Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gvh1fpf49idg7X6iIeB-rLy2xFo.roa
File:                     gvh1fpf49idg7X6iIeB-rLy2xFo.roa (raw, json)
Hash identifier:          K63YqQOyvinVSl+KbP4pAGrgBPpK+eAiE9tjop2t2qc=
Subject key identifier:   82:F8:75:7E:97:F8:F6:27:60:ED:7E:A2:21:E0:7E:AC:BC:B6:C4:5A
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018881FB09A4FB4CA14FB874A5E214FF763E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gvh1fpf49idg7X6iIeB-rLy2xFo.roa
Signing time:             Sat 03 Jun 2023 15:58:12 +0000
ROA not before:           Sat 03 Jun 2023 15:58:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        46.162.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 19:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:81:fb:09:a4:fb:4c:a1:4f:b8:74:a5:e2:14:ff:76:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  3 15:58:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=82f8757e97f8f62760ed7ea221e07eacbcb6c45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:bf:eb:04:2f:dd:2c:39:12:21:09:1c:e5:d8:
                    ea:39:e2:f8:1a:ec:c5:ff:d4:ec:09:d4:2a:03:32:
                    a9:34:42:82:74:70:28:06:67:cb:f4:3b:5c:e6:db:
                    20:86:3f:14:fa:e6:40:56:65:dd:bf:c0:f8:3e:ef:
                    3d:64:48:cf:13:38:a6:98:94:07:d2:18:20:eb:1c:
                    11:52:7f:bb:c3:30:e1:d2:27:41:a5:3e:c9:1b:80:
                    42:d5:e4:dc:3f:5a:be:b2:77:4a:a1:9f:60:f5:80:
                    5d:e8:9c:3c:af:e6:82:1f:50:e1:e0:15:f3:f4:12:
                    a7:57:6e:d6:68:cc:53:12:ea:ad:a2:8a:c0:92:c5:
                    1d:a5:02:7e:5e:1f:d7:c5:b7:13:7f:21:03:22:eb:
                    60:03:d6:42:d9:c4:0b:40:f5:d7:4b:17:40:01:a9:
                    e6:7e:50:7b:a1:9c:12:8b:bf:9f:94:21:f2:f0:d5:
                    4d:e4:ed:64:a6:a5:da:28:66:4e:23:00:75:9c:e8:
                    51:36:47:da:54:b9:f2:1e:67:85:f4:d3:14:98:25:
                    5c:61:f3:f5:f4:47:b9:84:ef:72:e0:ed:ab:1f:af:
                    ef:93:5f:43:bd:ac:d6:ec:33:06:7b:fe:5b:38:c3:
                    da:0b:5b:10:de:55:72:96:3b:c0:74:45:87:92:7f:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F8:75:7E:97:F8:F6:27:60:ED:7E:A2:21:E0:7E:AC:BC:B6:C4:5A
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gvh1fpf49idg7X6iIeB-rLy2xFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:73:6e:d5:46:4d:b8:79:b2:be:a6:90:28:f7:78:4c:e2:74:
         20:c3:89:84:8a:d2:ae:97:3d:ce:1a:bc:3e:14:c0:95:ff:c0:
         6c:ea:cf:ac:f6:3b:dc:3a:82:45:14:ca:d7:2b:6f:24:36:41:
         c8:cb:da:b8:2f:b6:6e:4c:9d:8d:cd:c1:2c:6e:f0:81:86:c4:
         06:8a:bb:d3:e2:6e:21:b9:d2:54:7b:77:b3:1d:66:11:9f:67:
         42:58:48:29:0d:7f:71:1b:43:19:08:a4:15:2c:0b:e4:c4:cf:
         44:cc:37:ea:b3:5c:da:a6:21:2a:19:55:c3:4f:5f:99:bd:04:
         f1:58:d8:e1:52:48:1c:60:76:cf:85:4c:27:39:9e:11:f3:8b:
         8d:96:d2:5e:bc:87:46:84:4b:c4:03:0e:a1:f4:5b:a6:4e:fe:
         6a:f2:31:85:db:3e:27:72:2a:00:54:d3:25:71:2f:26:54:9e:
         b8:a4:21:48:18:62:1c:8a:95:1b:fe:57:54:07:35:e3:6e:1a:
         68:2c:67:74:4d:2d:e1:15:0d:6b:cb:64:de:a1:56:ff:88:95:
         f1:81:58:4a:04:30:5c:e9:62:54:d7:89:8a:a5:7f:9a:c2:15:
         54:d1:45:47:c1:60:d0:b7:29:bd:26:4f:5d:4a:23:0b:7e:29:
         80:3f:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org