Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4wAPVQIdGVFMw8NCr0oirxB4HrA.roa
File:                     4wAPVQIdGVFMw8NCr0oirxB4HrA.roa (raw, json)
Hash identifier:          hdqaq8f7uqyq6ymQGoZCEkEs/xw6/GxzjvQGj0JvUJo=
Subject key identifier:   E3:00:0F:55:02:1D:19:51:4C:C3:C3:42:AF:4A:22:AF:10:78:1E:B0
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01872A337947324F6020E31B7C54A80FBA3B
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4wAPVQIdGVFMw8NCr0oirxB4HrA.roa
Signing time:             Tue 28 Mar 2023 21:50:29 +0000
ROA not before:           Tue 28 Mar 2023 21:50:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        46.162.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 11 Apr 2023 06:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2a:33:79:47:32:4f:60:20:e3:1b:7c:54:a8:0f:ba:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Mar 28 21:50:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3000f55021d19514cc3c342af4a22af10781eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:32:00:b4:8a:df:bb:13:d6:5c:89:97:0d:
                    85:3b:1f:9d:8e:fe:52:8a:fb:29:2a:f0:52:d0:33:
                    1f:a2:f3:c8:ed:a7:59:43:29:8f:84:e4:54:92:0f:
                    2d:dc:99:be:3a:e0:04:63:1a:df:8e:21:e4:5c:c6:
                    66:64:73:be:ec:61:7e:64:c1:5a:1d:08:66:45:c3:
                    ae:51:de:6a:fb:6e:e9:83:81:49:13:a4:02:62:ce:
                    f8:0b:4c:ff:71:71:be:fa:fc:e4:fd:1c:38:92:86:
                    38:19:5d:74:91:5a:9c:33:a9:ba:22:b9:94:6c:30:
                    51:33:3b:9b:97:e5:a0:cd:8c:0d:2b:f4:fb:f4:51:
                    3c:75:b6:34:f2:24:8b:95:f2:02:37:b6:29:53:19:
                    c5:11:82:0f:7f:04:5d:32:85:8b:62:2f:06:a9:3c:
                    36:97:d4:82:33:48:b7:09:63:50:46:d6:70:01:ce:
                    6f:6f:ea:cd:a2:ab:cf:5f:b8:87:0d:53:3e:6c:48:
                    68:7d:fe:9b:b9:83:43:e2:97:9a:5f:1b:7d:8c:2a:
                    61:21:1b:4a:d1:df:7d:2b:69:65:3c:cd:7d:f4:31:
                    26:bc:ae:5b:30:b8:c4:26:d7:dd:e5:bb:35:71:4e:
                    77:af:e3:59:0e:ec:b0:ef:2d:9f:67:ce:5b:7b:63:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:0F:55:02:1D:19:51:4C:C3:C3:42:AF:4A:22:AF:10:78:1E:B0
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4wAPVQIdGVFMw8NCr0oirxB4HrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:eb:67:0a:a3:2e:53:53:20:f1:e6:3f:9e:b7:65:16:a3:9d:
         e7:a0:6e:e7:14:03:ad:d1:86:9b:c5:11:e5:48:ca:10:ec:fe:
         51:90:ec:e7:d7:81:d7:be:12:09:26:c6:1c:9d:62:e1:84:66:
         7b:f9:6e:54:41:37:10:7c:83:b4:5e:81:4c:b7:27:32:34:6d:
         ee:86:88:1d:91:93:c1:a3:fd:24:0c:43:eb:de:b8:d7:d5:82:
         2f:e2:1d:7f:05:2e:4f:4c:ae:c0:bd:55:ab:94:35:34:fd:8f:
         4a:49:34:92:f9:00:53:3f:f3:88:be:d5:c1:26:9d:69:1f:18:
         2a:f3:c2:fd:a6:76:0a:17:98:3e:ad:09:f8:44:6b:a5:d4:02:
         93:b0:09:9c:bd:fe:75:0b:15:6b:11:a3:da:25:c5:34:32:40:
         52:de:45:98:b3:c3:ed:45:b5:3b:cb:11:6a:38:0c:d8:e9:64:
         cf:bb:5a:86:8c:e2:d4:92:3f:99:d6:c2:0d:4b:3a:c2:cb:66:
         e4:b4:33:c4:7e:2b:3d:9a:c3:04:f7:89:0a:21:c0:31:e5:f2:
         e4:4c:49:8d:41:cd:30:44:fd:f0:8a:66:5a:9d:64:d9:ce:82:
         c4:69:25:f2:37:c6:56:d1:73:ba:d6:f4:41:2e:e8:ff:a2:55:
         ba:d3:36:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcqM3lHMk9gIOMbfFSoD7o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMzI4MjE1MDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzAwMGY1NTAyMWQxOTUxNGNjM2MzNDJhZjRhMjJhZjEwNzgxZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvakyALSK37sT1lyJlw2FOx+djv5S
ivspKvBS0DMfovPI7adZQymPhORUkg8t3Jm+OuAEYxrfjiHkXMZmZHO+7GF+ZMFa
HQhmRcOuUd5q+27pg4FJE6QCYs74C0z/cXG++vzk/Rw4koY4GV10kVqcM6m6IrmU
bDBRMzubl+WgzYwNK/T79FE8dbY08iSLlfICN7YpUxnFEYIPfwRdMoWLYi8GqTw2
l9SCM0i3CWNQRtZwAc5vb+rNoqvPX7iHDVM+bEhoff6buYND4peaXxt9jCphIRtK
0d99K2llPM199DEmvK5bMLjEJtfd5bs1cU53r+NZDuyw7y2fZ85be2OgxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOMAD1UCHRlRTMPDQq9KIq8QeB6wMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvNHdBUFZRSWRHVkZNdzhOQ3Iwb2lyeEI0SHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAd62cKoy5TUyDx5j+et2UWo53noG7nFAOt0YabxRHl
SMoQ7P5RkOzn14HXvhIJJsYcnWLhhGZ7+W5UQTcQfIO0XoFMtycyNG3uhogdkZPB
o/0kDEPr3rjX1YIv4h1/BS5PTK7AvVWrlDU0/Y9KSTSS+QBTP/OIvtXBJp1pHxgq
88L9pnYKF5g+rQn4RGul1AKTsAmcvf51CxVrEaPaJcU0MkBS3kWYs8PtRbU7yxFq
OAzY6WTPu1qGjOLUkj+Z1sINSzrCy2bktDPEfis9msME94kKIcAx5fLkTEmNQc0w
RP3wimZanWTZzoLEaSXyN8ZW0XO61vRBLuj/olW60za4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org