Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/m_BFEzuRWOV1uskgLMBSYxIX4e4.roa
File:                     m_BFEzuRWOV1uskgLMBSYxIX4e4.roa (raw, json)
Hash identifier:          T+X36NS3ayd3GcGOlu35hiqxF0D0TGZjWO2vDHHWgtM=
Subject key identifier:   9B:F0:45:13:3B:91:58:E5:75:BA:C9:20:2C:C0:52:63:12:17:E1:EE
Certificate issuer:       /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial:       018570F096A9C5E2736CDC8D70F1DFB29793
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/m_BFEzuRWOV1uskgLMBSYxIX4e4.roa
Signing time:             Mon 02 Jan 2023 05:24:53 +0000
ROA not before:           Mon 02 Jan 2023 05:24:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35624
IP address blocks:        185.46.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:96:a9:c5:e2:73:6c:dc:8d:70:f1:df:b2:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
        Validity
            Not Before: Jan  2 05:24:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bf045133b9158e575bac9202cc052631217e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:e9:72:db:fd:99:4c:06:ca:d7:ed:47:14:
                    ec:d5:2c:49:8b:a8:43:22:03:b2:b3:4b:b6:ea:72:
                    cd:24:61:48:68:03:8f:d5:02:b1:07:10:00:b3:73:
                    6b:f7:7d:21:47:ab:f0:3d:1b:b1:d8:07:2a:f6:17:
                    1f:a6:5f:fe:c6:9c:e3:93:e4:f2:45:a2:33:9f:36:
                    2a:df:e2:a5:23:7c:21:46:cd:5e:e9:b4:13:57:58:
                    89:ae:4d:72:f4:6b:f4:db:76:cd:92:85:c6:27:9f:
                    c3:7e:05:17:bd:11:71:1b:25:df:fd:39:47:80:c4:
                    aa:d5:86:21:e8:51:c2:7b:d9:29:37:58:d5:a7:40:
                    65:74:c8:1b:d2:25:3a:72:36:16:5f:80:0b:f9:43:
                    b1:3e:fa:6c:94:a6:39:33:df:a5:e2:96:0f:1a:c4:
                    59:92:41:bd:e2:6b:09:75:5b:9d:3d:27:43:d0:79:
                    80:16:2b:89:a7:d6:3d:65:a8:5e:c1:f9:20:2f:3e:
                    1f:d9:9c:53:90:1f:18:3c:ee:f7:8a:e3:fd:d8:b1:
                    47:9c:be:0d:4a:d2:4d:b9:56:0e:b4:5d:be:49:8e:
                    86:4d:d9:74:50:84:bb:13:1e:1a:c9:9f:77:bf:43:
                    9f:a1:d7:dc:a1:06:4f:a1:f9:e6:3c:60:4f:5d:7c:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F0:45:13:3B:91:58:E5:75:BA:C9:20:2C:C0:52:63:12:17:E1:EE
            X509v3 Authority Key Identifier:
                keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/m_BFEzuRWOV1uskgLMBSYxIX4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:9a:b2:33:1c:ea:b5:30:a5:b5:2c:b5:be:c4:c0:92:f6:
         f1:76:f7:3b:79:8c:03:f5:63:d0:d1:a0:1c:db:d0:ad:9d:b8:
         60:e5:9f:3a:e7:c4:f5:63:27:ac:42:0a:6e:d5:b4:d0:1c:be:
         da:5c:af:72:a0:6a:2f:a3:03:05:46:d5:73:a4:fb:16:79:1d:
         ae:5a:db:9f:1c:70:80:2e:4c:33:6c:a0:dc:bf:b3:07:8a:ae:
         0a:d1:1d:54:eb:16:92:c2:d5:0e:37:75:9c:11:00:95:a8:c2:
         5a:7b:6f:be:8c:d8:f3:83:e1:6d:d1:6c:79:7c:aa:4c:4d:da:
         2b:f8:8e:28:35:0d:a8:a6:d7:56:d4:d9:a5:a3:87:47:73:16:
         48:ec:d3:d7:5c:11:65:4e:10:20:68:ae:ab:2c:24:1d:03:f0:
         81:a7:ea:ab:35:be:68:d5:15:bf:2c:d1:5c:5a:70:de:ab:e8:
         a6:d8:78:6f:00:93:15:68:f7:28:7d:06:37:6b:7a:09:d6:c2:
         67:cf:90:ee:3f:06:8d:1f:9a:e9:ee:d9:54:c8:cf:6d:0c:e8:
         d8:1b:d0:49:1f:8b:53:8b:20:88:c0:96:37:ca:8c:9a:1b:6b:
         f7:0b:4f:6d:9c:1c:9f:a3:18:2a:95:05:87:1c:1d:11:c5:7e:
         00:22:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:40 2024 by rpki-client on console-ams.rpki-client.org