Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dzTaPvV-bEES_kinSwiZEfH2rMM.roa
File:                     dzTaPvV-bEES_kinSwiZEfH2rMM.roa (raw, json)
Hash identifier:          ZzIr+uNHM8sfw5oHazTZUJkdVfHtQEimeJViSJrRMc8=
Subject key identifier:   77:34:DA:3E:F5:7E:6C:41:12:FE:48:A7:4B:08:99:11:F1:F6:AC:C3
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018892FF1B46E0CB9508A94F4CCD4EA3FD7A
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dzTaPvV-bEES_kinSwiZEfH2rMM.roa
Signing time:             Tue 06 Jun 2023 23:16:12 +0000
ROA not before:           Tue 06 Jun 2023 23:16:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208949
IP address blocks:        46.162.8.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Jul 2023 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:92:ff:1b:46:e0:cb:95:08:a9:4f:4c:cd:4e:a3:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  6 23:16:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7734da3ef57e6c4112fe48a74b089911f1f6acc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:1d:a5:4c:92:04:b7:51:b8:3f:f0:15:fe:
                    7e:87:79:c2:4b:89:0b:6e:a4:08:1b:14:93:74:98:
                    90:4c:cb:64:a7:40:c4:10:f4:1b:2e:5d:bd:6f:a0:
                    34:1f:b7:06:8e:a1:d8:e7:54:15:19:40:ce:17:85:
                    7d:7b:1b:cf:0e:e9:dd:02:2d:9d:33:11:0d:8d:ab:
                    27:6a:21:24:ad:80:2c:46:73:64:1a:20:8a:eb:ae:
                    09:d4:88:ee:74:10:af:7c:e1:b5:bd:2e:bb:87:08:
                    2f:be:fc:6d:1c:31:58:c8:97:d8:ae:f6:a7:16:99:
                    41:48:5c:a2:4b:5a:a7:42:95:13:85:ab:f7:51:9c:
                    29:f9:1c:56:59:65:c0:bd:e3:a7:c9:40:68:8d:72:
                    0b:f7:9a:13:15:75:1d:90:3c:54:0a:48:90:47:38:
                    cc:bf:a0:c7:7c:98:ed:a9:d7:de:a2:19:56:36:45:
                    ed:96:ae:90:a2:8b:70:0a:9e:91:5b:a2:90:c8:cd:
                    b7:7c:88:7b:0b:47:8c:bc:3d:ba:92:72:c0:a7:ff:
                    12:53:0c:8e:8e:d7:a8:1e:5a:6b:92:af:ab:04:77:
                    c7:99:de:06:1b:f7:21:b1:3e:72:0c:b0:dd:f6:7e:
                    15:56:d1:b5:32:85:8d:f7:c1:71:a9:e4:c5:3f:61:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:DA:3E:F5:7E:6C:41:12:FE:48:A7:4B:08:99:11:F1:F6:AC:C3
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dzTaPvV-bEES_kinSwiZEfH2rMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:14:8d:b5:9a:a1:2d:5a:fd:ab:1f:05:f9:f5:71:39:a3:d8:
         4f:70:9d:eb:b7:69:7b:57:85:d4:fa:3f:2a:2e:3a:b4:e1:c2:
         e2:88:0f:97:b0:e5:29:ab:9d:f2:cb:a0:4c:96:2c:bb:65:ba:
         e7:ed:ad:66:31:62:47:0d:df:5b:81:fe:5e:25:e3:c6:12:2d:
         a0:dc:b5:73:4b:67:58:dd:e2:75:67:66:61:66:4c:a9:38:89:
         4a:0e:3f:41:13:01:e3:ff:3b:8f:18:20:a0:f5:f5:25:70:4b:
         f6:79:95:62:39:80:40:05:83:27:72:68:d0:48:16:29:2e:a7:
         f3:85:8a:28:f6:f2:07:2a:55:6c:45:dc:44:4a:a5:d6:0e:f2:
         35:b6:f4:60:57:93:85:04:c2:86:e1:11:6c:3c:59:d4:bc:93:
         84:f5:c9:d8:71:dd:a1:36:5c:4d:51:50:58:86:a7:1e:f1:ab:
         0d:3f:60:9c:3e:34:ce:d1:03:6d:da:53:60:5d:06:fd:e0:a7:
         6f:57:cc:03:22:11:cc:c0:50:c6:c0:37:f5:12:75:56:62:b9:
         b7:b4:5e:3a:80:bb:fa:44:b3:5a:14:c1:a0:af:24:f4:c4:14:
         8a:fb:18:4f:16:4b:f9:f5:0b:48:1b:0f:02:98:c9:e0:90:86:
         a0:30:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org