Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa
File:                     FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa (raw, json)
Hash identifier:          R//0gaOCd3F/1KnOjp4rFc2KMS+ARool9cBVwVEyWyM=
Subject key identifier:   16:C1:D6:C1:C6:04:7C:26:31:FC:57:BD:6F:1F:CA:EE:F4:21:8C:5D
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0187E0FFA5662F3D24A9CD25B37327DAA9CA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa
Signing time:             Wed 03 May 2023 09:44:23 +0000
ROA not before:           Wed 03 May 2023 09:44:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208949
IP address blocks:        46.162.8.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 19:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e0:ff:a5:66:2f:3d:24:a9:cd:25:b3:73:27:da:a9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: May  3 09:44:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16c1d6c1c6047c2631fc57bd6f1fcaeef4218c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:1f:b3:29:67:7f:94:9d:57:7a:49:e5:8c:
                    07:7f:91:91:cf:f9:59:72:db:59:a7:e5:41:c1:60:
                    c2:ff:65:11:0f:8a:ae:a4:c2:b6:02:0e:6c:2a:9f:
                    e9:ae:a4:99:e6:e5:71:13:69:78:a9:03:50:25:5f:
                    b5:66:f0:d4:dd:3e:7f:f7:ac:1b:6f:0a:e7:ea:3c:
                    df:b6:e2:7f:ee:a3:fd:35:c7:7c:a8:a0:cf:c1:3f:
                    c5:01:84:ee:c7:36:d5:1c:d7:d2:34:9f:1b:68:99:
                    d7:b2:b2:cc:64:76:d3:26:4e:5f:a2:e3:c1:7d:b1:
                    a3:14:dd:96:0e:ae:76:b3:6a:5a:07:db:86:4f:b0:
                    4a:86:c5:b9:3e:dc:f3:cf:a8:1a:55:c8:be:d2:c6:
                    61:d7:2b:70:d1:ec:8c:e8:6d:41:2b:61:fb:8d:5c:
                    de:1a:43:8a:83:22:d7:1f:64:49:af:dc:ef:c4:85:
                    20:64:a6:6e:6f:39:cc:e2:a2:73:1f:0e:77:9b:27:
                    fd:27:f3:44:0a:ff:ea:79:f4:f8:fb:af:6d:75:84:
                    87:f6:92:0c:fe:66:c6:a2:14:23:f2:71:1a:5c:a2:
                    4a:f1:e8:a6:21:a5:b9:2a:18:7d:8b:f2:38:ae:bd:
                    cb:09:7c:f8:b8:24:47:93:49:74:60:b7:0b:f3:01:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:D6:C1:C6:04:7C:26:31:FC:57:BD:6F:1F:CA:EE:F4:21:8C:5D
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FsHWwcYEfCYx_Fe9bx_K7vQhjF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:6e:db:88:00:ab:92:65:91:00:e5:68:c4:d9:8b:29:6e:
         1c:ed:f7:e3:60:33:4e:a0:ab:80:a5:ee:bd:8a:db:f5:10:18:
         06:d4:ef:fe:da:15:35:76:15:ae:27:7d:1b:85:da:7e:85:e2:
         4b:c5:2f:43:e2:e7:8c:0f:ae:90:05:4c:52:9a:f7:01:c1:38:
         c2:17:b3:f8:14:c2:ae:35:89:80:2f:51:0b:7c:83:7b:53:b5:
         58:18:96:a4:7c:eb:0c:44:c6:a5:18:83:f3:5c:0f:bb:ce:e0:
         aa:31:09:26:1a:36:7c:e5:f2:b8:13:6a:28:4b:7b:41:70:d9:
         c8:59:5a:f8:40:03:43:b7:67:34:3d:55:3b:5a:97:d8:f9:2c:
         e6:3c:77:42:ab:d6:c8:3d:79:ab:0f:fb:52:e8:20:7c:72:74:
         03:e6:01:80:b1:49:56:3d:99:6c:3c:93:9f:ca:ae:74:95:bf:
         30:36:47:c6:17:86:4b:a6:00:61:af:a4:12:e1:11:56:d4:1c:
         cd:5c:2b:3d:6e:25:26:15:e9:a2:35:bf:d9:d3:04:fe:d1:0a:
         f5:c8:a3:9d:76:01:1c:6c:d5:13:86:0f:40:19:dc:2d:3a:79:
         15:02:7e:f4:a5:6e:ee:e9:10:ea:46:fe:44:c7:24:08:e2:4a:
         c2:09:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org