Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/YLL4tnL4BacpcS5sanl0r7LnpOw.roa
File:                     YLL4tnL4BacpcS5sanl0r7LnpOw.roa (raw, json)
Hash identifier:          3vcy6t5Oj2rtvRgEYX0pz44WwhISL0iLuALdY3xmxCI=
Subject key identifier:   60:B2:F8:B6:72:F8:05:A7:29:71:2E:6C:6A:79:74:AF:B2:E7:A4:EC
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018804713A84BA0D79673EDF9FA089B880DA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/YLL4tnL4BacpcS5sanl0r7LnpOw.roa
Signing time:             Wed 10 May 2023 06:55:09 +0000
ROA not before:           Wed 10 May 2023 06:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     4834
IP address blocks:        46.162.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 May 2023 09:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:04:71:3a:84:ba:0d:79:67:3e:df:9f:a0:89:b8:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: May 10 06:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=60b2f8b672f805a729712e6c6a7974afb2e7a4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f4:db:ed:a0:71:82:73:60:ac:bb:42:27:b3:
                    8a:61:11:13:60:a3:60:42:2e:13:18:ab:62:8d:ab:
                    f8:6c:ed:97:c1:93:cd:eb:3e:4e:48:57:0d:f5:86:
                    4c:4f:62:8f:d8:6b:b0:cc:ee:91:04:7d:fd:16:02:
                    f1:ad:d2:ff:bf:41:c5:8a:dc:fc:86:d3:c3:b5:cc:
                    66:f7:33:61:c8:68:d3:72:45:cd:f5:50:e7:a2:12:
                    ff:21:5b:8e:0f:9b:24:d9:29:97:1f:ba:b4:f1:72:
                    6b:1e:dd:d4:d9:e9:2e:48:14:8e:4e:72:a2:47:a5:
                    4e:b2:81:86:82:82:2a:d8:9e:f2:15:97:cb:2c:7e:
                    78:d5:a9:69:5e:1c:79:de:d6:c8:8b:9e:1e:f8:7b:
                    7d:85:71:71:c0:a8:a1:3c:c9:e7:47:94:d8:5c:81:
                    8a:0c:0e:0b:6a:1e:82:25:57:da:fd:ed:23:9d:2a:
                    19:ff:42:27:a1:08:08:de:a9:49:18:83:98:36:0f:
                    d9:1c:a1:d4:0a:d0:4c:f2:38:84:c1:3a:02:3a:1e:
                    9b:4f:aa:5f:9e:56:89:5e:3d:4c:13:74:b4:4d:55:
                    a9:a8:73:f7:3c:2c:73:2e:91:49:e7:0c:d3:02:8f:
                    22:8c:2e:d0:25:c8:75:ed:93:83:3a:47:ce:e3:d1:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B2:F8:B6:72:F8:05:A7:29:71:2E:6C:6A:79:74:AF:B2:E7:A4:EC
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/YLL4tnL4BacpcS5sanl0r7LnpOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:7e:9e:03:15:0e:d9:82:45:cb:51:cc:c9:f3:ce:5e:fc:4d:
         44:ef:ff:e1:36:33:31:a4:83:66:fd:92:b9:01:90:77:3e:2c:
         df:dd:57:bd:16:d6:33:b9:78:34:59:80:4a:ad:a3:ec:73:a9:
         49:a8:54:51:50:92:8f:5d:72:e0:30:5a:ca:bf:6c:f7:8e:1c:
         5a:bf:5f:c1:67:5f:8d:20:b1:61:4e:36:57:9f:8c:b8:1c:a2:
         00:1a:f0:d6:8d:45:6d:51:04:83:c6:e1:8e:56:09:8f:65:8f:
         11:be:16:a1:fc:bd:25:38:4b:03:85:78:c1:6d:c1:d2:93:6c:
         25:7d:cf:8e:45:e4:43:9a:6a:5a:1d:fb:92:5a:14:9c:aa:63:
         84:55:9d:01:94:70:0b:46:47:c7:89:6a:a8:6b:df:49:db:68:
         a2:10:86:3f:c3:a1:52:d5:3a:a1:56:e8:be:da:f2:6a:cd:96:
         d8:26:4f:84:20:3f:45:76:35:ee:04:c7:ff:59:1f:16:a0:43:
         9e:df:09:bd:d4:ff:99:b7:c5:3b:cc:e5:ae:e8:34:6d:a4:61:
         78:7e:b1:98:95:24:ca:2b:3d:91:19:18:12:88:e9:1d:43:07:
         ea:28:3f:83:a4:2f:2b:2a:da:7e:8a:e8:b0:5c:09:5f:45:92:
         03:a5:4a:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgEcTqEug15Zz7fn6CJuIDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTEwMDY1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGIyZjhiNjcyZjgwNWE3Mjk3MTJlNmM2YTc5NzRhZmIyZTdhNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fTb7aBxgnNgrLtCJ7OKYRETYKNg
Qi4TGKtijav4bO2XwZPN6z5OSFcN9YZMT2KP2GuwzO6RBH39FgLxrdL/v0HFitz8
htPDtcxm9zNhyGjTckXN9VDnohL/IVuOD5sk2SmXH7q08XJrHt3U2ekuSBSOTnKi
R6VOsoGGgoIq2J7yFZfLLH541alpXhx53tbIi54e+Ht9hXFxwKihPMnnR5TYXIGK
DA4Lah6CJVfa/e0jnSoZ/0InoQgI3qlJGIOYNg/ZHKHUCtBM8jiEwToCOh6bT6pf
nlaJXj1ME3S0TVWpqHP3PCxzLpFJ5wzTAo8ijC7QJch17ZODOkfO49HxYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGCy+LZy+AWnKXEubGp5dK+y56TsMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvWUxMNHRuTDRCYWNwY1M1c2FubDByN0xucE93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqI3MA0G
CSqGSIb3DQEBCwUAA4IBAQAJfp4DFQ7ZgkXLUczJ885e/E1E7//hNjMxpINm/ZK5
AZB3Pizf3Ve9FtYzuXg0WYBKraPsc6lJqFRRUJKPXXLgMFrKv2z3jhxav1/BZ1+N
ILFhTjZXn4y4HKIAGvDWjUVtUQSDxuGOVgmPZY8Rvhah/L0lOEsDhXjBbcHSk2wl
fc+OReRDmmpaHfuSWhScqmOEVZ0BlHALRkfHiWqoa99J22iiEIY/w6FS1TqhVui+
2vJqzZbYJk+EID9FdjXuBMf/WR8WoEOe3wm91P+Zt8U7zOWu6DRtpGF4frGYlSTK
Kz2RGRgSiOkdQwfqKD+DpC8rKtp+iuiwXAlfRZIDpUoS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org