Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E15WMFBAIemCgxvif01y_nmU7Ck.roa
File:                     E15WMFBAIemCgxvif01y_nmU7Ck.roa (raw, json)
Hash identifier:          NJhr2bAhPG3nJLH84MkYX/r8Li1jpq9SvCqjCvDgz4w=
Subject key identifier:   13:5E:56:30:50:40:21:E9:82:83:1B:E2:7F:4D:72:FE:79:94:EC:29
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       01889663F29DBD526CEB002B8CBE33F69874
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E15WMFBAIemCgxvif01y_nmU7Ck.roa
Signing time:             Wed 07 Jun 2023 15:05:12 +0000
ROA not before:           Wed 07 Jun 2023 15:05:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138687
IP address blocks:        46.3.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:96:63:f2:9d:bd:52:6c:eb:00:2b:8c:be:33:f6:98:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Jun  7 15:05:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=135e5630504021e982831be27f4d72fe7994ec29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:6f:cb:5a:3b:aa:ce:fc:5b:43:05:eb:22:
                    24:02:ea:e2:b0:e8:d4:d4:89:68:a3:6c:97:cd:0a:
                    57:e0:6c:96:95:95:b4:15:66:d2:03:6e:0e:f5:aa:
                    76:8e:36:63:a6:8c:59:c3:a2:04:97:59:7f:ac:9f:
                    4b:03:76:45:2c:d1:c4:c1:c0:3c:84:9d:3f:17:49:
                    30:37:ae:1c:62:4d:4f:53:d0:e0:21:f8:38:6b:9b:
                    ff:ab:e6:50:8f:ec:b0:15:a5:48:e1:28:00:10:43:
                    40:5f:ad:e9:fc:4c:a3:e9:4d:20:34:a4:68:55:b7:
                    6d:0a:5d:06:ac:8a:af:34:72:fb:fb:72:c8:46:3a:
                    be:8e:d5:98:1d:0b:2d:49:c6:99:1d:f9:05:a3:7f:
                    0c:9a:c7:4c:1e:68:75:6b:65:4f:19:da:f0:11:7f:
                    ce:bc:ea:31:3b:91:4c:f0:3d:7c:68:74:b9:b5:9d:
                    62:a9:11:3a:75:5a:6b:35:fb:36:85:b2:e4:8d:70:
                    3c:07:c7:03:10:b8:be:0e:9d:9f:fa:47:8d:ce:c2:
                    ba:88:9d:c2:b3:58:ad:8a:94:77:e5:28:e5:20:c7:
                    d7:a5:49:f9:e1:b4:3c:5a:17:52:d5:82:10:a8:5e:
                    be:b0:7c:ea:d5:fb:41:46:81:70:fc:51:28:94:06:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:56:30:50:40:21:E9:82:83:1B:E2:7F:4D:72:FE:79:94:EC:29
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/E15WMFBAIemCgxvif01y_nmU7Ck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:88:c2:22:f5:69:c1:9d:f9:45:5f:39:fe:57:37:83:9e:
         c8:c3:11:27:5a:2e:c6:9f:07:c2:ea:c7:01:20:79:4d:fe:a7:
         5d:d3:94:f5:74:14:79:8b:26:32:f2:57:02:77:a7:22:c9:a8:
         8c:f8:43:b1:95:ad:e3:56:0b:1c:8c:45:5a:45:7a:7d:f1:67:
         99:f9:92:01:8f:d8:58:49:a7:e4:74:5f:dd:20:0f:2e:d3:bf:
         55:08:75:6b:3e:02:3f:c4:21:0a:9d:8d:6f:49:11:3b:c0:64:
         af:69:9a:a7:a8:11:2f:b3:db:b1:db:4e:ba:03:1c:39:79:88:
         b0:76:39:09:ad:93:61:ee:f3:94:12:de:17:a4:ed:ee:e7:a5:
         b0:54:97:72:b4:e7:d2:8e:7d:ba:89:a2:40:cc:d5:5a:74:0a:
         81:6a:4d:22:2e:eb:ef:d4:03:7b:69:09:e5:a5:40:cd:4a:cc:
         ee:f7:07:ff:e7:81:ef:5e:88:43:36:b4:76:3a:69:de:2c:a7:
         b6:42:18:16:ca:45:d0:20:4b:4b:64:54:e8:22:28:7e:3d:7c:
         98:41:7e:04:d5:b6:8a:9a:40:80:02:83:3a:3f:60:3a:c5:b7:
         5d:d8:f1:bc:62:1b:c7:2c:e1:80:00:bb:0a:f2:6c:14:c3:d4:
         27:f3:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org