Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/eNe6O0Pfx8lzcd0zl3xkQF_wyRU.roa
File:                     eNe6O0Pfx8lzcd0zl3xkQF_wyRU.roa (raw, json)
Hash identifier:          EDPbVJ0q2AztleA97KQNGa/jMMEkpOKbXMhu4aE7GeM=
Subject key identifier:   78:D7:BA:3B:43:DF:C7:C9:73:71:DD:33:97:7C:64:40:5F:F0:C9:15
Certificate issuer:       /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial:       01856F300263D537C79C1275813259FF85B7
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/eNe6O0Pfx8lzcd0zl3xkQF_wyRU.roa
Signing time:             Sun 01 Jan 2023 21:14:55 +0000
ROA not before:           Sun 01 Jan 2023 21:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52075
IP address blocks:        46.193.228.0/22 maxlen: 22
                          46.193.232.0/22 maxlen: 22
                          46.193.236.0/22 maxlen: 22
                          46.193.240.0/20 maxlen: 20
                          46.193.32.0/19 maxlen: 19
                          46.193.64.0/19 maxlen: 19
                          46.193.176.0/20 maxlen: 20
                          46.192.0.0/15 maxlen: 15
                          45.81.196.0/22 maxlen: 22
                          46.193.0.0/19 maxlen: 19
                          46.193.224.0/22 maxlen: 22
                          46.193.128.0/20 maxlen: 20
                          46.193.144.0/20 maxlen: 20
                          46.193.160.0/20 maxlen: 20
                          46.193.96.0/19 maxlen: 19
                          2a01:7c01:40::/42 maxlen: 42
                          2a01:7c01::/42 maxlen: 42
                          2a01:7c00:700::/40 maxlen: 40
                          2a01:7c00:600::/40 maxlen: 40
                          2a01:7c00:500::/40 maxlen: 40
                          2a01:7c00:400::/40 maxlen: 40
                          2a01:7c00::/29 maxlen: 29
                          2a01:7c00:10::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:02:63:d5:37:c7:9c:12:75:81:32:59:ff:85:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
        Validity
            Not Before: Jan  1 21:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78d7ba3b43dfc7c97371dd33977c64405ff0c915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:2f:8e:d8:99:0e:7b:e8:8f:ac:5a:4c:88:
                    40:c7:2a:02:0b:a6:a4:d6:60:8c:32:b0:85:5f:76:
                    c5:b4:cf:70:22:fd:27:bc:d1:8b:73:b0:77:90:3b:
                    22:59:82:3e:4c:1b:35:57:70:c5:56:ed:ac:72:2c:
                    0b:1f:b2:be:a4:57:76:51:af:f1:6c:f2:4e:9c:e3:
                    7f:9f:0e:23:07:aa:51:17:96:82:95:2b:0d:64:2c:
                    b9:2f:f3:11:fd:8d:c1:3b:95:1c:ac:cb:be:8c:68:
                    37:eb:57:39:08:64:aa:ed:2c:21:30:42:56:65:15:
                    f8:60:d1:ff:22:6f:6d:f4:56:af:c3:84:2e:3b:ef:
                    b5:e5:95:5d:b3:bd:2e:a2:2b:c4:87:60:c5:0d:ee:
                    99:92:1d:db:a6:1f:0a:88:06:80:a1:d9:51:ea:4d:
                    de:1c:b1:e7:a4:8c:0b:a1:66:84:d2:98:99:91:4e:
                    9a:82:86:c6:a9:63:51:65:d8:f9:63:8b:e0:c0:5b:
                    a1:7c:cb:bf:75:77:e9:39:0f:47:07:d7:03:c5:86:
                    22:ec:fe:cc:ed:6e:3f:38:5d:17:49:fe:8e:f9:95:
                    56:39:c6:26:32:e0:33:aa:d0:f8:40:2b:34:58:68:
                    2e:c0:5d:b9:26:67:4a:5c:bf:38:9e:4a:42:b5:b1:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D7:BA:3B:43:DF:C7:C9:73:71:DD:33:97:7C:64:40:5F:F0:C9:15
            X509v3 Authority Key Identifier:
                keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/eNe6O0Pfx8lzcd0zl3xkQF_wyRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.196.0/22
                  46.192.0.0/15
                IPv6:
                  2a01:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:65:ec:69:91:16:5c:f7:16:d7:9e:ce:96:76:28:2d:ba:65:
         a8:d9:20:6d:71:69:f4:78:07:2a:49:67:23:04:02:3d:a6:e6:
         19:75:a4:70:f3:d4:49:49:e3:01:4b:5f:4a:45:83:06:5f:e0:
         4d:8f:e0:4e:d6:74:bf:66:53:bf:0e:5e:86:9d:cb:f8:88:33:
         3c:cc:fb:80:3e:1b:2e:11:c3:c5:f0:34:8c:da:72:03:26:69:
         ef:0d:4e:a8:be:86:b7:28:ca:6f:14:13:12:be:6f:f6:80:73:
         68:c0:ce:c1:aa:3b:63:15:11:29:90:2a:67:55:6d:b5:0b:04:
         be:26:42:e7:65:46:d0:47:64:e7:fe:df:03:1c:c8:95:93:a1:
         b4:83:f7:a9:f8:a7:4d:02:ce:17:69:e6:a8:df:0b:4a:bf:01:
         46:d5:90:bb:c7:4a:b8:bb:d6:ce:a1:82:eb:8e:39:3a:2d:34:
         f1:07:7e:b0:91:01:a6:82:54:5e:33:fa:9c:47:f9:9a:63:4e:
         6c:4e:bf:c2:a2:42:8e:26:73:33:3a:37:0b:3e:15:71:04:0b:
         d9:4e:a5:62:89:d7:e6:be:6b:ab:5f:04:45:c4:45:59:cd:ec:
         54:5d:33:3e:2f:5a:06:00:c1:a5:5a:9d:1a:40:39:55:1f:d9:
         92:40:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:17 2024 by rpki-client on console-ams.rpki-client.org