Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LPLyuaab1e7td0YEQqFHMNEvi3s.roa
File:                     LPLyuaab1e7td0YEQqFHMNEvi3s.roa (raw, json)
Hash identifier:          KwzD4pQL3wkuu/+HqViElTEWfK76ubFwZz0xSfRxuZs=
Subject key identifier:   2C:F2:F2:B9:A6:9B:D5:EE:ED:77:46:04:42:A1:47:30:D1:2F:8B:7B
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       018B4E84510A492521D323A5A9F9E92B537E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LPLyuaab1e7td0YEQqFHMNEvi3s.roa
Signing time:             Fri 20 Oct 2023 19:16:16 +0000
ROA not before:           Fri 20 Oct 2023 19:16:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42431
IP address blocks:        46.233.13.0/24 maxlen: 24
                          46.233.12.0/24 maxlen: 24
                          46.233.16.0/24 maxlen: 24
                          46.233.16.0/21 maxlen: 21
                          46.233.15.0/24 maxlen: 24
                          46.233.14.0/24 maxlen: 24
                          46.233.17.0/24 maxlen: 24
                          46.233.23.0/24 maxlen: 24
                          46.233.22.0/24 maxlen: 24
                          46.233.21.0/24 maxlen: 24
                          46.233.24.0/24 maxlen: 24
                          46.233.24.0/23 maxlen: 23
                          46.233.20.0/24 maxlen: 24
                          46.233.19.0/24 maxlen: 24
                          46.233.18.0/24 maxlen: 24
                          46.233.26.0/24 maxlen: 24
                          46.233.25.0/24 maxlen: 24
                          46.233.30.0/24 maxlen: 24
                          46.233.29.0/24 maxlen: 24
                          46.233.28.0/22 maxlen: 22
                          46.233.28.0/24 maxlen: 24
                          46.233.27.0/24 maxlen: 24
                          46.233.31.0/24 maxlen: 24
                          46.233.36.0/23 maxlen: 23
                          46.233.2.0/24 maxlen: 24
                          46.233.1.0/24 maxlen: 24
                          46.233.0.0/19 maxlen: 20
                          46.233.0.0/24 maxlen: 24
                          46.233.0.0/21 maxlen: 21
                          46.233.4.0/24 maxlen: 24
                          46.233.3.0/24 maxlen: 24
                          46.233.6.0/24 maxlen: 24
                          46.233.5.0/24 maxlen: 24
                          46.233.9.0/24 maxlen: 24
                          46.233.8.0/24 maxlen: 24
                          46.233.7.0/24 maxlen: 24
                          46.233.11.0/24 maxlen: 24
                          46.233.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4e:84:51:0a:49:25:21:d3:23:a5:a9:f9:e9:2b:53:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Oct 20 19:16:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cf2f2b9a69bd5eeed77460442a14730d12f8b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d3:b5:ca:17:18:e5:3b:7e:28:88:e9:11:bd:
                    5f:cc:f7:9f:7f:5c:ef:9a:86:88:07:18:a5:c1:f9:
                    b0:26:01:a8:84:95:25:1a:40:bd:cf:9b:b9:81:70:
                    33:34:db:27:3f:f7:58:8d:b4:a7:d9:02:5e:16:33:
                    04:e0:c6:c2:91:5e:11:5a:63:f2:11:8e:84:5a:be:
                    58:57:b8:aa:fd:d7:43:5a:85:57:06:73:50:ba:d0:
                    d4:02:04:e1:f4:aa:eb:55:ae:8f:5b:f7:ac:3a:f7:
                    3e:1a:a9:97:01:95:46:3b:fe:fa:29:16:51:e5:bf:
                    07:c1:5e:c4:ec:d0:b4:97:d9:75:bc:ad:49:d6:b2:
                    7b:2f:6a:29:85:6b:ad:47:19:61:2e:f0:ae:1e:3b:
                    d1:1b:65:6f:b5:c6:27:fc:9b:4c:8e:cb:fd:27:42:
                    16:26:08:cb:04:bc:12:a3:f4:73:fc:e5:b2:bb:55:
                    c6:02:6c:80:2f:0a:4f:1e:af:3f:a3:35:91:93:a7:
                    06:08:8f:f4:c9:b7:c2:13:47:a1:37:3c:6a:bf:0f:
                    ad:65:4d:5f:bd:6f:e9:75:cc:82:1d:be:f5:aa:09:
                    d4:a2:91:f2:45:dd:4d:33:94:00:bf:ee:16:c1:3b:
                    2a:30:9e:e4:50:87:ab:0d:98:1d:e3:a3:1c:8f:28:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F2:F2:B9:A6:9B:D5:EE:ED:77:46:04:42:A1:47:30:D1:2F:8B:7B
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/LPLyuaab1e7td0YEQqFHMNEvi3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.233.0.0/19
                  46.233.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:ab:f0:a4:44:af:8d:13:40:96:35:10:eb:d1:5b:68:e9:05:
         fb:b2:04:d2:0c:22:be:c9:fa:bd:de:2e:94:24:97:c5:49:a6:
         63:6f:f6:e3:93:bd:01:cc:00:5e:78:85:48:34:6d:b5:c9:a5:
         45:6a:f5:90:43:15:86:6a:ca:f2:68:c9:cb:01:ff:23:73:92:
         40:50:84:f2:0c:6b:a3:ff:67:54:38:71:f2:59:e1:87:ef:39:
         4b:4a:b3:cb:f2:4f:d6:64:e4:92:8e:a7:5a:ca:27:2f:33:10:
         13:92:d1:0b:78:cb:ca:1f:4d:63:7b:ac:a8:c9:14:f8:0f:b9:
         18:bb:d4:15:29:1f:73:d2:2f:1a:f8:5e:09:8e:be:9f:dc:d7:
         bb:ea:ea:2f:e2:2f:3f:46:de:35:58:a1:f9:4c:f9:0a:ec:f6:
         70:4c:1c:e6:92:bf:fb:23:8f:f3:2a:63:a0:c3:ce:ed:d8:57:
         9f:16:f7:37:42:9e:8c:f4:48:2a:e1:98:0e:ab:db:35:be:7c:
         e4:9c:00:d9:e4:02:94:e4:1a:3d:bc:c7:70:ee:91:e5:0a:b1:
         82:c5:3a:5f:0e:c2:99:ee:28:37:74:9b:30:47:b7:bf:84:b3:
         ce:fe:60:39:68:8e:c7:28:00:c8:6b:ad:35:df:75:16:20:26:
         c5:94:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org