Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/uU4xf-QWB8VC2JK8HZDCjInBmpI.roa
File:                     uU4xf-QWB8VC2JK8HZDCjInBmpI.roa (raw, json)
Hash identifier:          iu48PDQ5J9/lqzq6+Td8gn0RU0PzREMUUkveVtiCq+g=
Subject key identifier:   B9:4E:31:7F:E4:16:07:C5:42:D8:92:BC:1D:90:C2:8C:89:C1:9A:92
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       018902632159608BEB3A192869671A51D267
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/uU4xf-QWB8VC2JK8HZDCjInBmpI.roa
Signing time:             Wed 28 Jun 2023 14:23:18 +0000
ROA not before:           Wed 28 Jun 2023 14:23:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        46.162.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:02:63:21:59:60:8b:eb:3a:19:28:69:67:1a:51:d2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Jun 28 14:23:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b94e317fe41607c542d892bc1d90c28c89c19a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:5d:e0:4b:42:67:ab:26:25:78:24:5d:3a:
                    9f:60:73:1d:a7:5f:57:77:6a:25:20:86:a5:d2:f5:
                    7f:fa:62:9b:c7:10:eb:d2:d1:96:45:30:8f:13:ad:
                    37:3f:ea:ef:d5:47:d0:04:79:1a:67:86:cc:32:74:
                    06:c7:04:b6:3e:1c:e2:77:3b:72:30:c6:9a:3f:b9:
                    7d:10:da:55:af:f6:d2:26:87:18:b2:f1:b9:9c:24:
                    13:cd:da:ee:ee:50:cf:08:9b:1c:ba:d7:34:ce:0d:
                    7f:40:0d:3b:e2:15:5f:3a:90:55:16:68:7b:66:53:
                    c1:d5:dc:19:04:ed:5e:0c:8e:ff:91:57:0a:78:c1:
                    c5:c6:48:5a:b7:f5:4e:6a:4d:8e:4e:5b:4f:70:52:
                    07:c3:87:f5:b7:a7:b6:5b:52:28:3f:15:ba:5d:98:
                    19:8c:36:2d:c0:aa:fd:74:04:db:e0:1a:19:a5:c1:
                    04:8e:cb:0a:04:41:28:3d:74:35:87:53:11:33:b7:
                    72:0f:c3:dc:22:5f:f0:25:a9:98:65:b0:93:9d:9a:
                    e9:6f:e1:2f:dc:03:1b:0d:9d:2d:f8:04:65:1a:e5:
                    1c:f8:42:ff:d0:d9:dd:a8:cf:9f:11:8a:0f:26:92:
                    a9:91:d1:4c:d5:ac:7d:c3:d2:59:5a:f5:4d:05:15:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4E:31:7F:E4:16:07:C5:42:D8:92:BC:1D:90:C2:8C:89:C1:9A:92
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/uU4xf-QWB8VC2JK8HZDCjInBmpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:3c:ea:83:95:36:b0:a0:67:db:dc:44:c2:58:5d:aa:fe:
         90:3e:51:55:b6:05:b6:be:57:50:21:ce:60:bf:7e:38:24:d8:
         72:f0:87:b5:cd:64:ac:c2:e0:d6:9f:d6:f8:b1:8a:fd:7a:ff:
         66:61:a3:84:ae:1e:e0:83:dd:8e:4a:b0:33:02:f8:b5:11:5e:
         cd:63:d2:51:19:4a:ed:67:77:cc:fb:8f:cd:4f:6e:3f:34:7f:
         bf:7b:f5:9d:4f:6e:ee:e0:fc:e5:9e:5f:c9:f4:c8:01:e6:5a:
         d7:73:35:9f:0f:6d:c3:7f:4f:37:cc:13:16:c1:91:44:ec:82:
         43:2e:27:ed:8c:e8:be:9d:b9:9f:42:2a:79:9d:fa:06:87:48:
         0f:aa:08:e5:78:36:08:56:d1:45:fb:c2:13:b3:72:e9:7a:00:
         d9:03:1d:bf:7a:89:60:2f:44:36:5c:09:68:d8:fa:72:af:4a:
         57:c1:d6:d0:5a:eb:98:c6:16:86:07:78:85:b3:d0:b6:73:58:
         9c:d8:1d:f2:ff:f8:a4:31:32:a9:93:41:d9:a1:65:5f:bb:27:
         ff:40:3c:dc:7f:34:ec:09:f1:a4:ea:ca:97:0b:c3:dc:a5:3b:
         91:17:6c:cf:13:6c:5d:c0:b1:c4:12:82:64:4d:5e:a1:28:52:
         77:1c:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net