Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FweI68czM9MWpek9JdkC9Indg04.roa
File:                     FweI68czM9MWpek9JdkC9Indg04.roa (raw, json)
Hash identifier:          RlUO+FJ763Z6E1mIDuhtfoBQJJ5CO3+JRyLeiCRd2JQ=
Subject key identifier:   17:07:88:EB:C7:33:33:D3:16:A5:E9:3D:25:D9:02:F4:89:DD:83:4E
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       01864CEC49B41CB38965C240A40810A65546
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FweI68czM9MWpek9JdkC9Indg04.roa
Signing time:             Mon 13 Feb 2023 22:36:38 +0000
ROA not before:           Mon 13 Feb 2023 22:36:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        46.30.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Sep 2023 20:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4c:ec:49:b4:1c:b3:89:65:c2:40:a4:08:10:a6:55:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Feb 13 22:36:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=170788ebc73333d316a5e93d25d902f489dd834e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:ce:5b:a9:c6:88:5e:41:2c:20:56:62:49:
                    17:ac:95:c2:a9:2e:0c:02:25:c0:9c:72:14:cd:ee:
                    51:5f:f7:75:46:56:af:d2:1c:3d:22:64:c5:60:51:
                    fa:4d:5b:40:de:ac:31:af:12:0d:12:f6:c1:54:32:
                    dc:90:6e:fb:76:bf:13:87:d0:5e:be:ed:95:e5:df:
                    b0:2d:69:fd:51:06:d1:e3:28:e4:4c:87:23:d3:60:
                    66:64:3d:e6:11:15:7f:3a:83:3e:a6:e5:cf:cc:42:
                    9a:0b:c6:60:8b:2e:6d:ac:9f:e5:10:99:40:43:36:
                    76:8a:cb:ad:3c:4a:bf:b9:cd:fb:0f:21:58:df:7e:
                    af:13:a5:1c:5c:99:59:44:66:6b:d5:e9:73:9f:49:
                    c2:2d:87:c6:bf:52:d7:56:7f:2e:e6:27:a8:80:4c:
                    cb:b7:ff:e2:c8:39:fc:2a:0d:e3:d4:16:80:36:77:
                    4a:8a:a3:b9:68:7f:40:81:cf:dc:e6:a5:a2:b1:4d:
                    d3:f6:12:2c:71:ed:5b:b6:9a:86:45:a9:91:5d:57:
                    86:e9:f7:20:d1:db:cf:19:ef:92:1b:f5:ee:ad:65:
                    52:7d:d4:c9:5c:c3:9c:9f:73:ad:38:d1:29:f7:89:
                    12:1a:aa:5c:05:8f:4d:f5:ea:e5:55:b2:7a:95:75:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:88:EB:C7:33:33:D3:16:A5:E9:3D:25:D9:02:F4:89:DD:83:4E
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FweI68czM9MWpek9JdkC9Indg04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.30.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:10:db:68:8f:28:64:6f:21:5b:22:60:c5:34:47:3d:ed:36:
         01:3a:17:e6:45:7b:91:1b:24:7a:11:55:7a:9b:fc:36:f3:7c:
         39:19:83:6c:43:76:ee:af:4a:bd:f0:24:b1:97:c9:e6:1e:39:
         2b:5a:25:78:49:ac:0c:a9:ea:98:8b:eb:4e:33:0c:cc:da:18:
         85:50:3d:a6:1b:7b:3e:9e:8a:97:11:25:00:59:f8:2f:53:1b:
         df:ef:a5:9a:b7:ad:77:04:0b:14:0b:80:65:b5:c0:21:fa:68:
         36:8a:b6:14:3c:bd:b4:ac:02:b5:0e:08:07:7d:77:21:ab:73:
         0b:2d:93:75:4d:bd:29:16:61:b6:73:61:53:30:3c:db:4d:50:
         53:7e:cf:fe:f1:98:47:4a:94:c5:9c:57:b8:e1:fb:34:2e:f3:
         ec:42:96:25:40:1e:75:44:3d:f1:e8:9e:36:58:e8:a5:db:6b:
         02:0a:a0:a9:1d:df:a7:9b:47:1b:a1:5d:56:e9:00:f3:dd:47:
         83:c4:d5:2b:6a:b2:0b:5f:cd:68:08:56:8a:92:7c:c3:07:af:
         d0:cc:d7:65:e2:7f:b3:a0:67:ec:c7:ae:94:3b:b2:cb:8c:c4:
         66:b5:8f:1d:4d:ae:5b:9f:70:41:2e:37:5e:b8:0c:95:da:a7:
         55:49:4a:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZM7Em0HLOJZcJApAgQplVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjMwMjEzMjIzNjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzA3ODhlYmM3MzMzM2QzMTZhNWU5M2QyNWQ5MDJmNDg5ZGQ4MzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5enOW6nGiF5BLCBWYkkXrJXCqS4M
AiXAnHIUze5RX/d1Rlav0hw9ImTFYFH6TVtA3qwxrxINEvbBVDLckG77dr8Th9Be
vu2V5d+wLWn9UQbR4yjkTIcj02BmZD3mERV/OoM+puXPzEKaC8Zgiy5trJ/lEJlA
QzZ2isutPEq/uc37DyFY336vE6UcXJlZRGZr1elzn0nCLYfGv1LXVn8u5ieogEzL
t//iyDn8Kg3j1BaANndKiqO5aH9Agc/c5qWisU3T9hIsce1btpqGRamRXVeG6fcg
0dvPGe+SG/XurWVSfdTJXMOcn3OtONEp94kSGqpcBY9N9erlVbJ6lXU7gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcHiOvHMzPTFqXpPSXZAvSJ3YNOMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvRndlSTY4Y3pNOU1XcGVrOUpka0M5SW5kZzA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh6/MA0G
CSqGSIb3DQEBCwUAA4IBAQAZENtojyhkbyFbImDFNEc97TYBOhfmRXuRGyR6EVV6
m/w283w5GYNsQ3bur0q98CSxl8nmHjkrWiV4SawMqeqYi+tOMwzM2hiFUD2mG3s+
noqXESUAWfgvUxvf76Wat613BAsUC4BltcAh+mg2irYUPL20rAK1DggHfXchq3ML
LZN1Tb0pFmG2c2FTMDzbTVBTfs/+8ZhHSpTFnFe44fs0LvPsQpYlQB51RD3x6J42
WOil22sCCqCpHd+nm0cboV1W6QDz3UeDxNUrarILX81oCFaKknzDB6/QzNdl4n+z
oGfsx66UO7LLjMRmtY8dTa5bn3BBLjdeuAyV2qdVSUpR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org