Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TwAy1DQEo8ch6xFSop7bstj2gWY.roa
File:                     TwAy1DQEo8ch6xFSop7bstj2gWY.roa (raw, json)
Hash identifier:          GVyoJYrbpgyz7/qgHR/UJJXnrHI6diW2DtePBEexMkE=
Subject key identifier:   4F:00:32:D4:34:04:A3:C7:21:EB:11:52:A2:9E:DB:B2:D8:F6:81:66
Certificate issuer:       /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial:       01856ECB69E9862A051691C4440D8962261B
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TwAy1DQEo8ch6xFSop7bstj2gWY.roa
Signing time:             Sun 01 Jan 2023 19:25:02 +0000
ROA not before:           Sun 01 Jan 2023 19:25:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56687
IP address blocks:        46.148.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:69:e9:86:2a:05:16:91:c4:44:0d:89:62:26:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
        Validity
            Not Before: Jan  1 19:25:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f0032d43404a3c721eb1152a29edbb2d8f68166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:6c:6d:05:fb:b4:10:01:fe:1d:21:a6:a6:
                    14:e5:d8:4f:bb:c8:99:a5:32:61:41:e3:24:a7:0f:
                    5f:6e:2c:84:76:9d:87:dc:2f:70:1a:d2:d5:66:c8:
                    d0:85:a0:3f:49:0f:53:3d:b0:0d:ac:50:9d:41:55:
                    54:ba:64:82:7f:81:a9:60:75:15:fe:56:7d:89:ac:
                    5b:e3:dd:7f:31:2b:49:d9:5a:fb:3f:1f:c6:fd:eb:
                    37:b3:f8:66:f7:da:d1:dd:ce:c7:74:f7:26:6f:a8:
                    10:85:93:f1:d1:cb:c5:d8:db:92:65:24:b3:67:34:
                    b1:ee:ea:15:da:ad:1d:4c:bf:b6:8a:64:87:ba:b4:
                    cb:fe:38:ed:9c:a4:70:8d:0e:ab:ba:a0:d3:74:c7:
                    f1:95:08:e0:98:67:cc:84:df:77:68:28:ab:eb:30:
                    90:45:a2:4f:47:82:ef:71:26:dc:ca:b7:0c:fb:04:
                    94:70:a0:80:a4:80:9d:9f:26:68:ee:80:71:75:25:
                    b4:32:b0:22:35:86:ec:25:0a:5a:a4:b9:4f:51:b7:
                    7b:9f:76:2f:71:e5:18:8d:2e:da:6f:a6:cc:38:86:
                    a4:f2:68:2a:8c:26:8c:da:c6:2a:63:a5:a8:25:7b:
                    a6:60:f5:be:90:21:0e:0a:93:66:67:5e:9b:ff:ef:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:00:32:D4:34:04:A3:C7:21:EB:11:52:A2:9E:DB:B2:D8:F6:81:66
            X509v3 Authority Key Identifier:
                keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/TwAy1DQEo8ch6xFSop7bstj2gWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:02:85:9f:69:d2:de:04:b4:68:01:c6:43:33:6e:b3:7a:03:
         79:e5:e4:4b:eb:4b:d3:e3:69:40:79:fe:bd:84:65:29:7d:0d:
         e2:98:42:63:25:4b:65:5c:10:27:00:d6:c3:89:ae:7e:10:59:
         4b:bf:b0:0a:f0:e4:91:ed:e5:e2:94:72:15:96:9c:93:c1:35:
         d4:ba:39:2c:d2:0f:77:4f:53:f8:2f:4a:9f:e8:a7:7e:5a:6c:
         23:b7:ea:91:93:21:2e:ee:f0:47:66:98:c4:c9:d2:59:93:ec:
         32:2c:00:98:89:76:a2:44:d7:2c:cc:97:10:ff:65:2f:c5:1d:
         03:03:00:67:ae:3f:0d:b0:1f:6b:6b:25:eb:fe:ee:d7:11:68:
         b0:32:e7:54:91:a2:62:47:2b:20:3f:3f:41:3b:70:26:c2:66:
         d1:d2:02:80:9e:ec:b9:17:a0:d1:2b:37:be:e3:69:23:2b:0d:
         33:bd:50:3d:6f:17:5f:3c:b6:20:9c:73:a2:f8:f3:a8:d9:ed:
         7b:8c:28:cd:6e:ae:41:5f:6d:c3:53:5b:eb:27:19:9b:2a:83:
         22:58:9a:75:da:66:ef:ad:1a:f1:6d:60:d2:1b:be:2f:98:cb:
         73:8c:a0:55:95:eb:7e:71:44:1d:48:6c:4a:99:0c:d2:23:0d:
         c6:19:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org