Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa
File:                     dWFqe8zji__sWb5FMQScajbLcjE.roa (raw, json)
Hash identifier:          1BLCN84H8M8k+V3QSyfRh94eR3px45qW+8oRGMU+yPk=
Subject key identifier:   75:61:6A:7B:CC:E3:8B:FF:EC:59:BE:45:31:04:9C:6A:36:CB:72:31
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       01856EA6BA466ED14190FD82CEF8EB0D16F7
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa
Signing time:             Sun 01 Jan 2023 18:44:58 +0000
ROA not before:           Sun 01 Jan 2023 18:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39669
IP address blocks:        89.44.225.0/24 maxlen: 24
                          89.44.224.0/24 maxlen: 24
                          89.44.227.0/24 maxlen: 24
                          89.44.230.0/24 maxlen: 24
                          89.44.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Jul 2023 14:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:ba:46:6e:d1:41:90:fd:82:ce:f8:eb:0d:16:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan  1 18:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75616a7bcce38bffec59be4531049c6a36cb7231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:c1:bb:60:a5:69:b3:f5:35:b6:b3:f8:57:
                    58:10:a7:98:1f:c8:8b:c4:be:18:15:f4:52:46:68:
                    13:24:11:a3:38:5b:16:5e:4c:3a:50:a7:23:31:b6:
                    56:22:41:7c:3d:e7:26:f4:fd:d2:79:51:98:52:db:
                    ba:7e:ee:47:26:4f:39:70:56:d5:62:7f:ca:98:0e:
                    f2:8b:d4:be:dc:86:db:3b:5a:e0:af:3a:39:28:8f:
                    b5:5c:fd:38:65:d0:34:61:5c:50:2e:ff:7e:22:69:
                    35:8e:94:58:49:f8:55:02:76:02:0e:ef:f8:8a:4a:
                    38:24:53:7b:31:97:75:99:52:2e:2b:1d:b1:4c:d9:
                    78:6f:b1:b2:15:a4:ed:e6:c5:e2:e7:74:74:94:d0:
                    0b:2c:c1:76:c9:2d:b2:7a:77:d7:d2:5a:cf:3b:29:
                    6b:c2:e8:05:b2:93:50:5d:f0:14:4d:53:94:76:dc:
                    40:af:ae:0e:c8:03:a9:b5:a3:4c:d6:0a:90:20:c8:
                    72:4d:b2:3d:88:e9:6d:f8:d6:49:a6:43:31:29:c5:
                    73:09:e6:a8:d0:e6:93:b3:93:20:2b:6e:45:5d:7f:
                    1c:79:dc:d0:72:05:82:bf:48:47:f8:11:e8:55:fb:
                    59:86:09:39:2f:16:7e:46:fb:3e:2d:d7:36:14:52:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:6A:7B:CC:E3:8B:FF:EC:59:BE:45:31:04:9C:6A:36:CB:72:31
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/dWFqe8zji__sWb5FMQScajbLcjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.44.224.0/23
                  89.44.227.0/24
                  89.44.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:5d:81:12:4a:fc:1a:a6:17:81:51:1e:7f:19:e4:d8:60:
         68:08:5c:f7:70:75:45:7f:39:02:04:2c:c0:ad:f2:f6:4b:ab:
         45:08:a5:cc:4d:45:ad:e3:a4:0a:49:15:72:b9:13:35:3b:bb:
         18:89:e4:fe:7e:76:6d:48:62:ee:88:28:3a:df:50:28:51:42:
         cb:84:f4:06:75:d1:46:e9:2a:03:2e:ee:06:4b:b6:5a:83:e1:
         b7:cb:e4:e9:3a:55:4d:23:64:2b:32:31:4a:fd:40:e5:a6:a8:
         b9:4d:89:b1:0b:e3:2e:f2:45:de:97:76:74:6a:5d:23:81:0f:
         8e:15:64:e3:28:e5:b2:a3:7e:f3:2d:b6:78:cb:78:1b:0b:a1:
         08:87:d1:87:7e:61:af:5f:5f:d6:33:b8:d4:87:47:47:c6:1b:
         df:e4:0c:5e:b8:5f:eb:80:d5:2d:a0:5f:c2:0e:c4:ac:90:f0:
         f9:63:10:72:35:30:7e:95:86:fc:72:91:9a:d6:c0:73:fc:fa:
         3f:70:98:c4:5d:72:ed:f5:c3:1c:b7:86:ec:e7:bc:9b:af:da:
         66:1e:f8:04:57:ad:7e:b3:7d:21:0e:f7:15:5f:02:50:97:8b:
         3b:32:b1:1e:b0:60:84:82:d3:f6:20:47:09:63:02:c1:67:e2:
         5b:99:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org