Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EBfT3LwK6sWgJr3PivSAHL4hJOc.roa
File:                     EBfT3LwK6sWgJr3PivSAHL4hJOc.roa (raw, json)
Hash identifier:          w1wWiOYCa9osWiwQCnDUOFp7aR6ho87Xe8C8Y4Oz9j0=
Subject key identifier:   10:17:D3:DC:BC:0A:EA:C5:A0:26:BD:CF:8A:F4:80:1C:BE:21:24:E7
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0188E8F8571F58CA1CB7D1ECA8333A38ED33
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EBfT3LwK6sWgJr3PivSAHL4hJOc.roa
Signing time:             Fri 23 Jun 2023 15:56:09 +0000
ROA not before:           Fri 23 Jun 2023 15:56:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6079
IP address blocks:        46.162.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 01 Aug 2023 09:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e8:f8:57:1f:58:ca:1c:b7:d1:ec:a8:33:3a:38:ed:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun 23 15:56:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1017d3dcbc0aeac5a026bdcf8af4801cbe2124e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9a:aa:37:58:a0:39:4e:b9:07:59:b5:62:f3:
                    96:2f:62:54:b0:f6:38:da:77:f2:c0:27:9e:84:08:
                    a6:81:ed:54:64:5d:c8:c3:f8:35:8d:08:a1:01:1f:
                    df:21:13:ce:2c:59:04:07:91:54:de:65:d6:00:42:
                    23:8e:bf:3a:41:06:75:4f:26:85:25:1c:de:0d:93:
                    97:53:59:f7:99:ac:66:43:19:59:9b:7c:e5:f5:83:
                    cb:a1:8a:81:f4:2c:8c:e2:b2:2a:0e:ed:21:8b:e3:
                    5a:29:2f:a2:40:61:71:f8:49:50:be:ca:2f:13:75:
                    74:4e:3c:d8:a9:6c:bc:a8:26:57:c6:48:ed:9d:b3:
                    d2:be:9a:8e:da:31:14:c1:73:f5:6e:cb:5f:cd:54:
                    ba:6b:a4:08:3f:17:9f:cd:33:32:b6:5c:02:81:79:
                    47:e3:bc:d8:53:24:e4:16:f1:4f:62:44:a9:1d:3c:
                    54:f5:fe:ea:a8:0a:6e:6e:cb:d3:7b:02:6a:88:5f:
                    ff:50:45:dd:8d:d7:30:d9:41:6d:47:0c:de:7a:0b:
                    14:a3:98:14:cd:61:61:e4:65:9d:b1:c7:9c:f3:7e:
                    da:c2:60:61:af:2f:e9:cf:06:1b:3a:ff:e9:eb:40:
                    06:f5:47:ac:fb:74:52:13:2b:87:9a:b9:70:8a:08:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:17:D3:DC:BC:0A:EA:C5:A0:26:BD:CF:8A:F4:80:1C:BE:21:24:E7
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EBfT3LwK6sWgJr3PivSAHL4hJOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6c:32:cf:77:fb:bf:1d:ab:a8:ee:b6:09:7e:2b:a8:74:7e:
         5b:06:83:c2:0f:80:a4:63:93:ea:65:ff:c5:f2:8e:ba:06:6f:
         a4:80:d1:90:b5:11:38:6b:93:6d:d4:1a:a3:26:ea:69:6c:48:
         70:79:69:77:6b:ae:a8:35:16:e3:bb:e4:a2:0c:d1:63:1e:eb:
         9f:c9:09:c0:65:c9:e4:78:04:26:54:48:7b:75:e0:c9:68:c4:
         e1:a9:6b:10:8d:f0:af:8b:a3:49:99:61:01:ce:4c:48:e4:1b:
         b3:bd:2d:7b:5e:1a:4d:fa:d5:d3:a0:9e:37:ce:39:e0:bc:e3:
         94:c6:66:de:9b:f6:e2:63:dd:91:96:cf:91:46:a2:20:42:b0:
         84:c8:1b:c5:d5:58:7d:9a:36:93:30:a8:53:ac:3f:06:e7:0a:
         34:10:78:4e:01:f6:07:c0:86:20:c5:1e:c4:61:09:a5:b9:34:
         f3:2f:14:d8:6c:95:1c:ff:7f:fe:be:0b:5a:bf:09:81:8e:ac:
         8f:f6:5f:b6:c9:d9:18:0b:a3:6c:91:82:40:84:9e:0e:eb:29:
         df:67:2c:aa:73:c2:33:bd:d6:49:16:c1:c0:3e:40:ab:3b:fd:
         16:87:8e:d4:48:a8:e7:6b:3c:e0:4d:64:60:39:5f:6d:07:26:
         48:ca:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org