:29:d0:30:a0:7b:f3:63:61:96:e5:ab:3c:
         82:94:91:ab:c2:a0:80:1b:af:50:1d:f5:5e:6c:1f:45:49:16:
         a7:a4:18:99:37:b2:27:04:16:28:2d:62:93:8a:f0:7e:46:43:
         64:94:05:62:e6:d4:97:67:70:8e:67:af:76:69:14:67:01:a8:
         5e:92:56:ef:69:a3:76:40:7b:15:b0:5a:46:9c:75:29:b4:79:
         7c:cf:15:99:d1:26:f1:1c:af:80:b6:bb:82:56:cd:6b:22:29:
         78:c1:8c:24:07:fd:ec:c9:f9:ff:6e:98:91:bf:48:6c:b9:9b:
         7e:42:49:2b:54:24:d6:13:c7:34:e8:9f:d9:0e:3f:1d:4d:79:
         97:81:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org