Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qjkf7wXqYuNlaUDzZ7wqn9wNFhA.roa
File:                     Qjkf7wXqYuNlaUDzZ7wqn9wNFhA.roa (raw, json)
Hash identifier:          kDXp5W32kCUYCfxg63Ubv6s1FtXt2gu4meIoD9rejhE=
Subject key identifier:   42:39:1F:EF:05:EA:62:E3:65:69:40:F3:67:BC:2A:9F:DC:0D:16:10
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0186BFFAF5CA74599CAF825CDD4D377BBC8D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qjkf7wXqYuNlaUDzZ7wqn9wNFhA.roa
Signing time:             Wed 08 Mar 2023 06:49:00 +0000
ROA not before:           Wed 08 Mar 2023 06:49:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        46.162.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Apr 2023 18:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bf:fa:f5:ca:74:59:9c:af:82:5c:dd:4d:37:7b:bc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Mar  8 06:49:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42391fef05ea62e3656940f367bc2a9fdc0d1610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:e5:9d:84:92:2f:f2:0e:2f:f3:d8:88:4b:
                    43:f6:78:65:84:3c:cd:ec:db:96:63:69:35:6f:7c:
                    b7:09:df:36:52:f3:a9:2e:df:54:49:95:7f:aa:3b:
                    83:84:64:6e:d7:45:90:94:77:50:2a:d7:27:2b:40:
                    74:4f:9a:ba:c8:68:cf:bb:57:0a:36:17:0d:b3:8a:
                    20:8b:dd:47:cf:c7:ca:89:4c:18:ab:3b:b2:b4:2a:
                    1a:99:1d:67:d7:89:34:c7:7b:eb:c9:9e:91:d9:1d:
                    35:15:eb:60:76:c4:09:0b:47:16:af:a9:91:63:49:
                    03:c9:2d:54:10:ee:4c:bb:d1:6e:59:9d:ed:49:8b:
                    68:b5:12:db:d4:0d:ac:be:a1:32:42:d7:4d:72:e7:
                    d9:dd:87:0a:6a:46:08:3f:04:94:40:e8:f5:6d:98:
                    3a:8f:8a:87:d0:a2:3b:c4:88:12:41:6f:20:07:dd:
                    7b:61:ad:93:22:a8:93:46:5f:fd:05:bb:51:06:69:
                    a6:5e:2b:4f:d5:62:58:91:df:ac:33:ea:a9:7e:97:
                    a5:3f:b9:fa:50:18:0a:1e:f8:38:1d:4e:6f:fb:30:
                    68:b9:e6:12:fb:d5:3c:da:cd:9e:2e:61:a7:ee:0c:
                    11:ed:36:c6:a8:b6:41:3c:e6:99:85:d9:3f:35:0c:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:39:1F:EF:05:EA:62:E3:65:69:40:F3:67:BC:2A:9F:DC:0D:16:10
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qjkf7wXqYuNlaUDzZ7wqn9wNFhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:11:87:49:e2:73:40:bb:e7:56:fa:eb:e3:43:42:15:a5:
         46:5a:14:e2:35:b0:c7:67:22:4b:14:c8:b1:20:ec:2f:d2:31:
         39:ff:79:93:7a:6c:d8:2c:e5:39:1f:e3:ad:93:51:96:83:05:
         68:bc:4d:96:ac:4c:5d:08:1a:aa:40:31:66:24:26:e3:2c:55:
         2c:49:43:00:10:99:0b:4e:a7:94:43:62:ce:0a:60:0b:49:ed:
         f2:4c:63:e6:25:32:7a:fb:19:c9:c6:23:db:2a:9f:60:94:ab:
         f5:54:83:b0:9f:1e:72:f7:34:42:f3:65:73:01:e4:3e:3a:eb:
         de:1d:c3:e9:ac:46:58:08:6b:7b:a5:d5:4f:5f:d3:b6:ce:37:
         d1:c5:93:3e:a7:74:40:19:db:a9:c4:bf:17:eb:1d:70:c9:45:
         0d:75:05:3a:d4:0a:70:8c:0a:0a:16:f9:b9:50:d3:5f:f9:db:
         51:26:10:1f:f2:b9:75:f7:47:97:7d:2a:66:9b:5a:2a:a2:45:
         18:ec:e8:cf:39:f3:30:50:c9:4e:88:67:17:be:1e:c1:5f:71:
         60:f4:18:82:e4:2e:1a:e7:c3:c5:06:ec:04:82:44:71:9e:38:
         d4:bc:f8:5d:62:f2:a8:64:a6:c6:c0:51:0f:81:c2:b6:6b:10:
         e7:f8:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org