Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa
File:                     7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa (raw, json)
Hash identifier:          CPZbDtVVbjpXo9aqRbdhsXrKb3Rao48JqL2woJcfMX0=
Subject key identifier:   ED:C7:89:2F:59:F3:91:1E:6F:74:4F:A7:22:F3:54:C6:7E:AF:07:E6
Certificate issuer:       /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial:       0188B9FCF7291C07816E65BB21B87FFA1DEA
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa
Signing time:             Wed 14 Jun 2023 12:59:03 +0000
ROA not before:           Wed 14 Jun 2023 12:59:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        146.0.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b9:fc:f7:29:1c:07:81:6e:65:bb:21:b8:7f:fa:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
        Validity
            Not Before: Jun 14 12:59:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edc7892f59f3911e6f744fa722f354c67eaf07e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:4a:7f:b7:07:49:95:4f:ff:d5:63:0c:ab:
                    83:73:5f:4f:69:60:5f:dd:00:35:51:f4:a5:d8:68:
                    f9:1b:ed:ea:8d:57:08:e9:fc:de:12:b3:1d:d9:70:
                    ba:87:ef:76:39:4d:0a:dc:95:0d:5f:fa:67:3e:75:
                    ea:88:a0:03:8d:3c:7e:ed:48:90:53:46:12:63:fd:
                    6d:8e:a3:f2:5d:e5:3f:c1:1d:be:0d:a5:68:25:f3:
                    16:71:6f:4e:57:a5:22:85:f0:29:98:73:fe:67:e8:
                    13:a4:f7:e3:2e:18:1a:8d:bd:51:55:2b:4a:28:60:
                    74:1d:3d:5e:f3:d1:d1:18:9b:34:2c:4a:a1:5a:b9:
                    13:35:c1:5e:f4:a0:16:a2:5e:ef:ca:eb:98:77:95:
                    68:e4:12:72:be:fc:bc:f3:b4:5d:58:9f:f2:6c:b6:
                    8d:2b:7d:54:b6:ad:ab:ca:54:0a:91:f1:bd:13:13:
                    fd:68:b7:78:bf:1f:55:d8:6b:18:cb:dd:e9:cb:10:
                    f6:f5:1b:89:81:7f:be:96:55:8b:40:b8:b3:38:30:
                    e2:9b:8e:57:d5:c4:7a:52:e5:e0:8a:36:34:91:6e:
                    09:08:a2:b9:c7:76:31:1b:33:ee:17:dc:66:3b:4c:
                    03:35:72:4b:c8:81:48:78:f7:fa:48:16:d3:ef:44:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:89:2F:59:F3:91:1E:6F:74:4F:A7:22:F3:54:C6:7E:AF:07:E6
            X509v3 Authority Key Identifier:
                keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/7ceJL1nzkR5vdE-nIvNUxn6vB-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.0.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:f2:e7:79:26:7e:29:17:a5:54:5c:4e:ca:4c:47:96:93:
         d6:6c:0d:50:7c:ac:1d:21:55:a5:13:be:7f:08:ae:19:c3:21:
         24:cc:10:ef:f9:fd:76:4a:c1:3b:63:e7:44:09:6e:58:30:12:
         6b:54:e3:f3:72:d1:d9:eb:90:dd:e4:fd:a4:de:f9:1c:11:2b:
         e3:bb:d9:59:c8:62:ed:3f:e6:c7:3d:b7:9f:5d:ab:b1:37:88:
         4e:20:3c:84:14:e0:88:23:cc:8a:5e:89:03:50:9d:df:16:c9:
         7e:54:87:32:71:e1:d6:ad:15:53:7d:ad:b7:53:05:c3:77:38:
         0a:a3:98:c3:32:ad:a1:62:6e:fb:73:11:dc:bb:b3:54:18:3a:
         7c:03:4f:44:11:09:af:66:73:5e:0f:42:e7:aa:33:ed:02:84:
         43:31:bc:49:fc:79:c1:82:de:9a:d4:30:72:a4:8c:b9:c7:dc:
         e8:28:bd:eb:78:eb:14:14:ae:4a:5e:66:39:a7:1c:3e:3a:53:
         6f:4e:60:08:30:6e:87:b6:f7:e0:cd:6b:f9:46:77:7e:8e:d3:
         4b:3c:be:16:a9:16:69:a3:7e:2c:ac:bc:37:77:27:f7:60:06:
         06:3b:e3:7f:54:d4:64:d0:e8:25:5d:71:f5:90:f8:e4:04:43:
         fa:c4:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:25 2024 by rpki-client on console-ams.rpki-client.org