Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jo6EDqq6J6CZNCkBWi2BHYXnqR4.roa
File:                     jo6EDqq6J6CZNCkBWi2BHYXnqR4.roa (raw, json)
Hash identifier:          xSoRYJMV4QmNoOxr3gw/3DrL4BdPTGDQTJxijcB3blM=
Subject key identifier:   8E:8E:84:0E:AA:BA:27:A0:99:34:29:01:5A:2D:81:1D:85:E7:A9:1E
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0188109E99968A9E9D566F320659E0333D61
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jo6EDqq6J6CZNCkBWi2BHYXnqR4.roa
Signing time:             Fri 12 May 2023 15:40:09 +0000
ROA not before:           Fri 12 May 2023 15:40:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        46.162.55.0/24 maxlen: 24
                          46.162.57.0/24 maxlen: 24
                          46.162.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Oct 2023 16:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:10:9e:99:96:8a:9e:9d:56:6f:32:06:59:e0:33:3d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: May 12 15:40:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e8e840eaaba27a0993429015a2d811d85e7a91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:6c:89:65:e8:a9:9f:61:01:a4:72:09:d5:
                    de:db:3b:78:c1:48:de:eb:ec:43:ed:b7:36:4c:dd:
                    d1:03:c7:ea:a5:35:98:63:0d:3a:a3:eb:19:53:3d:
                    c3:f4:1b:f1:ac:74:84:aa:3e:88:82:c1:66:ba:f9:
                    a0:3a:e3:60:f5:34:bf:72:4f:ab:44:7c:15:20:69:
                    5b:a9:60:f7:36:c0:9b:19:61:3a:b8:5b:ff:cc:74:
                    f4:c5:25:56:04:b2:95:db:4d:38:4e:32:87:7c:31:
                    c0:ce:5a:a7:63:5e:9f:49:c5:58:b0:ee:13:85:3e:
                    66:7a:34:f0:5f:f8:5b:58:8a:19:b7:2f:23:84:65:
                    ba:f9:11:f0:24:03:23:e5:ed:62:63:a4:8b:c3:9a:
                    44:cd:ba:8e:b3:5b:7a:5e:ea:d8:68:52:13:45:78:
                    54:26:1e:f3:a2:83:3e:ba:ab:6e:bd:98:13:96:84:
                    12:a9:ed:4e:3e:fa:03:00:38:80:21:5b:82:81:a3:
                    13:c9:3b:62:86:8d:ac:0b:10:b4:1a:27:4e:cf:08:
                    e5:82:8d:f2:98:fa:d6:a3:35:2e:16:44:d7:9a:1b:
                    0f:9f:41:1a:3d:19:9d:0b:c1:f4:bc:a6:96:c6:35:
                    c0:72:a5:1f:89:50:29:f4:6f:ad:5c:60:64:f3:44:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8E:84:0E:AA:BA:27:A0:99:34:29:01:5A:2D:81:1D:85:E7:A9:1E
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/jo6EDqq6J6CZNCkBWi2BHYXnqR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.55.0-46.162.57.255

    Signature Algorithm: sha256WithRSAEncryption
         94:92:a2:7c:51:27:12:2b:98:0e:dd:af:47:17:c5:32:9f:91:
         92:9e:d6:23:5a:e3:72:be:39:ab:da:a2:63:72:68:e8:d1:2d:
         c1:51:58:7b:2c:5d:10:d5:2b:a2:a7:29:28:7d:54:c2:24:df:
         a9:19:41:21:0f:01:81:02:3f:17:54:3d:41:40:56:ee:b5:de:
         5d:5d:e6:69:cf:16:c7:9e:15:48:5b:25:0d:86:b8:8f:2d:d1:
         e6:52:77:50:c9:d7:c1:df:b3:3f:6b:43:eb:67:85:25:f8:71:
         73:4b:dc:25:3c:86:1e:f8:46:60:ad:5c:90:8e:60:91:22:c8:
         58:47:f2:3c:2a:58:32:cb:db:8d:46:f3:3d:06:30:f3:74:d8:
         ae:e4:b5:2b:15:1f:04:21:2d:23:6f:7a:25:0b:b4:e4:a5:90:
         15:69:d0:10:1e:28:3a:8b:ab:ae:69:3a:1b:22:f0:e9:c1:19:
         4e:f6:a5:df:38:b9:59:c1:64:fe:66:cc:57:65:11:13:a8:59:
         d7:e4:7c:63:00:77:2f:c2:e1:54:22:32:b3:95:25:d9:76:dc:
         4c:73:82:2f:ee:cc:db:2a:60:a5:27:f9:e1:50:af:55:33:b3:
         f4:76:31:07:06:4b:23:ee:30:50:84:16:70:bc:c7:30:b6:bc:
         8c:49:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org