Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Hq325cr03G_g2Q7J1Y_gWy_6Suk.roa
File:                     Hq325cr03G_g2Q7J1Y_gWy_6Suk.roa (raw, json)
Hash identifier:          3PWyb9zSzhsPTqjsCyZ5xnN7E70sCYpe9SQibSbOEO4=
Subject key identifier:   1E:AD:F6:E5:CA:F4:DC:6F:E0:D9:0E:C9:D5:8F:E0:5B:2F:FA:4A:E9
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018635F621AD6262108A69B81A65C3AABAF3
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Hq325cr03G_g2Q7J1Y_gWy_6Suk.roa
Signing time:             Thu 09 Feb 2023 11:36:08 +0000
ROA not before:           Thu 09 Feb 2023 11:36:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48314
IP address blocks:        46.162.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Oct 2023 09:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:35:f6:21:ad:62:62:10:8a:69:b8:1a:65:c3:aa:ba:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  9 11:36:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1eadf6e5caf4dc6fe0d90ec9d58fe05b2ffa4ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:0d:1e:f2:ec:53:6b:a3:f5:c1:69:8d:d9:
                    f3:33:e3:9b:ee:75:fd:bf:28:53:41:0d:27:23:72:
                    be:86:e5:c9:dc:8b:e6:43:1a:bf:94:42:48:9e:e2:
                    d1:87:09:b7:bc:00:70:92:f9:7f:f1:d1:39:33:b2:
                    92:24:55:e8:10:2d:55:a2:72:b8:ee:45:10:76:3a:
                    3a:3c:ea:f3:89:93:59:0c:e0:d8:8e:4a:10:73:fe:
                    03:bc:d3:15:c5:9d:88:80:b0:aa:26:03:50:c0:a3:
                    f9:cd:aa:09:e8:40:71:06:d8:2d:fa:65:ac:08:c8:
                    b3:62:e9:cc:08:f4:a6:89:5c:46:3b:02:83:d3:33:
                    b0:c8:d9:6a:50:5c:e0:52:bc:40:6c:6b:c4:8f:07:
                    10:32:48:e3:4b:98:62:ac:4b:d1:59:c1:94:a7:d3:
                    3c:70:4a:7e:78:8b:c4:a5:e7:3c:6d:30:c7:e1:65:
                    9c:30:4c:b5:3f:96:f5:35:cb:f8:9c:55:70:3b:57:
                    ca:da:df:f0:c2:75:c7:bf:19:1d:3d:45:77:ea:2d:
                    ad:19:8b:bd:22:98:3c:9c:c6:5c:c4:b9:8b:32:e0:
                    59:c6:75:96:e0:a0:da:07:00:1e:04:0a:1d:c5:5f:
                    cf:ae:86:6a:e4:d0:2c:ad:b2:a2:18:39:6a:77:2f:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:F6:E5:CA:F4:DC:6F:E0:D9:0E:C9:D5:8F:E0:5B:2F:FA:4A:E9
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Hq325cr03G_g2Q7J1Y_gWy_6Suk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:06:72:07:f5:83:cb:34:17:c2:e6:8c:93:f9:77:c2:96:bc:
         a6:e4:f2:bd:98:de:fa:f3:92:50:cc:cb:ec:cf:ab:71:e5:14:
         dd:ed:07:8d:67:4e:ed:95:60:3b:bd:2f:88:5f:77:24:c0:e2:
         26:8f:0d:38:57:2c:15:71:a7:d9:48:d8:f9:c4:e5:ba:a5:e1:
         51:09:ad:0c:9e:67:0b:6d:cd:d6:e5:b6:bf:a8:1d:ba:9a:6b:
         dc:9b:67:ce:06:0f:9d:e1:9f:75:02:b9:48:2a:56:0b:ba:12:
         f3:40:30:f4:86:f1:79:05:92:89:27:af:97:88:81:15:45:50:
         93:87:e1:8b:30:f5:79:1c:03:7d:9e:59:3a:e3:77:55:69:ff:
         73:0d:d4:b5:6c:63:e7:0b:9e:19:6b:18:7b:39:4f:91:2d:61:
         d4:6a:34:31:e6:6b:c2:e4:2d:30:44:cb:f1:fb:53:f8:bd:5e:
         ea:18:62:ec:62:92:d4:78:f5:55:34:99:f1:08:84:5d:47:2f:
         e0:5f:af:6d:de:41:cf:d9:cf:28:d0:af:ac:7e:3b:63:ac:88:
         dc:2d:0e:ac:b9:41:14:94:a3:bb:55:5d:9a:b2:79:7f:7e:42:
         79:3d:42:3a:a7:4b:6b:0e:eb:59:66:90:90:ed:9a:b1:f6:ad:
         57:10:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org