Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EJUFpkmdE997D3YUrXODAEihQE8.roa
File:                     EJUFpkmdE997D3YUrXODAEihQE8.roa (raw, json)
Hash identifier:          NXxKqUB+vu1vDYR40rJu+fBRjK8nsxpLqv+gefBdaTk=
Subject key identifier:   10:95:05:A6:49:9D:13:DF:7B:0F:76:14:AD:73:83:00:48:A1:40:4F
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018896D1CDC4D2ED197994B4B78E58E099B4
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EJUFpkmdE997D3YUrXODAEihQE8.roa
Signing time:             Wed 07 Jun 2023 17:05:12 +0000
ROA not before:           Wed 07 Jun 2023 17:05:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        46.162.10.0/24 maxlen: 24
                          46.162.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Jun 2023 14:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:96:d1:cd:c4:d2:ed:19:79:94:b4:b7:8e:58:e0:99:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  7 17:05:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=109505a6499d13df7b0f7614ad73830048a1404f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:f1:91:ef:a7:fd:df:c3:32:af:47:60:a5:
                    72:86:42:f0:a9:c8:b9:2f:50:a6:d1:22:ea:44:12:
                    43:d4:d1:1b:76:2a:e7:a1:17:fd:ed:f2:35:75:3b:
                    b9:42:fa:6f:c4:61:58:cc:da:2c:18:82:2f:a2:e8:
                    f1:19:db:a2:d4:90:ea:3b:73:a9:83:70:06:21:cd:
                    22:d2:84:c5:05:b7:4d:7f:3d:cb:c1:3b:f6:e7:8b:
                    56:fd:dc:d9:e7:7c:ef:7e:2e:4b:e2:58:14:43:22:
                    b6:79:18:b6:fe:0b:5c:e2:46:a0:d9:2b:ec:e1:f9:
                    80:1e:f1:cf:ff:75:db:53:af:f3:09:c6:19:41:42:
                    4d:be:54:94:c0:25:86:d7:da:c6:91:e1:27:f8:f8:
                    75:d8:32:a0:eb:76:1f:57:2d:ef:5d:08:60:7b:82:
                    f3:ae:03:32:da:43:b0:10:86:8a:26:29:25:05:21:
                    a6:17:a9:14:15:78:58:54:79:db:81:34:08:06:22:
                    1f:65:1e:c3:96:94:9e:38:7c:6a:60:20:b5:45:72:
                    87:8f:8f:8c:b6:1a:f9:cb:e2:06:22:e2:7b:0c:cf:
                    94:f4:2c:fd:db:ae:df:1b:d5:30:04:9f:e3:9f:27:
                    7e:6a:7f:fc:cc:77:83:aa:6f:c6:52:6c:5e:62:8e:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:95:05:A6:49:9D:13:DF:7B:0F:76:14:AD:73:83:00:48:A1:40:4F
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EJUFpkmdE997D3YUrXODAEihQE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:c4:36:f8:71:13:39:1a:47:68:05:fb:38:20:b9:ec:31:
         a0:d4:f7:42:f8:c7:4a:79:05:38:d7:bb:04:f9:07:81:f3:f9:
         37:53:56:4a:86:ac:85:44:e5:6a:57:3a:94:d0:c1:b6:03:ea:
         54:5e:21:68:f4:cd:e3:bf:bf:a2:44:a9:60:df:2f:ec:f6:27:
         47:1d:23:dc:f2:e2:fd:7f:33:a9:56:04:b5:d2:82:e3:2d:d7:
         97:df:88:6e:b5:3e:bd:38:09:7a:e6:69:e0:e7:09:3a:df:2c:
         24:d1:2d:94:ec:99:17:38:eb:28:fe:ac:5c:e3:62:d2:5a:10:
         79:ee:39:26:7e:c5:d9:1a:34:e5:83:19:d5:16:f9:37:66:97:
         56:97:cd:3a:f8:1b:51:8a:ca:b1:6b:02:7c:95:05:cc:6e:7b:
         cf:90:cf:11:2c:09:4c:81:e7:2e:c4:42:61:91:7e:6f:09:8a:
         10:bb:d7:a9:53:9a:df:f0:73:d9:ac:15:c7:92:97:2e:62:62:
         a7:67:6d:04:9f:37:1f:17:eb:92:91:8a:ee:55:ee:a1:3d:91:
         21:58:48:5a:c5:1f:5f:ff:67:ee:a2:cb:75:65:c6:61:77:8f:
         54:5a:dd:08:e8:69:7a:b7:99:00:2d:9f:ac:de:5f:a0:b4:17:
         fc:c9:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org