Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K95ATkMXMrl2eeTsZ5An7W6UTxI.roa
File:                     K95ATkMXMrl2eeTsZ5An7W6UTxI.roa (raw, json)
Hash identifier:          eEim0dSSDG34tXmD0i3ZdkdAwpJeqYvbAOAvLs5nP1c=
Subject key identifier:   2B:DE:40:4E:43:17:32:B9:76:79:E4:EC:67:90:27:ED:6E:94:4F:12
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01862FC64964A1C2761F9F89E16B5118730A
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K95ATkMXMrl2eeTsZ5An7W6UTxI.roa
Signing time:             Wed 08 Feb 2023 06:46:09 +0000
ROA not before:           Wed 08 Feb 2023 06:46:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396998
IP address blocks:        46.162.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 Nov 2023 11:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2f:c6:49:64:a1:c2:76:1f:9f:89:e1:6b:51:18:73:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  8 06:46:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2bde404e431732b97679e4ec679027ed6e944f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:96:a3:3d:e0:02:e1:c4:0e:50:e6:e2:45:
                    f2:d9:c8:b9:ed:4f:87:ba:f0:69:15:ae:d4:9e:c1:
                    9a:84:01:1f:00:86:da:ed:3c:ed:55:ea:1c:4d:2d:
                    d7:d5:0b:f9:87:39:ad:4c:00:c9:0a:80:ee:02:81:
                    c9:d2:ea:90:c9:ce:f7:0b:d8:4b:37:a2:3e:8b:0d:
                    f8:a3:b6:25:c1:f1:55:90:e0:cf:5c:0a:dd:78:68:
                    f4:1f:32:74:22:97:95:17:6f:8c:ee:56:4c:64:1d:
                    30:64:b7:c6:5e:a1:b2:ee:59:0a:09:45:11:65:b5:
                    0b:c6:aa:4d:97:94:5c:bc:3b:b8:29:03:2e:0b:ae:
                    1d:ed:e1:50:cd:4a:66:7f:f1:9f:62:a8:ce:98:27:
                    33:e0:18:d9:e8:a1:db:f1:72:af:84:df:04:5e:b4:
                    0d:8d:d4:79:f1:56:01:3f:52:8c:54:1e:c6:49:9b:
                    17:fa:9d:60:ed:c1:fe:24:63:9e:91:94:c4:3a:c0:
                    2d:0f:2c:b8:57:0d:97:5f:44:db:ab:be:cb:93:d5:
                    33:d0:34:55:ae:46:01:d7:c9:ba:77:46:c1:f7:7d:
                    9e:a7:b5:c5:b4:80:de:70:19:44:32:08:9b:8f:97:
                    c0:75:08:47:3d:ae:24:75:e9:52:15:b7:a4:b3:f0:
                    a8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DE:40:4E:43:17:32:B9:76:79:E4:EC:67:90:27:ED:6E:94:4F:12
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/K95ATkMXMrl2eeTsZ5An7W6UTxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:10:0e:fc:a5:19:9d:4d:39:7f:17:eb:bb:2d:1a:1e:b8:9c:
         47:9d:bc:00:95:5d:74:b6:69:4b:58:07:b2:f1:c8:b4:66:e4:
         16:27:c8:93:f8:c1:9f:1d:07:54:7f:b8:b5:d1:43:04:5e:64:
         5a:2d:e4:74:1b:a7:57:b2:b9:4a:8b:8d:28:7c:7a:42:ab:6e:
         97:04:71:18:ac:d9:84:8f:ed:0d:79:a3:bb:f9:1a:f0:ff:ab:
         3b:c2:91:7f:8e:7a:b7:e0:9a:97:75:3c:54:69:08:d0:95:07:
         28:d1:1c:12:06:d8:7a:b0:13:ff:97:64:18:d9:b6:d7:12:d0:
         7e:ab:03:68:3b:31:d6:fb:96:61:f7:e3:b0:7c:fb:4c:bf:34:
         dc:0e:d1:00:27:04:29:2d:4b:00:b3:08:33:54:70:2f:99:8d:
         cc:0b:a8:c4:84:03:76:fa:ed:4b:9a:3f:f3:01:6e:e7:4a:60:
         ea:52:f5:6b:4c:8e:b8:a2:b5:09:41:fa:c5:6c:47:85:b5:1b:
         e5:b5:72:47:b6:08:b0:1f:55:66:74:dd:57:da:e2:d5:e8:07:
         ee:7c:24:df:8d:d5:15:0f:21:22:fd:fc:10:36:9e:c6:c5:69:
         09:65:97:70:b6:fa:c1:7e:37:d6:fe:ea:5b:ac:67:0d:47:14:
         bd:5e:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org