Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F0qTdQXb4QCS2lm_8bhgxnmYI_g.roa
File:                     F0qTdQXb4QCS2lm_8bhgxnmYI_g.roa (raw, json)
Hash identifier:          GtyMT4W3tzP0qiMtUbyNIi2PGUMf3K8pU/8iSSZVSn0=
Subject key identifier:   17:4A:93:75:05:DB:E1:00:92:DA:59:BF:F1:B8:60:C6:79:98:23:F8
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0188B06B0598BAE74BA6FEF68ACC35207557
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F0qTdQXb4QCS2lm_8bhgxnmYI_g.roa
Signing time:             Mon 12 Jun 2023 16:23:03 +0000
ROA not before:           Mon 12 Jun 2023 16:23:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396073
IP address blocks:        46.162.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 10:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b0:6b:05:98:ba:e7:4b:a6:fe:f6:8a:cc:35:20:75:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun 12 16:23:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=174a937505dbe10092da59bff1b860c6799823f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:81:80:ba:8f:cb:92:80:51:bc:86:94:34:5d:
                    56:d5:52:c8:c3:53:52:64:36:a4:8a:14:f0:af:f5:
                    0a:ac:7a:f2:19:9e:6b:1e:f6:2f:91:84:6c:05:37:
                    be:a8:8c:1b:b3:50:39:98:7e:dd:e2:09:89:75:e3:
                    e5:34:4b:ec:f4:2c:9e:8d:f7:b1:81:37:90:14:11:
                    2e:09:be:25:bd:4b:57:93:95:77:41:7e:8f:98:b8:
                    2a:c5:55:b1:7d:e2:1c:97:8b:a3:b6:21:fd:23:02:
                    ad:24:b4:94:0a:ba:c5:a8:66:79:f2:77:69:89:c8:
                    64:12:93:d6:72:ae:12:81:60:14:87:b9:80:1a:d6:
                    f9:62:9f:83:07:cd:70:e1:4d:0d:d6:f0:49:17:39:
                    3f:75:30:c0:2f:a7:1b:02:0a:dc:d4:62:86:92:c7:
                    1e:fa:5f:97:bc:24:af:02:db:b8:b5:94:e8:b3:93:
                    10:ea:d5:b7:0e:e1:a8:6c:7c:8b:a5:7b:eb:5f:7d:
                    7f:06:df:e6:73:53:a4:79:f2:56:1e:06:44:82:53:
                    98:5b:d4:fb:8b:da:b9:7a:3f:ad:4a:78:ee:58:2d:
                    58:b5:9c:e4:65:c2:14:11:2e:b8:22:d5:9d:94:c2:
                    01:15:4d:84:65:e7:d2:28:ad:c4:fb:f0:db:71:86:
                    e2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:93:75:05:DB:E1:00:92:DA:59:BF:F1:B8:60:C6:79:98:23:F8
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F0qTdQXb4QCS2lm_8bhgxnmYI_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9e:bc:ea:8e:38:06:af:29:85:15:4d:23:ae:d0:87:1d:97:
         1f:b6:1c:09:7c:fb:da:a7:a8:e6:85:ab:93:5a:ea:41:9e:ce:
         b0:ef:11:ac:44:6d:62:41:cb:96:ad:3a:29:7f:ea:99:42:f2:
         51:70:b4:eb:37:c9:08:ea:47:71:23:27:7c:19:94:87:9f:ed:
         4d:bb:81:4e:69:76:cf:c3:14:f7:8f:e1:3e:6d:e6:c1:d4:d5:
         b6:e3:53:b5:bb:ff:c7:24:56:7d:57:f3:11:db:fa:64:02:dc:
         56:e8:10:5d:ad:3c:3d:2d:b2:79:75:2c:58:30:ed:9e:b4:7d:
         7b:19:07:d4:d2:83:ed:78:0e:d5:92:c6:34:c2:d1:95:22:c2:
         27:fa:25:c6:fd:2f:c8:37:02:e9:81:f3:5b:7a:d1:dc:55:28:
         fc:61:99:fb:5c:f8:46:a3:e4:15:a7:98:96:36:08:5d:c4:a5:
         fd:38:82:f7:11:ef:a6:71:fa:bb:af:56:f7:64:ef:3e:8e:1b:
         70:a4:61:35:74:6b:f5:8a:bd:2b:3b:55:43:1e:f0:17:23:e1:
         4f:73:08:ce:8d:c7:8d:6b:b0:8f:ef:54:e2:1a:dc:18:70:c4:
         c6:34:5a:a0:c6:b3:f6:dc:d5:1b:ee:77:79:18:e2:c6:76:07:
         5b:d4:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org