Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Xc6ISJ2Tv06y_VBI1vrDCKVPxl8.roa
File:                     Xc6ISJ2Tv06y_VBI1vrDCKVPxl8.roa (raw, json)
Hash identifier:          f4FF2WjXQ6ere+aTZY7p9845MABsPBSkY6woSbSXZII=
Subject key identifier:   5D:CE:88:48:9D:93:BF:4E:B2:FD:50:48:D6:FA:C3:08:A5:4F:C6:5F
Certificate issuer:       /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial:       01856F5490C32CF3ACE831969034B6EA55D8
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Xc6ISJ2Tv06y_VBI1vrDCKVPxl8.roa
Signing time:             Sun 01 Jan 2023 21:54:51 +0000
ROA not before:           Sun 01 Jan 2023 21:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6805
IP address blocks:        89.204.128.0/19 maxlen: 19
                          89.204.128.0/21 maxlen: 21
                          89.204.130.0/24 maxlen: 24
                          89.204.135.0/24 maxlen: 24
                          89.204.136.0/21 maxlen: 21
                          89.204.144.0/21 maxlen: 21
                          89.204.152.0/21 maxlen: 21
                          89.204.153.0/24 maxlen: 24
                          185.98.140.0/22 maxlen: 22
                          82.113.96.0/20 maxlen: 20
                          82.113.96.0/19 maxlen: 19
                          82.113.112.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:54:90:c3:2c:f3:ac:e8:31:96:90:34:b6:ea:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
        Validity
            Not Before: Jan  1 21:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5dce88489d93bf4eb2fd5048d6fac308a54fc65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:66:6e:45:47:f6:96:93:57:37:ed:08:cc:3b:
                    92:31:b8:6c:1a:4e:e0:c6:35:b8:82:57:b2:ab:3b:
                    ba:af:0f:6e:57:86:53:a2:5c:30:af:84:8a:46:53:
                    95:f3:b5:9b:99:eb:b1:ef:9e:03:24:be:60:8c:33:
                    5d:d7:24:a6:b9:48:ff:60:0a:de:c7:8e:01:4d:11:
                    21:2e:39:82:5e:41:58:ce:64:95:4d:33:fe:b0:3b:
                    b4:76:45:cb:90:64:cc:3d:a2:39:32:ca:a7:ef:56:
                    7a:35:83:cc:93:6d:01:5a:2a:97:38:d8:39:79:7a:
                    4b:27:3b:8e:9a:00:59:45:73:35:84:5c:ed:3a:90:
                    0d:cb:b2:dd:f4:bc:c8:3f:99:f9:4b:92:26:7e:4e:
                    fd:93:60:5a:8e:84:4b:ef:9f:f9:9e:f2:98:37:13:
                    57:4d:5d:4c:eb:ff:ec:fc:cc:0b:96:1e:91:f1:90:
                    c9:b5:18:05:a9:89:3a:a7:2a:0c:6c:fe:9d:d1:63:
                    ef:c3:f1:ec:ef:f9:ce:c7:be:e8:c6:2c:d1:f5:2e:
                    9d:eb:a3:58:37:a6:1b:e5:67:a7:82:3c:c8:10:62:
                    03:bb:d4:36:62:c5:70:43:08:0a:3c:f3:14:ef:d3:
                    fc:de:61:b9:39:c7:1a:f8:1f:11:4a:b0:6d:97:6c:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:88:48:9D:93:BF:4E:B2:FD:50:48:D6:FA:C3:08:A5:4F:C6:5F
            X509v3 Authority Key Identifier:
                keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Xc6ISJ2Tv06y_VBI1vrDCKVPxl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.113.96.0/19
                  89.204.128.0/19
                  185.98.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:5a:5b:4d:70:9b:e5:a6:4c:af:09:aa:63:94:d7:0d:97:02:
         85:81:0a:91:73:13:19:b2:d0:8c:4e:b1:30:1c:e7:27:80:ee:
         fc:2e:80:8e:83:c0:e9:b5:38:66:a4:f1:96:72:62:d4:cd:e1:
         b4:b7:d6:70:db:0c:e9:42:59:3c:4c:ad:b1:09:38:4b:87:14:
         f4:70:0e:e7:a0:5a:1f:ee:d0:80:f0:79:9c:a2:ba:71:18:90:
         44:65:53:e1:f0:4a:03:35:f7:45:e6:a0:57:78:fd:37:9f:78:
         34:c9:a5:d8:42:b7:56:97:68:4d:4a:9d:5c:a6:f1:29:64:8b:
         f3:6d:ac:9f:a2:65:8a:f4:68:a1:74:26:84:0e:43:e5:b0:16:
         a6:43:a8:24:da:1b:e0:4b:03:03:2f:ef:cb:ce:39:31:b2:7e:
         c9:35:62:9e:52:a5:11:6e:b9:84:f0:dc:ad:f5:d2:0c:17:44:
         06:84:88:71:3b:12:d0:de:8e:a9:8f:53:9b:05:57:05:7c:27:
         d9:5f:a7:e9:d9:96:33:d7:b4:08:39:55:ae:02:43:ad:51:5b:
         94:21:c8:ad:0b:29:0d:38:8c:9c:af:93:c1:a8:7c:94:e9:5b:
         2b:c7:d8:1c:fe:c8:05:7b:8c:69:90:3c:02:cd:54:19:3b:e3:
         ee:c9:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:35 2024 by rpki-client on console-ams.rpki-client.org