Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/egWBE6eGs6J5mtEwC72TT0RwD9w.roa
File:                     egWBE6eGs6J5mtEwC72TT0RwD9w.roa (raw, json)
Hash identifier:          EzZ33NxYpb0bnh5MjqlqbEftfHQ7eULb67N53j3V6pw=
Subject key identifier:   7A:05:81:13:A7:86:B3:A2:79:9A:D1:30:0B:BD:93:4F:44:70:0F:DC
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018B24C24F4B906508BC4ECB3D508751513A
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/egWBE6eGs6J5mtEwC72TT0RwD9w.roa
Signing time:             Thu 12 Oct 2023 16:39:55 +0000
ROA not before:           Thu 12 Oct 2023 16:39:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.162.3.0/24 maxlen: 24
                          46.162.0.0/24 maxlen: 24
                          46.162.8.0/24 maxlen: 24
                          46.162.9.0/24 maxlen: 24
                          46.162.10.0/23 maxlen: 24
                          46.162.10.0/24 maxlen: 24
                          46.162.11.0/24 maxlen: 24
                          46.162.15.0/24 maxlen: 24
                          46.162.12.0/24 maxlen: 24
                          46.162.13.0/24 maxlen: 24
                          46.162.14.0/24 maxlen: 24
                          46.162.18.0/24 maxlen: 24
                          46.162.22.0/24 maxlen: 24
                          46.162.23.0/24 maxlen: 24
                          46.162.20.0/24 maxlen: 24
                          46.162.21.0/24 maxlen: 24
                          46.162.26.0/24 maxlen: 24
                          46.162.32.0/24 maxlen: 24
                          46.162.50.0/24 maxlen: 24
                          46.162.51.0/24 maxlen: 24
                          46.162.48.0/24 maxlen: 24
                          46.162.49.0/24 maxlen: 24
                          46.162.52.0/23 maxlen: 24
                          46.162.57.0/24 maxlen: 24
                          46.162.55.0/24 maxlen: 24
                          46.162.56.0/24 maxlen: 24
                          46.162.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Oct 2023 09:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:24:c2:4f:4b:90:65:08:bc:4e:cb:3d:50:87:51:51:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Oct 12 16:39:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a058113a786b3a2799ad1300bbd934f44700fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c3:cc:12:02:be:41:f1:75:97:93:b3:da:41:
                    03:fe:02:0a:29:5c:5e:a2:9f:3e:ba:9e:db:9c:87:
                    e3:f1:b2:0d:a2:d9:b1:de:d4:5d:22:5b:04:84:d2:
                    63:05:d3:a4:4c:44:f1:87:9c:dc:5e:1f:74:6c:27:
                    aa:f6:2e:f6:6c:e1:9b:fd:60:8c:c6:22:27:13:c5:
                    e1:2b:56:b6:d6:8d:b2:22:7c:18:6a:dd:a0:af:98:
                    ae:9a:57:eb:1b:e4:71:a6:7c:10:6a:f1:84:d4:6c:
                    f6:e6:c3:39:75:99:84:4d:9f:49:66:6e:44:bc:d3:
                    07:24:72:f8:84:62:9c:fd:2d:7f:fd:94:eb:01:0e:
                    e4:17:2d:3a:c5:33:6b:a9:d1:9b:29:43:9f:40:8f:
                    78:15:22:8e:95:13:7b:af:87:52:88:a6:18:8d:25:
                    db:9a:7e:71:1b:ff:81:c4:30:8f:4f:11:3b:f7:a6:
                    a4:76:b4:28:46:d9:ac:d0:4c:d2:64:e8:e5:f0:09:
                    a7:93:16:35:c6:13:3f:6b:67:b2:1d:47:31:b8:b5:
                    83:45:76:bd:7a:e4:72:85:e6:ba:ec:53:47:7e:84:
                    cd:a4:d6:b2:4c:c6:1a:39:4f:58:99:6f:74:64:6b:
                    2b:e5:b1:8c:f6:c7:2b:6e:9f:a6:6c:8a:41:48:a0:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:05:81:13:A7:86:B3:A2:79:9A:D1:30:0B:BD:93:4F:44:70:0F:DC
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/egWBE6eGs6J5mtEwC72TT0RwD9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.0.0/24
                  46.162.3.0/24
                  46.162.8.0/21
                  46.162.18.0/24
                  46.162.20.0/22
                  46.162.26.0/24
                  46.162.32.0/24
                  46.162.48.0-46.162.53.255
                  46.162.55.0-46.162.57.255
                  46.162.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:a7:ac:1a:2f:5f:4f:8a:cb:02:72:41:af:b7:0e:54:44:
         34:3d:60:0d:45:d0:70:68:13:2d:48:42:ee:2c:39:ae:1e:3e:
         d4:64:4e:1b:b7:31:29:18:6d:93:37:8c:d6:5e:05:ad:83:4f:
         4d:1a:8b:7f:77:db:e5:a7:ff:c9:48:be:95:e5:4c:65:56:3b:
         22:e1:87:53:8f:be:ab:34:ab:07:e3:45:38:8b:aa:1a:47:bd:
         19:03:a0:c9:3d:ce:38:9e:66:be:cb:6a:a9:60:63:cf:fc:a0:
         c8:b2:94:c5:3c:63:74:0d:90:94:dc:7a:73:22:12:f5:0a:7c:
         57:54:fe:42:46:d0:40:59:97:e8:f1:5f:d5:8e:21:2c:d2:16:
         85:ee:7c:7c:ab:e1:d4:b2:c3:5f:85:31:3b:16:73:bd:9a:d8:
         1c:1f:fd:94:17:4e:6e:f1:a2:66:28:87:8c:93:f0:a2:76:93:
         f0:30:a5:36:cf:5e:e3:36:34:95:9a:16:c4:ec:59:0c:93:1b:
         7e:cc:e2:95:b8:88:a2:09:0c:20:9b:2f:02:d5:d4:a4:1e:dc:
         ea:36:70:fd:ec:10:65:af:63:96:37:12:6e:98:55:98:e4:86:
         71:2c:d0:b9:18:2e:70:aa:a5:9c:be:9a:8f:16:4c:79:e7:84:
         49:ae:be:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org