Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa
File:                     _tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa (raw, json)
Hash identifier:          naMnLQgDerICFYVl1aGkD/a+PFsGrpNIW1Dp3+SYOS4=
Subject key identifier:   FE:D1:62:D8:69:F7:09:F2:5F:53:0E:E6:48:96:3E:68:61:7C:57:0A
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       0186FEC45E6EC0E398E12BD18A882F511076
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa
Signing time:             Mon 20 Mar 2023 11:25:27 +0000
ROA not before:           Mon 20 Mar 2023 11:25:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200453
IP address blocks:        46.46.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fe:c4:5e:6e:c0:e3:98:e1:2b:d1:8a:88:2f:51:10:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Mar 20 11:25:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fed162d869f709f25f530ee648963e68617c570a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:1a:2d:6c:d7:18:08:1c:9e:0d:4e:eb:88:
                    73:9e:4d:bb:08:99:48:12:1b:b0:a1:0d:d3:b7:bb:
                    53:97:e6:ec:24:d6:b3:98:1e:d4:0e:c9:d6:34:e9:
                    87:ed:67:27:82:a7:cf:cc:e5:f7:11:65:7c:ee:14:
                    1c:96:20:dc:d4:75:17:07:70:67:bc:7d:7b:3b:bc:
                    89:08:9d:b0:89:b1:7b:7b:bb:75:2a:82:a6:08:4c:
                    a0:9e:32:c1:ec:0b:45:65:3a:b9:5f:42:31:d7:b3:
                    75:2e:42:9c:43:93:62:94:bf:94:ff:2e:d3:a9:8f:
                    d7:44:56:a2:96:7f:77:0f:5c:86:ba:e4:ba:4c:2e:
                    d6:0d:98:14:01:50:b3:6b:7d:82:1a:91:54:d5:85:
                    36:35:f9:56:8a:6a:5c:08:be:ec:cf:de:75:ef:52:
                    06:16:f4:71:7f:78:82:12:ec:eb:1a:fa:c8:a2:00:
                    14:b6:b2:cc:63:71:1b:96:50:f7:f5:c8:75:96:7e:
                    92:11:c4:50:28:c7:f2:2a:43:30:f4:b2:2c:47:9d:
                    25:fd:69:85:88:11:e1:b2:09:8b:6e:e9:5e:57:ee:
                    98:61:4d:0a:3a:f0:ec:5b:55:08:09:41:ba:49:f0:
                    25:83:d4:a1:1e:c5:e9:1e:69:e2:dc:fc:b5:57:99:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:62:D8:69:F7:09:F2:5F:53:0E:E6:48:96:3E:68:61:7C:57:0A
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.46.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:45:17:6f:e4:9c:2a:a3:24:d1:c9:66:dc:00:0c:01:36:
         29:47:ec:4e:b3:bc:9d:32:30:36:04:01:2a:fa:2d:1e:6a:37:
         3d:3d:c8:aa:b2:71:53:59:18:c6:bd:4c:e4:ea:10:e8:7a:7d:
         30:a6:f6:e0:72:95:5e:c5:e3:cf:68:f6:86:70:7b:d8:d3:5f:
         e5:45:f1:b1:39:95:ea:f1:00:30:87:49:a7:d5:b2:8f:61:80:
         0f:41:7d:f5:2c:c8:f4:e3:1e:5c:bb:74:80:8d:37:da:c4:be:
         cf:4a:11:7c:bc:4e:d9:2d:02:5a:f8:8e:a6:a9:2e:87:1a:23:
         9a:7c:cc:ea:4f:a3:e1:65:71:35:a7:ef:f7:55:49:04:ec:13:
         34:fd:5d:ed:54:11:43:8e:71:88:c0:4c:86:87:88:db:79:34:
         5c:e6:eb:e4:0f:40:a0:07:4c:d7:c6:05:cb:c5:41:68:ab:8a:
         38:dc:18:48:99:f2:34:13:1e:eb:4a:67:16:7e:d1:5d:74:d7:
         3e:71:17:87:24:1c:34:8c:4e:a8:c8:86:0e:64:1a:c7:99:ac:
         b2:e4:44:18:0c:64:e3:03:c3:de:a1:8b:b0:3b:d9:5c:84:b0:
         c5:3e:54:5d:9b:ba:89:6c:3e:1d:54:d7:46:e2:31:54:22:92:
         c6:32:37:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb+xF5uwOOY4SvRiogvURB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzU0NjRlODk4MTZlZjAwYjAzNjk1MDIwMThhN2U1OWNl
MmQzNmMwHhcNMjMwMzIwMTEyNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWQxNjJkODY5ZjcwOWYyNWY1MzBlZTY0ODk2M2U2ODYxN2M1NzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOwaLWzXGAgcng1O64hznk27CJlI
EhuwoQ3Tt7tTl+bsJNazmB7UDsnWNOmH7WcngqfPzOX3EWV87hQcliDc1HUXB3Bn
vH17O7yJCJ2wibF7e7t1KoKmCEygnjLB7AtFZTq5X0Ix17N1LkKcQ5NilL+U/y7T
qY/XRFailn93D1yGuuS6TC7WDZgUAVCza32CGpFU1YU2NflWimpcCL7sz95171IG
FvRxf3iCEuzrGvrIogAUtrLMY3EbllD39ch1ln6SEcRQKMfyKkMw9LIsR50l/WmF
iBHhsgmLbuleV+6YYU0KOvDsW1UICUG6SfAlg9ShHsXpHmni3Py1V5kH2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7RYthp9wnyX1MO5kiWPmhhfFcKMB8GA1UdIwQY
MBaAFOh1Rk6JgW7wCwNpUCAYp+Wc4tNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMt
MzFkMTk3ZjEzOWQ4LzEvX3RGaTJHbjNDZkpmVXc3bVNKWS1hR0Y4VndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9jMzA2OWUtNWZmYy00YzhjLTkxZGMtMzFkMTk3ZjEzOWQ4
LzEvNkhWR1RvbUJidkFMQTJsUUlCaW41WnppMDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALi6+MA0G
CSqGSIb3DQEBCwUAA4IBAQCbYEUXb+ScKqMk0clm3AAMATYpR+xOs7ydMjA2BAEq
+i0eajc9PciqsnFTWRjGvUzk6hDoen0wpvbgcpVexePPaPaGcHvY01/lRfGxOZXq
8QAwh0mn1bKPYYAPQX31LMj04x5cu3SAjTfaxL7PShF8vE7ZLQJa+I6mqS6HGiOa
fMzqT6PhZXE1p+/3VUkE7BM0/V3tVBFDjnGIwEyGh4jbeTRc5uvkD0CgB0zXxgXL
xUFoq4o43BhImfI0Ex7rSmcWftFddNc+cReHJBw0jE6oyIYOZBrHmayy5EQYDGTj
A8PeoYuwO9lchLDFPlRdm7qJbD4dVNdG4jFUIpLGMje9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:14 2024 by rpki-client on console-ams.rpki-client.org