Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/eKBcREZYyglHCZL5oI7KsdqHVKM.roa
File:                     eKBcREZYyglHCZL5oI7KsdqHVKM.roa (raw, json)
Hash identifier:          khLJxs+AdzWdZrEYuj+jj/gRprwL5wq47896rNXxn8w=
Subject key identifier:   78:A0:5C:44:46:58:CA:09:47:09:92:F9:A0:8E:CA:B1:DA:87:54:A3
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0186C7EAB4E2AF5BF0959F3E707B22F9FF60
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/eKBcREZYyglHCZL5oI7KsdqHVKM.roa
Signing time:             Thu 09 Mar 2023 19:48:13 +0000
ROA not before:           Thu 09 Mar 2023 19:48:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207994
IP address blocks:        46.162.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 04 Nov 2023 11:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c7:ea:b4:e2:af:5b:f0:95:9f:3e:70:7b:22:f9:ff:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Mar  9 19:48:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78a05c444658ca09470992f9a08ecab1da8754a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:bf:04:80:8c:0a:d6:f8:bc:87:ef:1f:cf:
                    53:06:51:14:8d:33:17:9e:47:0b:14:bf:8d:8d:d5:
                    0a:d0:4e:f8:d2:83:ae:51:e4:bd:72:04:79:83:ab:
                    7a:6b:c0:4e:b7:b6:77:8e:77:03:33:8f:ba:d5:71:
                    75:d1:31:24:83:73:05:e0:83:6c:19:d6:73:b8:f4:
                    ac:89:2c:0f:8c:ca:1c:b3:04:fe:f8:ee:78:6c:1d:
                    e3:7f:2c:68:6c:4e:4e:2b:5e:7e:2d:67:7c:e6:7d:
                    30:ee:de:15:34:c1:03:ad:4d:a4:f2:e6:36:43:f3:
                    22:7b:5c:b9:fe:d8:e5:aa:b1:07:2d:a5:08:fc:d7:
                    c0:64:2a:2f:fb:3a:a8:88:e7:2e:ba:1c:bc:c5:f9:
                    1b:c0:34:7a:98:db:5c:05:97:ea:10:c0:62:6b:59:
                    ef:22:85:02:57:16:46:ce:aa:89:2c:5a:a7:25:79:
                    f0:a4:2c:90:5e:4f:47:f1:1f:db:2f:7e:b2:04:1b:
                    22:54:51:43:0e:09:0c:37:7a:6a:c7:92:76:14:51:
                    55:ca:ca:e5:ca:ec:f5:81:fb:37:b7:18:13:fe:24:
                    6c:c9:69:cf:3d:37:1e:0d:7d:10:b7:1b:fd:d1:ec:
                    0b:b2:8d:3c:bd:6c:84:77:2c:fe:e1:af:1f:95:e8:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A0:5C:44:46:58:CA:09:47:09:92:F9:A0:8E:CA:B1:DA:87:54:A3
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/eKBcREZYyglHCZL5oI7KsdqHVKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:03:1e:26:d9:8d:56:9e:65:e8:a8:db:4b:4e:a1:49:c2:
         34:52:93:60:81:82:0a:78:64:dd:34:ba:51:d9:5e:d5:c8:5b:
         7f:79:75:5e:9e:f3:46:7f:13:54:31:2f:b2:fb:a5:c5:42:fa:
         ee:74:e6:5c:14:82:f0:67:25:9f:71:86:96:f4:8e:20:3a:80:
         d1:5b:66:bb:ac:04:f5:c4:d2:f3:f7:54:a1:95:26:ec:ac:50:
         12:06:92:51:38:4b:b0:e2:ce:bf:c8:51:06:c2:fe:67:22:81:
         e9:e5:4f:63:16:4f:7a:82:c4:8e:7c:d2:f4:97:e4:c3:d7:a3:
         01:7f:23:12:4d:d7:80:11:22:1c:af:fc:62:1f:c7:e1:20:49:
         f2:34:5c:64:46:0a:76:30:4f:6b:b6:ce:b8:48:10:0d:c9:83:
         2b:ba:19:bb:3b:c5:df:5d:d9:10:7e:2a:26:71:64:f3:8c:56:
         30:c1:81:47:c1:06:f8:75:5a:be:77:6c:e6:08:86:84:84:e0:
         25:11:8d:b5:d4:dd:f8:05:07:3c:13:d4:f8:29:fa:a0:a6:a1:
         ad:6f:6b:bf:72:b1:67:cc:36:df:c4:ee:64:15:42:4c:39:27:
         9a:3f:9a:e5:b3:4e:90:7a:7b:1c:62:57:bc:5a:67:2a:a3:98:
         ed:55:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org