Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N63S3uVr7Tbo5ZEVRjVzqNbC8Ak.roa
File:                     N63S3uVr7Tbo5ZEVRjVzqNbC8Ak.roa (raw, json)
Hash identifier:          FOcc47KKv1FqTSgejHEeOHeSOnzD0bNE8nROg/d7UlI=
Subject key identifier:   37:AD:D2:DE:E5:6B:ED:36:E8:E5:91:15:46:35:73:A8:D6:C2:F0:09
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       0188B3D901BED0C095B3D47675243FA48B75
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N63S3uVr7Tbo5ZEVRjVzqNbC8Ak.roa
Signing time:             Tue 13 Jun 2023 08:22:03 +0000
ROA not before:           Tue 13 Jun 2023 08:22:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        46.3.39.0/24 maxlen: 24
                          46.3.64.0/24 maxlen: 24
                          46.3.67.0/24 maxlen: 24
                          46.232.84.0/24 maxlen: 24
                          46.3.69.0/24 maxlen: 24
                          46.232.82.0/24 maxlen: 24
                          46.3.71.0/24 maxlen: 24
                          46.232.80.0/24 maxlen: 24
                          46.232.81.0/24 maxlen: 24
                          46.3.65.0/24 maxlen: 24
                          46.232.85.0/24 maxlen: 24
                          46.3.66.0/24 maxlen: 24
                          46.3.68.0/24 maxlen: 24
                          46.3.70.0/24 maxlen: 24
                          46.232.83.0/24 maxlen: 24
                          46.3.73.0/24 maxlen: 24
                          46.232.86.0/24 maxlen: 24
                          46.3.77.0/24 maxlen: 24
                          46.3.76.0/24 maxlen: 24
                          46.3.78.0/24 maxlen: 24
                          46.232.90.0/24 maxlen: 24
                          46.232.89.0/24 maxlen: 24
                          46.232.91.0/24 maxlen: 24
                          46.3.75.0/24 maxlen: 24
                          46.232.88.0/24 maxlen: 24
                          46.3.74.0/24 maxlen: 24
                          46.232.87.0/24 maxlen: 24
                          46.3.72.0/24 maxlen: 24
                          46.3.72.0/21 maxlen: 21
                          46.232.94.0/24 maxlen: 24
                          46.3.79.0/24 maxlen: 24
                          46.232.92.0/24 maxlen: 24
                          46.232.95.0/24 maxlen: 24
                          46.232.93.0/24 maxlen: 24
                          46.3.4.0/22 maxlen: 22
                          46.3.4.0/24 maxlen: 24
                          46.3.6.0/24 maxlen: 24
                          46.232.24.0/21 maxlen: 21
                          46.3.7.0/24 maxlen: 24
                          46.3.5.0/24 maxlen: 24
                          46.232.24.0/24 maxlen: 24
                          46.232.31.0/24 maxlen: 24
                          46.3.16.0/22 maxlen: 22
                          46.232.27.0/24 maxlen: 24
                          46.3.16.0/24 maxlen: 24
                          46.232.29.0/24 maxlen: 24
                          46.232.30.0/24 maxlen: 24
                          46.232.25.0/24 maxlen: 24
                          46.232.28.0/24 maxlen: 24
                          46.232.26.0/24 maxlen: 24
                          46.3.17.0/24 maxlen: 24
                          46.3.18.0/24 maxlen: 24
                          46.3.24.0/24 maxlen: 24
                          46.3.19.0/24 maxlen: 24
                          46.3.26.0/24 maxlen: 24
                          46.3.30.0/24 maxlen: 24
                          46.3.27.0/24 maxlen: 24
                          46.3.25.0/24 maxlen: 24
                          46.3.35.0/24 maxlen: 24
                          46.3.33.0/24 maxlen: 24
                          46.3.37.0/24 maxlen: 24
                          46.3.32.0/24 maxlen: 24
                          46.3.36.0/24 maxlen: 24
                          46.3.34.0/24 maxlen: 24
                          46.3.38.0/24 maxlen: 24
                          149.126.192.0/24 maxlen: 24
                          149.126.197.0/24 maxlen: 24
