Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jWb0WShrqm5bNEXZlxE46lOGiUw.roa
File:                     jWb0WShrqm5bNEXZlxE46lOGiUw.roa (raw, json)
Hash identifier:          nqVugl64q9zfyU90Iw7zfQlr7JJmDUkOXkFtkTsrwsg=
Subject key identifier:   8D:66:F4:59:28:6B:AA:6E:5B:34:45:D9:97:11:38:EA:53:86:89:4C
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018636E6EB13BCE10946DB294776FF47B2BE
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jWb0WShrqm5bNEXZlxE46lOGiUw.roa
Signing time:             Thu 09 Feb 2023 15:59:08 +0000
ROA not before:           Thu 09 Feb 2023 15:59:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        46.162.54.0/24 maxlen: 24
                          46.162.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 06:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:e6:eb:13:bc:e1:09:46:db:29:47:76:ff:47:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  9 15:59:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d66f459286baa6e5b3445d9971138ea5386894c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:13:72:00:d0:99:d0:44:9a:89:d0:67:0f:
                    25:a5:1c:d4:34:23:1d:4c:fc:e4:56:b3:0a:40:ef:
                    22:a7:f9:c3:ea:28:93:8a:17:06:a5:37:8d:aa:dd:
                    d3:35:f3:8f:5a:c9:78:8e:79:e7:04:be:ee:cd:b0:
                    1c:d6:69:3a:db:eb:1f:58:91:d6:6b:8f:0f:e9:9a:
                    f9:f7:36:3b:10:0a:5f:68:1e:28:ed:8f:3d:b3:4c:
                    3a:49:f3:80:1f:4b:a0:4a:a0:45:36:59:77:b9:f1:
                    8c:7e:ec:9e:bb:5a:5c:94:65:73:be:a5:00:18:8b:
                    15:12:af:5e:f7:66:84:1f:a0:bc:97:72:ed:77:f8:
                    ff:56:49:e0:be:90:ae:04:50:97:ce:5b:cc:0b:2d:
                    25:bf:4e:c9:ad:c9:1c:3d:ed:bf:62:73:ad:12:9c:
                    11:c8:d0:26:6b:dc:cd:90:ee:74:3f:ae:34:43:40:
                    ca:c6:f9:c9:1e:38:45:bf:63:31:e7:c6:e8:fd:f2:
                    7b:1b:fc:db:7a:7e:c5:84:e1:64:2b:cd:a6:95:47:
                    fc:db:c7:db:98:10:dd:63:59:fc:86:9e:1b:7b:a7:
                    31:10:58:3e:52:5b:80:58:c4:da:90:39:57:75:f6:
                    88:ea:07:28:31:d2:9d:d8:40:a1:a9:e7:2d:f6:8d:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:F4:59:28:6B:AA:6E:5B:34:45:D9:97:11:38:EA:53:86:89:4C
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jWb0WShrqm5bNEXZlxE46lOGiUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.54.0/24
                  46.162.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fa:fe:21:4b:cb:34:bc:8d:78:36:5a:36:a9:e8:3c:18:b8:
         ac:1e:db:86:d9:e1:f0:57:87:5f:b3:b0:fb:ab:b2:10:b3:b3:
         21:27:71:01:94:6b:e0:54:6f:85:58:5a:a1:cc:f8:7b:5e:d9:
         af:8d:c7:e0:d6:03:a1:fe:aa:d5:48:04:95:18:00:9d:4b:dd:
         1f:75:29:3d:8a:48:35:fe:e2:4f:90:48:e1:9f:7d:90:7e:25:
         84:9f:76:68:ab:20:97:59:d3:ea:42:6a:31:23:f9:dd:cd:74:
         0c:fc:4e:7f:e3:fb:d8:6c:0e:00:d3:0d:cf:af:3c:f9:f2:1e:
         4f:d6:67:92:2c:e1:33:e0:51:e4:05:12:c8:08:42:30:35:92:
         60:62:5b:c5:da:e3:91:e3:55:77:6d:56:91:f6:df:0c:af:1e:
         60:5e:33:72:fe:c2:1f:97:5c:35:e0:ef:b9:16:da:ff:87:0f:
         49:8a:8c:b7:f8:11:98:15:47:7b:d2:cf:56:36:32:17:94:b4:
         d8:e4:0d:95:e6:e8:a2:0c:82:bf:bf:8a:30:f9:f6:15:14:06:
         66:56:1f:84:92:f6:51:3e:63:9c:2d:bd:fa:48:ab:db:8e:c1:
         14:f3:04:dc:52:7c:5f:33:c8:3e:3a:f6:f7:70:0e:c7:4d:4f:
         06:bc:7a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org