Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sJ7OIo8iwOlS9WfMoebsPe0zEQE.roa
File:                     sJ7OIo8iwOlS9WfMoebsPe0zEQE.roa (raw, json)
Hash identifier:          Ke8+zvy3JTn5d5hoFImJPGwNn4Tkp19C2vybqU5d/6M=
Subject key identifier:   B0:9E:CE:22:8F:22:C0:E9:52:F5:67:CC:A1:E6:EC:3D:ED:33:11:01
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0186380FD4BEACFD84D71B51C8E85F6740EF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sJ7OIo8iwOlS9WfMoebsPe0zEQE.roa
Signing time:             Thu 09 Feb 2023 21:23:27 +0000
ROA not before:           Thu 09 Feb 2023 21:23:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208498
IP address blocks:        46.162.57.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Feb 2023 14:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:38:0f:d4:be:ac:fd:84:d7:1b:51:c8:e8:5f:67:40:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Feb  9 21:23:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b09ece228f22c0e952f567cca1e6ec3ded331101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4e:35:e3:47:61:85:20:61:51:88:b5:07:4b:
                    83:ca:0e:e3:1b:98:d9:a1:48:e6:c5:20:66:1a:ad:
                    2f:ef:06:b1:29:45:57:10:4f:83:6b:d7:49:0e:d0:
                    c4:4f:e1:c2:36:5a:47:27:30:fb:29:34:62:69:93:
                    aa:1d:e2:f3:99:55:3c:6f:ae:16:e5:67:84:54:22:
                    27:45:a5:ff:15:7c:83:ec:de:df:16:be:4a:2f:1a:
                    ba:f2:59:4b:c3:39:23:f4:88:1e:de:ff:e7:3f:79:
                    c1:25:e4:fc:14:0b:06:c2:0d:6d:9a:9a:7f:1f:d2:
                    1b:1e:5c:7e:29:2d:69:d2:64:d4:0c:e7:95:3f:cc:
                    61:05:7e:76:7d:e5:9a:12:9b:54:a1:27:62:a4:4c:
                    9e:b8:21:e4:86:83:d4:22:50:25:c0:1c:c0:5c:3e:
                    1f:85:fa:9d:8e:8b:59:14:f7:67:5c:74:ae:40:c9:
                    2b:49:2c:c3:3d:96:8c:eb:50:48:d6:3a:6f:47:e2:
                    32:32:e5:f4:94:5d:c0:67:d0:00:84:22:c7:fc:29:
                    28:8a:94:2a:e1:a9:c2:c9:53:48:21:87:ee:71:56:
                    6d:1c:c3:de:fc:70:99:28:7f:9f:7d:01:22:bf:0d:
                    01:b6:ff:5a:c4:6f:fa:d8:04:55:7a:25:f0:ce:ea:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9E:CE:22:8F:22:C0:E9:52:F5:67:CC:A1:E6:EC:3D:ED:33:11:01
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sJ7OIo8iwOlS9WfMoebsPe0zEQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:13:16:b6:a9:df:05:67:3a:d2:f2:8f:e6:e1:62:e8:18:
         7b:ab:c1:42:49:58:2c:7c:de:d7:a7:a3:29:c3:50:56:8c:e2:
         63:93:2b:8b:2a:ff:ca:43:34:0e:da:59:4e:a2:6c:2c:ee:bd:
         71:71:67:02:32:76:e7:20:ee:26:19:bd:32:ff:40:d1:74:d5:
         fe:5a:3b:f1:d2:52:1e:3b:43:6f:b1:07:69:00:a3:7c:8e:aa:
         21:68:1b:78:1f:42:29:14:7f:eb:5b:b7:ae:f8:57:f7:48:8b:
         ce:53:e5:a9:ac:f7:b6:ef:df:29:51:eb:a8:24:a0:58:eb:f2:
         f0:e3:0d:72:1e:02:a1:b8:ef:58:bd:84:95:15:d7:d3:ad:42:
         27:f3:52:8e:35:23:00:88:83:7d:b4:a2:af:c6:60:d4:d2:5d:
         a7:28:6b:01:04:eb:cd:75:59:31:f5:5f:58:e5:e9:2c:ec:e9:
         98:d5:2d:42:89:d2:57:af:a6:1c:33:da:e1:c5:e3:e5:02:9d:
         ae:36:87:92:e5:3f:5a:57:71:b5:e9:19:90:8e:a5:ee:70:c6:
         c5:da:b7:4d:90:2c:9c:c4:5c:9e:16:e5:7c:55:e9:59:42:55:
         17:a9:c3:8c:51:83:92:c7:0d:36:28:ea:25:c4:23:d3:ad:f4:
         8b:ba:7c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org