                          149.126.200.0/24 maxlen: 24
                          149.126.207.0/24 maxlen: 24
                          149.126.215.0/24 maxlen: 24
                          46.3.150.0/24 maxlen: 24
                          46.3.148.0/24 maxlen: 24
                          46.3.151.0/24 maxlen: 24
                          46.3.149.0/24 maxlen: 24
                          46.3.95.0/24 maxlen: 24
                          46.3.93.0/24 maxlen: 24
                          46.3.94.0/24 maxlen: 24
                          46.3.92.0/24 maxlen: 24
                          46.3.204.0/24 maxlen: 24
                          46.3.203.0/24 maxlen: 24
                          46.3.226.0/24 maxlen: 24
                          46.3.224.0/24 maxlen: 24
                          46.3.225.0/24 maxlen: 24
                          46.3.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:d9:01:be:d0:c0:95:b3:d4:76:75:24:3f:a4:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Jun 13 08:22:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=37add2dee56bed36e8e59115463573a8d6c2f009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:32:1e:20:2e:39:b7:45:d4:2a:07:a8:e0:
                    f5:73:77:79:f6:10:95:13:1e:c5:59:3e:dc:7c:de:
                    de:27:e8:f5:da:32:be:3a:fa:90:f9:a2:46:78:0f:
                    84:87:83:db:9a:81:92:c0:67:86:67:b6:eb:93:f4:
                    0d:bc:0a:f4:21:98:04:9f:f4:01:80:73:f9:42:1c:
                    b5:69:54:8c:bb:5f:d8:b9:53:4c:9a:b3:5c:f8:7f:
                    16:08:99:a7:46:a2:ab:f4:0d:6b:e1:4a:e9:70:38:
                    68:3a:3b:8b:bf:6b:66:69:70:b3:78:f8:e5:34:62:
                    63:1d:a7:55:cb:d1:5c:4a:a6:17:f3:d6:26:47:3e:
                    d0:ee:8b:3d:a5:09:fd:64:27:fa:e7:c7:96:bb:4d:
                    47:10:4f:30:ec:25:54:12:d1:f7:85:e5:53:d0:ed:
                    9e:1a:dc:97:c1:77:ec:c0:24:4c:91:38:11:28:29:
                    e4:40:b5:d5:6c:6e:19:04:bf:c2:e7:8f:62:9c:eb:
                    61:bc:1f:9b:4d:60:06:be:92:78:57:55:6d:9c:80:
                    b0:73:b7:99:db:c8:fa:42:22:31:bf:98:2b:23:b3:
                    94:61:87:ab:ce:59:c4:84:67:c9:93:51:c5:b8:7c:
                    54:a3:c0:96:ad:12:97:5e:e3:75:ed:f5:42:42:5b:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:D2:DE:E5:6B:ED:36:E8:E5:91:15:46:35:73:A8:D6:C2:F0:09
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/N63S3uVr7Tbo5ZEVRjVzqNbC8Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.4.0/22
                  46.3.16.0/22
                  46.3.24.0/22
                  46.3.30.0/24
                  46.3.32.0/21
                  46.3.64.0/20
                  46.3.92.0/22
                  46.3.148.0/22
                  46.3.203.0-46.3.204.255
                  46.3.224.0/22
                  46.232.24.0/21
                  46.232.80.0/20
                  149.126.192.0/24
                  149.126.197.0/24
                  149.126.200.0/24
                  149.126.207.0/24
                  149.126.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:98:48:1f:18:4a:73:6c:dc:74:8c:24:9e:d9:27:f1:91:15:
         13:db:41:75:42:08:99:26:34:f6:fa:97:a1:70:c1:aa:3d:71:
         17:d4:5a:14:f6:f7:89:60:0d:b9:cf:72:61:9d:58:d7:d4:53:
         fa:cf:2b:34:a8:42:1c:5a:e4:ba:6e:0f:b9:ef:dc:c8:61:93:
         b2:ac:db:18:70:93:2e:b3:ac:12:d4:b8:18:be:8c:85:f8:3d:
         3b:c7:20:4f:91:65:0d:d0:c1:1f:83:1f:2e:a3:a0:b4:4a:f2:
         37:8c:05:5a:f1:00:90:84:8c:61:4d:0c:78:ce:06:99:c1:9e:
         4f:01:75:84:b1:0c:f5:6d:c3:c9:d2:8c:a0:15:93:a3:f1:55:
         9f:fd:57:d9:fb:7b:6a:2b:27:21:63:9c:5e:ec:81:b2:f9:89:
         95:ce:b5:d0:6b:9e:10:73:ab:50:7d:f7:41:c4:ea:3c:3c:98:
         ab:b4:3a:c6:0f:1b:9a:45:04:63:81:00:b8:d3:39:b1:36:c4:
         2e:44:6b:d8:9d:36:f5:da:23:46:45:b3:0f:a1:bf:1b:1e:63:
         21:80:21:5d:2a:ca:74:3e:d4:62:f2:8d:b1:4b:a7:27:8a:ec:
         10:db:c5:e5:79:4e:6b:98:67:fa:ab:6f:c2:a3:9c:ae:12:95:
         c1:7a:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net