Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa
File:                     0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa (raw, json)
Hash identifier:          TJ6SZxOXmw9czpdVKYvCNFJHxRsYDECZPAKV3D7j5sA=
Subject key identifier:   D3:FE:D3:9F:BF:C2:0D:41:E0:A0:D1:86:CD:9E:9C:98:6E:65:02:13
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       018E413586A18FD3FDAF98CCFD5B11FAF928
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa
Signing time:             Fri 15 Mar 2024 08:23:30 +0000
ROA not before:           Fri 15 Mar 2024 08:23:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209372
IP address blocks:        46.3.0.0/16 maxlen: 24
                          46.3.12.0/22 maxlen: 24
                          46.3.20.0/22 maxlen: 24
                          46.3.31.0/24 maxlen: 24
                          46.3.40.0/21 maxlen: 24
                          46.3.48.0/20 maxlen: 20
                          46.3.84.0/24 maxlen: 24
                          46.3.86.0/24 maxlen: 24
                          46.3.87.0/24 maxlen: 24
                          46.3.135.0/24 maxlen: 24
                          46.3.136.0/22 maxlen: 22
                          46.3.144.0/22 maxlen: 22
                          46.3.148.0/22 maxlen: 22
                          46.3.152.0/24 maxlen: 24
                          46.3.153.0/24 maxlen: 24
                          46.3.154.0/24 maxlen: 24
                          46.3.155.0/24 maxlen: 24
                          46.3.156.0/24 maxlen: 24
                          46.3.157.0/24 maxlen: 24
                          46.3.158.0/24 maxlen: 24
                          46.3.159.0/24 maxlen: 24
                          46.3.164.0/23 maxlen: 23
                          46.3.166.0/23 maxlen: 23
                          46.3.205.0/24 maxlen: 24
                          46.3.208.0/22 maxlen: 22
                          46.3.212.0/22 maxlen: 22
                          46.3.232.0/22 maxlen: 22
                          46.3.238.0/24 maxlen: 24
                          46.3.239.0/24 maxlen: 24
                          46.232.0.0/17 maxlen: 24
                          46.232.16.0/23 maxlen: 23
                          46.232.18.0/23 maxlen: 23
                          46.232.21.0/24 maxlen: 24
                          46.232.22.0/24 maxlen: 24
                          46.232.23.0/24 maxlen: 24
                          46.232.112.0/23 maxlen: 23
                          46.232.114.0/23 maxlen: 23
                          46.232.116.0/23 maxlen: 23
                          46.232.118.0/23 maxlen: 23
                          46.232.124.0/23 maxlen: 23
                          46.232.126.0/23 maxlen: 23
                          80.243.128.0/20 maxlen: 24
                          149.126.192.0/18 maxlen: 24
                          149.126.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Mar 2024 08:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:41:35:86:a1:8f:d3:fd:af:98:cc:fd:5b:11:fa:f9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Mar 15 08:23:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d3fed39fbfc20d41e0a0d186cd9e9c986e650213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:f1:e7:ca:95:70:5e:af:05:eb:4a:ab:16:
                    b7:9e:1d:92:09:0e:95:3d:10:db:a0:cc:bc:74:6b:
                    ff:43:b4:cb:b3:89:a9:63:5b:a2:83:01:bd:26:cf:
                    1a:c5:20:dc:78:c6:55:80:df:3f:28:e9:4e:58:dd:
                    c6:e1:0c:3f:c5:5f:95:6f:94:cf:e4:26:f8:c6:11:
                    7e:15:2e:db:3c:1d:05:cd:de:e9:8a:b4:05:0a:06:
                    07:69:87:f2:e6:3d:15:dc:f4:6a:11:aa:84:d1:29:
                    02:96:ce:fc:c0:15:3a:f4:6a:6c:23:7a:90:d5:0f:
                    de:3a:a1:59:b8:98:31:61:29:c4:39:7f:15:07:85:
                    fd:d2:ac:2b:22:31:53:2a:81:dd:a0:6a:49:b4:c6:
                    82:1f:08:5f:75:fa:be:3b:f5:65:fa:fd:9b:4f:c3:
                    3b:f9:f4:08:53:b1:1c:23:a7:cc:7f:89:97:de:41:
                    1f:7d:73:9a:4d:93:85:ed:84:e0:60:72:f9:37:5b:
                    8b:13:47:8f:8d:9f:0b:50:a1:8f:26:01:63:6e:4b:
                    6e:29:a3:61:c9:24:a9:fe:76:8d:92:a3:71:8c:7b:
                    4b:cd:e9:06:08:32:98:67:42:c7:e8:db:ca:fa:0e:
                    e0:26:4f:cf:00:ba:9f:a0:8d:d2:92:72:30:b7:ac:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:D3:9F:BF:C2:0D:41:E0:A0:D1:86:CD:9E:9C:98:6E:65:02:13
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.0.0/16
                  46.232.0.0/17
                  80.243.128.0/20
                  149.126.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:01:d3:80:45:c2:5d:31:85:b3:08:ec:04:69:43:13:60:e2:
         70:91:ec:01:91:d4:42:01:9b:75:f0:46:4b:64:33:48:61:7e:
         82:8b:5c:ac:31:d8:10:ed:38:e9:ed:5c:cb:ec:7d:f6:a7:95:
         ec:e1:13:2c:4d:67:e2:6b:e1:c1:82:44:2f:70:88:ff:e9:b7:
         b9:a7:46:b8:c0:e6:73:4c:8d:ee:69:1a:be:dd:45:7d:c2:9b:
         5c:72:f2:1e:07:e4:ea:52:87:fc:b0:12:96:03:eb:d1:30:ce:
         03:86:0a:d9:49:e0:ec:52:21:32:42:46:3c:e4:33:07:e5:74:
         7c:d7:e6:72:f1:8d:37:88:34:3b:87:b1:a0:eb:18:d5:bd:f6:
         88:f4:46:55:f1:d1:58:dd:fc:81:ac:4a:be:a8:4d:7e:9b:77:
         ce:15:ca:ed:3d:10:89:a7:14:27:82:48:5d:20:45:32:5f:66:
         38:d6:a4:5c:c9:df:b3:34:a1:92:70:a0:fa:97:86:f3:c4:29:
         51:6d:32:1d:5d:8b:64:fc:91:ba:b9:67:ea:46:c2:22:75:d1:
         b7:2a:f3:0d:48:07:bb:37:22:78:d7:dd:f3:e6:b1:34:90:02:
         c2:1e:17:06:0c:32:9b:48:c2:ff:9a:f7:b8:d4:f0:ca:80:06:
         59:78:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:33:41 2024 by rpki-client on console-fra.rpki-client.org