Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4XTe_Ilho53XL1D6LLYB4sn6qCY.roa
File:                     4XTe_Ilho53XL1D6LLYB4sn6qCY.roa (raw, json)
Hash identifier:          M7YQ0zgwEbRP5cUh/jN4FnONxqO0P9alBfDHFtCoy8E=
Subject key identifier:   E1:74:DE:FC:89:61:A3:9D:D7:2F:50:FA:2C:B6:01:E2:C9:FA:A8:26
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018931DB69C4BCF1E4864D5F1086C648FF9D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4XTe_Ilho53XL1D6LLYB4sn6qCY.roa
Signing time:             Fri 07 Jul 2023 19:36:50 +0000
ROA not before:           Fri 07 Jul 2023 19:36:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        46.162.8.0/23 maxlen: 24
                          46.162.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 08 Jul 2023 12:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:31:db:69:c4:bc:f1:e4:86:4d:5f:10:86:c6:48:ff:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jul  7 19:36:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e174defc8961a39dd72f50fa2cb601e2c9faa826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:70:4c:f8:6d:d7:96:c7:5d:a2:2e:9e:90:
                    f1:77:9b:d8:72:88:91:a2:1f:74:29:cd:c9:2d:48:
                    2c:e3:1e:1d:b9:e3:47:c8:5c:f7:f2:69:b9:62:2e:
                    66:4c:1f:e8:94:0d:52:59:55:d2:44:17:4e:6f:84:
                    3f:c7:10:9a:23:d4:8e:de:d6:2f:f2:2d:97:bf:1e:
                    1d:11:fa:24:a5:f1:a7:a5:e3:3d:04:45:f8:46:c4:
                    2f:bc:37:33:44:c4:0d:fb:a4:37:fc:73:cb:45:ff:
                    8e:ce:35:1c:84:5e:de:64:aa:1c:45:23:f2:91:64:
                    1c:75:fd:b8:b5:42:b2:fa:87:46:a2:30:20:7a:79:
                    6a:4e:51:d0:71:26:bb:50:1e:dd:1a:c5:84:9e:4a:
                    d8:d2:86:ef:d6:68:a7:bd:e7:17:e3:e1:90:c6:84:
                    56:14:9f:ae:f8:ae:73:69:43:51:dc:b6:75:46:bc:
                    34:0d:f1:f7:92:7b:0c:10:37:64:be:4f:64:3b:11:
                    f5:d3:69:46:a1:ed:85:50:f8:f8:21:7b:04:80:ca:
                    65:fe:00:c0:71:ce:05:10:dc:c9:0b:5a:60:72:54:
                    76:db:20:1c:80:1a:41:8d:2e:e1:bd:a7:cb:d0:47:
                    94:cb:b7:ed:4e:b7:ba:0f:c6:29:ac:9f:1b:7a:f4:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:DE:FC:89:61:A3:9D:D7:2F:50:FA:2C:B6:01:E2:C9:FA:A8:26
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4XTe_Ilho53XL1D6LLYB4sn6qCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.8.0/23
                  46.162.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5b:bb:51:57:ab:ab:c7:84:bc:07:5b:35:7e:0f:ab:ed:ab:
         cb:d9:44:2b:32:a2:f1:6b:ce:b5:01:b7:40:ad:f9:5c:ac:f3:
         78:b8:96:ca:6d:19:c3:14:3e:5f:3c:2e:f1:b1:33:aa:38:3e:
         56:ce:62:98:ae:93:db:ca:f0:62:d5:07:ad:f0:54:ca:0b:9c:
         4b:d0:25:3a:31:fd:67:e8:62:a4:08:c0:b0:09:98:b1:2c:bc:
         ef:9e:63:22:6a:21:f3:80:40:76:48:c3:83:a6:00:d1:92:04:
         c5:c1:13:82:4d:ab:b5:a2:42:ff:0d:1f:d2:d8:2f:0f:ce:de:
         3b:dc:a0:f1:ed:41:23:db:24:ea:4d:34:48:2c:3d:09:71:47:
         d8:04:22:7e:03:ef:f7:6a:14:5a:47:d9:40:1b:af:e3:53:c3:
         95:5c:04:08:16:09:9b:21:78:fc:b0:ce:80:83:cf:dc:d3:b2:
         c5:15:47:c3:d7:65:f4:fe:b8:24:67:4f:ce:d1:83:e1:de:a5:
         1e:24:ee:b0:21:7e:3f:7b:ca:40:07:fe:d2:18:57:b2:6e:3a:
         1f:f7:38:b9:e2:f6:b7:50:7e:62:c4:15:81:a2:2f:c4:8e:db:
         46:d5:4f:cf:e3:5e:aa:38:09:bb:2f:53:fd:25:70:5e:d2:dc:
         b5:cc:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org