Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa
File:                     ea3Zi3_yEoPaQaS_gzrimH4nmak.roa (raw, json)
Hash identifier:          MOQcNqkIi3teLwF9zIteBf+XJ7zq+F9MpYpmlbLfovE=
Subject key identifier:   79:AD:D9:8B:7F:F2:12:83:DA:41:A4:BF:83:3A:E2:98:7E:27:99:A9
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01893566B412F26D98EE2E547E63F58B30F5
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa
Signing time:             Sat 08 Jul 2023 12:07:50 +0000
ROA not before:           Sat 08 Jul 2023 12:07:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        46.162.8.0/24 maxlen: 24
                          46.162.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jul 2023 10:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:35:66:b4:12:f2:6d:98:ee:2e:54:7e:63:f5:8b:30:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jul  8 12:07:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79add98b7ff21283da41a4bf833ae2987e2799a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:b0:a8:05:eb:51:b6:87:e2:d8:37:9e:e1:
                    18:4c:46:64:da:04:96:d7:94:cd:98:e5:19:ec:48:
                    40:c8:34:b2:bf:f0:20:af:7b:6f:6b:c1:82:6d:6a:
                    c4:d4:d3:19:46:01:4d:02:56:cf:ac:97:82:a4:ac:
                    10:f1:be:d4:6c:9f:fc:7e:2b:ae:28:8f:18:fb:20:
                    85:73:ab:02:36:f2:ce:3f:2c:fe:b7:87:c4:5d:22:
                    c5:13:52:24:36:c2:0d:fe:ff:2c:79:d7:dd:c8:1f:
                    82:44:d5:20:1f:22:15:e5:71:ef:8c:77:5c:06:13:
                    39:b7:fb:59:c6:20:22:6c:8f:94:44:0f:1d:ad:af:
                    aa:e7:86:7c:ad:b5:c4:ac:33:49:42:57:ae:af:a4:
                    1d:b2:62:49:4e:ab:46:10:36:7c:c9:5a:33:35:7e:
                    d4:65:db:e6:62:37:9d:e6:9b:b6:43:5d:8d:85:ee:
                    d6:7b:63:b3:54:a5:e5:c1:05:53:18:f3:52:28:e9:
                    12:8c:c1:3f:8e:f8:b5:17:46:1a:09:5d:9e:69:58:
                    9b:05:bb:d0:f6:4e:e9:47:d5:b2:80:f8:3b:64:a3:
                    26:8b:f4:b5:0c:1d:08:1f:d0:bc:d5:97:e2:f5:56:
                    cd:0f:63:42:1b:2f:8e:3c:70:b9:07:0e:4a:0d:56:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:D9:8B:7F:F2:12:83:DA:41:A4:BF:83:3A:E2:98:7E:27:99:A9
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.8.0/24
                  46.162.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:83:69:f7:b8:35:93:8a:e2:d7:be:b7:21:40:f1:88:09:55:
         9a:74:a1:b6:1d:cd:43:ea:5a:c5:6e:24:bf:b2:7c:c9:f7:62:
         a0:00:1c:67:3b:05:7a:f4:fc:68:b5:ed:fe:4c:1f:e8:37:d3:
         88:f5:f5:b9:77:46:d9:e5:cf:63:a7:9c:f4:68:77:b0:8e:0c:
         fb:f1:25:47:36:65:bf:7f:59:50:f7:4c:69:77:fc:63:71:5c:
         2c:90:e1:bc:7a:0c:25:84:ea:cd:36:c2:ce:02:6d:44:f2:df:
         a4:77:3c:91:f6:b4:47:a6:04:17:70:39:fc:26:dd:dd:45:03:
         b4:f5:41:25:fd:44:95:98:1b:40:a8:04:3c:6e:21:42:4d:3d:
         e4:79:7f:24:a7:51:2d:8c:8b:35:4d:65:f2:78:df:34:c4:cc:
         48:70:af:f4:40:e2:69:a5:da:bb:53:c4:8d:62:ac:a7:73:38:
         62:f6:f6:c0:f5:d3:47:0e:3b:40:a1:f6:59:49:6d:7c:8e:c6:
         3e:a5:c6:5a:d8:4a:9d:2d:94:dd:a3:11:b2:eb:f3:ec:a7:af:
         01:89:b7:21:ca:77:15:06:49:a9:1b:a6:2b:22:64:1b:e5:94:
         7b:3f:30:55:9f:b4:12:3a:9a:3d:00:fe:d9:e0:c3:95:9a:9e:
         64:2a:33:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org