Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kczZ3r2EmiN5eO9F0lU0pTyWCME.roa
File:                     kczZ3r2EmiN5eO9F0lU0pTyWCME.roa (raw, json)
Hash identifier:          MJYrhMyjkQtw7YKOw5i9n71eJ5ohZffGFjatSZo9WwU=
Subject key identifier:   91:CC:D9:DE:BD:84:9A:23:79:78:EF:45:D2:55:34:A5:3C:96:08:C1
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01862FCE877C4A87398002771060207C7257
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kczZ3r2EmiN5eO9F0lU0pTyWCME.roa
Signing time:             Wed 08 Feb 2023 06:55:09 +0000
ROA not before:           Wed 08 Feb 2023 06:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201364
IP address blocks:        46.162.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Jun 2023 08:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2f:ce:87:7c:4a:87:39:80:02:77:10:60:20:7c:72:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  8 06:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91ccd9debd849a237978ef45d25534a53c9608c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:66:0c:56:4d:01:81:b9:ca:11:da:00:47:
                    22:4f:33:21:f6:4b:c8:20:df:b4:b7:65:0f:40:95:
                    70:1c:9e:21:8d:33:01:b7:99:d3:6e:47:73:ce:c5:
                    ae:d5:11:72:a7:15:ca:fe:c3:0e:08:e1:68:34:31:
                    2f:8b:55:87:2f:31:33:3a:b5:1e:78:4b:8b:ca:62:
                    e5:a4:c7:af:55:e4:68:7d:34:aa:23:d8:f0:86:ee:
                    ea:b0:85:1b:6c:83:13:1b:7f:7c:de:c4:16:a4:2c:
                    c2:d3:78:b3:c4:ce:0f:9b:94:a4:e6:0e:86:88:69:
                    86:1c:9a:bf:1b:ad:07:b7:68:cd:19:fa:be:7c:4e:
                    10:da:09:6b:6d:56:79:7b:da:4e:5f:c7:22:fe:7b:
                    92:1c:a5:e9:15:ef:c9:0b:76:2e:bc:b1:a1:aa:49:
                    18:ac:81:96:f6:52:66:33:39:df:33:0e:ba:29:f4:
                    16:46:e3:02:b7:1e:f8:bf:1b:77:8c:5f:29:61:9a:
                    bf:07:01:84:db:9b:c4:79:89:8f:23:f7:12:34:32:
                    ff:4f:95:5f:cb:cf:f3:b4:55:ef:55:f9:92:6e:38:
                    91:43:8d:f3:0b:5a:b0:8d:46:e4:86:b6:3d:7a:f9:
                    ff:14:20:77:59:e2:03:35:b9:8a:4b:4c:70:91:35:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CC:D9:DE:BD:84:9A:23:79:78:EF:45:D2:55:34:A5:3C:96:08:C1
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kczZ3r2EmiN5eO9F0lU0pTyWCME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:80:b0:f4:c3:b5:1d:ee:c3:c5:0a:33:0d:83:bf:ce:60:69:
         59:12:53:cb:7b:44:51:f1:91:e5:bf:09:28:a0:84:73:27:24:
         c1:fd:2b:bb:0e:19:48:88:44:58:d0:18:b2:0a:0e:b5:bc:0e:
         95:5f:a1:7c:94:fd:13:1e:54:e5:84:a5:7c:27:ab:a4:28:62:
         24:2b:aa:14:85:d3:5a:b7:9b:1d:fc:d0:1b:31:3a:b2:fc:ab:
         6a:b2:d3:7a:b0:8d:0c:05:da:71:ea:71:5d:5d:5e:ce:8b:f0:
         c7:ad:41:66:24:19:a4:ac:50:a4:33:cc:26:c8:0a:7a:47:9c:
         36:be:63:74:e3:b1:a9:aa:56:c9:b3:a4:01:0a:df:64:88:05:
         ef:31:e5:d4:b7:e7:36:87:34:d6:df:31:5b:cb:9b:f4:3e:27:
         89:e7:00:2c:3a:98:e8:fc:cf:e4:96:22:38:ce:4b:72:af:0a:
         b2:c1:21:68:39:c6:36:ab:07:2e:3c:18:92:ba:25:69:ce:56:
         9a:ee:ac:71:83:54:95:3c:1b:f3:5e:d8:41:42:72:f1:ae:01:
         9a:98:06:93:75:e9:82:5a:6d:9a:d1:b9:b4:b7:f0:c3:fa:74:
         fb:24:0f:23:40:a3:f0:62:fb:7c:dd:70:61:0e:58:4b:01:92:
         fd:0e:43:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYvzod8Soc5gAJ3EGAgfHJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMjA4MDY1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWNjZDlkZWJkODQ5YTIzNzk3OGVmNDVkMjU1MzRhNTNjOTYwOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXhmDFZNAYG5yhHaAEciTzMh9kvI
IN+0t2UPQJVwHJ4hjTMBt5nTbkdzzsWu1RFypxXK/sMOCOFoNDEvi1WHLzEzOrUe
eEuLymLlpMevVeRofTSqI9jwhu7qsIUbbIMTG3983sQWpCzC03izxM4Pm5Sk5g6G
iGmGHJq/G60Ht2jNGfq+fE4Q2glrbVZ5e9pOX8ci/nuSHKXpFe/JC3YuvLGhqkkY
rIGW9lJmMznfMw66KfQWRuMCtx74vxt3jF8pYZq/BwGE25vEeYmPI/cSNDL/T5Vf
y8/ztFXvVfmSbjiRQ43zC1qwjUbkhrY9evn/FCB3WeIDNbmKS0xwkTV5rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHM2d69hJojeXjvRdJVNKU8lgjBMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEva2N6WjNyMkVtaU41ZU85RjBsVTBwVHlXQ01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqIzMA0G
CSqGSIb3DQEBCwUAA4IBAQA5gLD0w7Ud7sPFCjMNg7/OYGlZElPLe0RR8ZHlvwko
oIRzJyTB/Su7DhlIiERY0BiyCg61vA6VX6F8lP0THlTlhKV8J6ukKGIkK6oUhdNa
t5sd/NAbMTqy/KtqstN6sI0MBdpx6nFdXV7Oi/DHrUFmJBmkrFCkM8wmyAp6R5w2
vmN047GpqlbJs6QBCt9kiAXvMeXUt+c2hzTW3zFby5v0PieJ5wAsOpjo/M/kliI4
zktyrwqywSFoOcY2qwcuPBiSuiVpzlaa7qxxg1SVPBvzXthBQnLxrgGamAaTdemC
Wm2a0bm0t/DD+nT7JA8jQKPwYvt83XBhDlhLAZL9DkNt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org