Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa
File:                     A4sekV3tFiwfwU4lT7qlNNh6oCE.roa (raw, json)
Hash identifier:          VCFsmbWmq0tUx64zdlI8j9zlNhcRMwCa0n5Wy5S799k=
Subject key identifier:   03:8B:1E:91:5D:ED:16:2C:1F:C1:4E:25:4F:BA:A5:34:D8:7A:A0:21
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0186117E849D539C1C3AC85BA5983B00B23F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa
Signing time:             Thu 02 Feb 2023 09:39:09 +0000
ROA not before:           Thu 02 Feb 2023 09:39:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24881
IP address blocks:        46.162.0.0/19 maxlen: 19
                          193.111.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 03 Feb 2023 18:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:11:7e:84:9d:53:9c:1c:3a:c8:5b:a5:98:3b:00:b2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  2 09:39:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=038b1e915ded162c1fc14e254fbaa534d87aa021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:0a:ce:d8:9e:95:3a:40:b9:8a:5c:8d:cd:
                    56:f5:e9:9b:a6:21:ea:b0:8d:ce:5e:3e:78:43:3e:
                    f0:f4:0e:54:ad:6a:56:fb:72:07:10:4a:3c:e0:a6:
                    2b:6c:38:0c:94:16:51:f0:34:86:3a:e0:69:39:45:
                    ee:af:39:bd:52:34:5d:a4:fa:40:96:58:19:2a:54:
                    59:b8:27:35:d5:64:3d:14:42:de:a1:71:81:6e:f5:
                    04:40:11:d6:25:cf:2f:86:14:17:74:bf:24:aa:84:
                    cc:72:4b:48:5a:f5:3e:a4:a9:ea:35:3b:3d:5c:1b:
                    ae:4a:ce:83:73:26:e2:49:e3:3f:5d:6c:26:c7:b1:
                    61:61:98:99:80:a3:30:f4:08:9d:6d:89:dc:ef:90:
                    79:ce:36:de:d4:d3:1a:fd:47:a3:73:82:cf:bd:c4:
                    5a:6f:47:bf:4b:df:45:4a:7d:0d:5a:d7:70:94:be:
                    4c:d7:1d:da:8f:5d:dc:ba:45:42:a2:67:6b:db:75:
                    e0:be:96:c6:e8:22:47:2a:8c:a9:8f:b0:3f:2a:3e:
                    87:d3:9b:a1:42:82:3e:1f:6d:32:03:ca:dc:ff:18:
                    82:69:e2:d4:02:be:6c:a9:f1:80:0d:38:3b:40:1b:
                    e4:8b:93:5b:40:2a:10:8f:54:5d:cb:3b:ed:77:78:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:1E:91:5D:ED:16:2C:1F:C1:4E:25:4F:BA:A5:34:D8:7A:A0:21
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.0.0/19
                  193.111.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:35:cc:21:c2:b9:1d:20:38:a8:be:53:84:b3:63:1a:ca:
         82:bf:a0:1e:ac:af:0b:4b:db:88:5b:47:39:0c:b0:8e:7d:36:
         9d:0e:19:8f:ff:30:b3:03:11:71:be:69:5b:55:ff:66:78:7e:
         68:ab:cc:1e:13:04:83:c9:a8:8a:06:29:cd:ca:1d:46:04:e6:
         9d:36:78:57:2c:b6:5d:4a:9c:0e:8f:8d:72:5e:05:b4:cf:74:
         2a:48:af:c2:db:f7:f0:6f:b7:ed:29:38:d8:21:ee:ce:8f:4e:
         62:60:09:b0:ff:5f:53:76:f1:4f:77:00:7a:14:cf:eb:89:34:
         9a:f1:7a:8f:5d:4c:7a:fb:b5:76:cd:e6:70:02:1a:9e:90:e8:
         72:a7:e3:1f:46:7f:89:be:d4:75:da:74:19:fb:2b:11:83:bb:
         f2:ec:af:90:2f:e7:76:33:4a:ce:16:00:50:91:39:ea:a5:88:
         92:c9:95:04:4c:7d:14:7c:5c:4f:aa:40:e3:4d:7c:f3:a7:95:
         c3:fa:64:64:ee:67:fa:50:e2:dc:4c:fc:de:98:7d:93:20:94:
         0a:c1:6d:81:ae:8a:c3:4f:b5:50:99:c1:9b:a4:8a:c4:66:f0:
         3a:30:e8:41:9e:6b:97:83:48:68:d8:27:29:28:75:cb:99:1e:
         94:e1:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org