Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/m7_5dTf29RfEwBcoZwC0PYLWSt0.roa
File:                     m7_5dTf29RfEwBcoZwC0PYLWSt0.roa (raw, json)
Hash identifier:          t+KXwM3DJxG+iNSaKmCRKeo6yI7WQ7zSFcOKXt13zfg=
Subject key identifier:   9B:BF:F9:75:37:F6:F5:17:C4:C0:17:28:67:00:B4:3D:82:D6:4A:DD
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       0186CDABCA3AA86CA6A8B21B8172E8CCF0C5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/m7_5dTf29RfEwBcoZwC0PYLWSt0.roa
Signing time:             Fri 10 Mar 2023 22:37:13 +0000
ROA not before:           Fri 10 Mar 2023 22:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        46.232.64.0/24 maxlen: 24
                          46.232.68.0/24 maxlen: 24
                          46.232.70.0/24 maxlen: 24
                          46.232.66.0/24 maxlen: 24
                          46.232.67.0/24 maxlen: 24
                          46.232.69.0/24 maxlen: 24
                          46.232.71.0/24 maxlen: 24
                          46.232.65.0/24 maxlen: 24
                          46.232.72.0/24 maxlen: 24
                          46.232.72.0/21 maxlen: 24
                          46.232.80.0/20 maxlen: 22
                          46.232.96.0/20 maxlen: 24
                          46.3.89.0/24 maxlen: 24
                          46.3.91.0/24 maxlen: 24
                          46.3.88.0/24 maxlen: 24
                          46.3.90.0/24 maxlen: 24
                          149.126.245.0/24 maxlen: 24
                          149.126.242.0/24 maxlen: 24
                          149.126.244.0/24 maxlen: 24
                          149.126.246.0/24 maxlen: 24
                          149.126.249.0/24 maxlen: 24
                          149.126.247.0/24 maxlen: 24
                          149.126.250.0/24 maxlen: 24
                          149.126.252.0/24 maxlen: 24
                          149.126.248.0/24 maxlen: 24
                          149.126.192.0/18 maxlen: 22
                          149.126.226.0/24 maxlen: 24
                          149.126.231.0/24 maxlen: 24
                          149.126.228.0/24 maxlen: 24
                          46.3.160.0/24 maxlen: 24
                          46.3.162.0/24 maxlen: 24
                          46.3.161.0/24 maxlen: 24
                          46.3.163.0/24 maxlen: 24
                          46.3.184.0/24 maxlen: 24
                          46.3.186.0/24 maxlen: 24
                          46.3.185.0/24 maxlen: 24
                          46.3.188.0/24 maxlen: 24
                          46.3.190.0/24 maxlen: 24
                          46.3.187.0/24 maxlen: 24
                          46.3.189.0/24 maxlen: 24
                          46.3.191.0/24 maxlen: 24
                          46.232.112.0/20 maxlen: 22
                          46.3.101.0/24 maxlen: 24
                          46.3.116.0/22 maxlen: 24
                          46.3.120.0/21 maxlen: 21
                          46.3.134.0/24 maxlen: 24
                          46.3.255.0/24 maxlen: 24
                          46.3.254.0/24 maxlen: 24
                          46.3.200.0/24 maxlen: 24
                          46.3.202.0/24 maxlen: 24
                          46.3.201.0/24 maxlen: 24
                          46.3.208.0/21 maxlen: 21
                          46.3.220.0/23 maxlen: 23
                          46.3.230.0/23 maxlen: 23
                          46.3.243.0/24 maxlen: 24
                          46.3.245.0/24 maxlen: 24
