Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa
File:                     vnGeJJT-r-ZIigoqD66H_2IZEH4.roa (raw, json)
Hash identifier:          s04p/R71eBi4VS2LV80wZFkfkClGTqg6sFU4nItIEBc=
Subject key identifier:   BE:71:9E:24:94:FE:AF:E6:48:8A:0A:2A:0F:AE:87:FF:62:19:10:7E
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       01887DCAF1534D2AFA85EBD8E7DC7E391EBA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa
Signing time:             Fri 02 Jun 2023 20:27:12 +0000
ROA not before:           Fri 02 Jun 2023 20:27:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        46.162.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Jul 2023 16:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7d:ca:f1:53:4d:2a:fa:85:eb:d8:e7:dc:7e:39:1e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun  2 20:27:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be719e2494feafe6488a0a2a0fae87ff6219107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:ca:33:c5:a4:27:6d:ae:c2:cf:66:df:5f:
                    8d:47:96:e2:f7:4a:94:46:40:83:3f:d8:a6:79:cc:
                    19:24:91:d7:be:b1:99:6d:e0:08:02:ad:77:46:12:
                    15:65:72:9e:2e:ab:05:35:b3:ec:d3:a0:24:cc:dc:
                    f7:2d:cd:7c:11:1d:f5:00:41:f9:18:d9:2f:d0:66:
                    a2:65:91:d1:fa:bd:de:fa:74:fd:3f:c0:57:28:e1:
                    47:fd:e2:f9:68:28:48:61:15:21:d7:29:01:22:e3:
                    3f:79:bf:30:6a:1a:9b:67:e3:05:6d:b0:23:74:cf:
                    de:b7:71:81:69:94:70:e0:e5:a1:86:71:33:bf:26:
                    7d:4e:9d:1c:e3:98:91:58:7f:64:05:3b:7a:c7:72:
                    04:b3:4a:68:b7:04:95:bf:af:fe:8e:1d:f9:6e:f2:
                    67:25:f6:98:87:7e:b4:2f:5b:30:97:15:2b:4e:30:
                    de:41:cb:79:3f:e4:18:84:b3:7c:a2:f7:5a:a1:9a:
                    17:e5:ea:1d:14:ff:bb:c1:52:f5:e3:10:53:93:5e:
                    a4:3c:73:db:f6:ec:a2:cc:0c:00:40:d8:00:d1:65:
                    58:c4:0f:74:67:77:48:c8:70:3a:4e:75:62:9a:26:
                    9a:cf:1f:46:d5:aa:5f:87:79:69:4e:1c:ab:5a:32:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:9E:24:94:FE:AF:E6:48:8A:0A:2A:0F:AE:87:FF:62:19:10:7E
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vnGeJJT-r-ZIigoqD66H_2IZEH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:31:2b:a0:1d:cf:09:e4:2b:a2:f4:48:ef:25:ed:ad:f2:bf:
         0b:0f:9d:1e:11:8d:cc:64:b6:49:85:e2:4b:70:8d:39:67:a2:
         ad:12:ba:80:9b:f8:c6:60:e1:2f:86:a5:b6:41:a6:51:9e:c9:
         0d:da:29:eb:f7:72:cd:87:64:1c:00:91:87:22:2c:d0:2c:11:
         fc:0c:1c:f7:e3:b6:f4:8e:6c:e6:a8:2a:d8:b7:b5:56:f0:3b:
         25:56:ae:1f:2c:38:86:56:81:c4:a3:10:ee:a6:81:de:8c:e7:
         f4:90:2a:d1:5f:e1:bd:3c:4e:f3:e6:07:c2:b0:f9:ab:79:91:
         91:64:36:53:6f:92:e4:9a:2f:e5:f5:4f:c4:7b:1f:94:7e:7b:
         8b:65:93:30:6a:82:17:cc:ae:f5:1e:fd:5d:fd:e8:ea:68:62:
         9b:23:4c:93:a1:73:3e:01:a6:eb:33:a8:e1:ac:ab:1b:b0:d4:
         07:a1:62:f4:0a:50:95:3a:c4:c5:72:fc:b6:bc:87:5e:b1:68:
         e6:15:84:80:66:c3:e6:f5:d3:ae:f8:00:6a:09:bf:97:50:4a:
         10:53:13:23:4d:61:f7:39:7c:1d:81:26:15:9d:4a:df:a6:9d:
         4b:38:f8:42:59:19:35:c7:86:31:17:0e:65:54:de:30:2d:2f:
         ab:bd:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org