                          46.3.246.0/24 maxlen: 24
                          46.3.249.0/24 maxlen: 24
                          46.3.251.0/24 maxlen: 24
                          46.3.253.0/24 maxlen: 24
                          46.3.248.0/24 maxlen: 24
                          46.3.250.0/24 maxlen: 24
                          46.3.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 May 2023 11:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cd:ab:ca:3a:a8:6c:a6:a8:b2:1b:81:72:e8:cc:f0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Mar 10 22:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bbff97537f6f517c4c017286700b43d82d64add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:7e:52:94:3b:dc:0a:51:21:25:7b:6f:9e:
                    59:11:79:aa:c0:01:c4:d8:ad:86:bc:dd:e0:91:e8:
                    99:8a:f1:c8:1b:b2:dc:8a:b4:25:a3:a9:e6:c2:22:
                    29:ae:19:4a:92:79:cd:04:9b:c6:8b:93:c8:f9:af:
                    ff:6f:51:91:08:9e:56:d4:ab:fe:84:3f:38:57:53:
                    95:0a:a7:58:54:49:84:1b:1a:0e:7b:9d:b1:38:e6:
                    03:ba:64:65:a7:cd:17:f8:14:e5:a6:7b:5b:ae:54:
                    52:95:94:23:08:64:f7:66:00:81:c7:d6:f0:4f:da:
                    94:71:a1:ae:d2:41:f5:26:ea:05:06:bf:e2:f8:78:
                    7a:47:10:ba:a5:42:65:9a:d9:df:db:29:ec:46:8c:
                    fa:76:e0:5a:fb:df:7a:b5:45:c7:5c:fd:8f:eb:c5:
                    71:2f:15:a4:ce:76:14:53:63:c8:2f:77:86:54:f0:
                    ef:99:7e:94:7c:f4:10:6d:0c:fc:e3:7c:bd:ee:31:
                    6d:53:7c:f5:5c:83:2e:3c:65:58:56:74:b3:5d:0f:
                    e8:d8:e2:5a:fb:6d:1b:57:eb:95:27:7b:07:50:78:
                    f6:27:ab:bf:fb:f4:97:e2:30:e1:d1:49:b2:e3:6f:
                    3b:58:69:c5:96:26:3a:4e:c0:3a:74:99:1e:b8:50:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:F9:75:37:F6:F5:17:C4:C0:17:28:67:00:B4:3D:82:D6:4A:DD
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/m7_5dTf29RfEwBcoZwC0PYLWSt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.88.0/22
                  46.3.101.0/24
                  46.3.116.0-46.3.127.255
                  46.3.134.0/24
                  46.3.160.0/22
                  46.3.184.0/21
                  46.3.200.0-46.3.202.255
                  46.3.208.0/21
                  46.3.220.0/23
                  46.3.230.0/23
                  46.3.243.0/24
                  46.3.245.0-46.3.246.255
                  46.3.248.0/21
                  46.232.64.0/18
                  149.126.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:4b:5f:7c:9a:41:fa:04:bf:f7:81:c6:ab:e7:2c:0f:96:
         a1:2c:a4:a2:dd:02:94:e8:a8:6e:97:5d:99:c8:f7:e6:06:eb:
         ba:43:d3:ba:be:71:10:33:bb:c9:00:f7:bf:5f:e9:93:17:fb:
         e1:ee:49:0c:00:6a:47:24:fc:9a:ca:4d:be:8c:cf:eb:fa:be:
         96:1e:f6:0a:49:d7:ee:19:c5:b0:3e:89:b3:25:2d:07:93:37:
         68:ab:67:04:85:51:7f:08:6d:1a:a8:7a:b4:28:35:d9:78:56:
         e0:48:ed:a6:8d:41:80:cd:fc:67:36:2b:23:e7:a0:5b:b6:bc:
         bf:af:2d:cb:f9:3d:06:47:e6:5d:b2:07:77:cf:bc:2e:6e:1d:
         30:ad:66:2a:a6:64:79:b1:93:35:64:1c:b5:76:c8:34:7c:26:
         04:b0:5b:f3:79:bc:59:62:e2:9c:d2:95:86:c6:8e:4c:89:0a:
         cd:df:c2:b6:64:60:93:76:1f:a3:e6:08:fd:86:4e:2c:d9:7d:
         38:80:18:b7:ba:40:16:ce:30:01:85:b3:5b:64:b4:0e:ee:e0:
         74:a6:7e:11:7e:82:47:4c:71:21:69:a5:04:6b:db:52:5f:07:
         64:ce:ad:e0:4c:37:42:35:34:44:a6:de:f5:ba:c4:fe:ab:8d:
         23:a5:90:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:43 2024 by rpki-client on console-fra.rpki-client.org