Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa
File:                     HduNRyzT2oRCZ1j_BIBado-Rdkg.roa (raw, json)
Hash identifier:          IY+KWb6flygVQwZtWw6o4EzDS6EM/OeeoPot5P/gPFw=
Subject key identifier:   1D:DB:8D:47:2C:D3:DA:84:42:67:58:FF:04:80:5A:76:8F:91:76:48
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD539393B4DC57A4BD5569B47CB7423
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa
Signing time:             Mon 02 Jan 2023 00:15:22 +0000
ROA not before:           Mon 02 Jan 2023 00:15:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59735
IP address blocks:        89.46.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:39:39:3b:4d:c5:7a:4b:d5:56:9b:47:cb:74:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ddb8d472cd3da84426758ff04805a768f917648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:30:c7:73:59:64:55:19:fe:8a:91:c9:6a:
                    37:35:3f:50:04:4c:ab:1d:4c:7d:c2:d8:21:b1:dd:
                    4f:09:cd:16:97:63:dc:a1:b2:08:26:36:32:69:4b:
                    49:04:35:90:3a:da:9a:c5:30:9f:ae:30:51:59:37:
                    9c:a1:99:9e:08:72:11:72:09:21:63:c4:dd:e7:36:
                    71:88:68:b8:95:36:39:fc:d5:83:fe:d7:7b:f6:bc:
                    c2:d9:9c:9c:5d:d8:55:a3:da:10:58:23:bd:4f:76:
                    41:9e:73:da:ef:05:48:da:ea:88:89:40:9a:c8:ca:
                    44:0a:22:90:ac:4d:ee:18:76:22:39:37:60:74:35:
                    3e:9c:c2:ba:37:ad:c9:8d:72:49:60:ab:86:65:c8:
                    57:64:66:e2:3f:52:a0:ee:3f:3e:06:18:d4:0a:22:
                    7c:94:82:fd:de:89:65:43:1f:0c:0f:d8:06:5c:de:
                    f9:3c:56:d8:1c:66:65:01:b9:6b:de:4d:2c:79:b8:
                    36:82:cb:61:7c:99:2e:5a:ca:36:54:21:ad:90:5f:
                    81:b6:51:ba:e2:56:0b:9c:d7:4b:5a:e1:1f:10:ce:
                    ad:d3:38:4c:e1:67:f7:d0:21:39:6f:a9:45:bb:5b:
                    54:bf:84:22:e8:2d:99:20:8e:51:ca:7f:d6:eb:82:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DB:8D:47:2C:D3:DA:84:42:67:58:FF:04:80:5A:76:8F:91:76:48
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/HduNRyzT2oRCZ1j_BIBado-Rdkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.46.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:93:ed:87:77:cd:56:22:02:b2:48:58:de:72:43:48:04:
         fb:aa:8b:b0:68:5c:fe:9c:28:91:2d:d5:ea:62:2f:e3:44:17:
         73:23:fa:e7:1a:b0:e5:da:2b:62:fe:c0:21:1d:32:5a:47:0d:
         cb:82:39:8d:0b:e9:43:4f:ef:a9:7e:38:5d:2a:bb:2a:d5:8e:
         08:e7:55:63:4d:13:39:8e:d6:63:b7:09:35:d2:c6:11:9d:ea:
         32:58:eb:dd:eb:32:99:71:bf:0e:9e:82:1e:3f:88:c1:35:75:
         8d:41:35:92:db:47:6c:f8:81:ce:12:96:b7:73:d2:39:ee:9d:
         e8:5d:72:e2:ff:48:73:63:5e:d7:ec:70:2e:27:1e:c4:5c:f3:
         a3:4d:0a:eb:98:73:91:e4:fd:68:cf:75:5a:76:9e:03:19:87:
         d1:fc:42:91:06:83:35:92:57:a5:21:3f:f8:a1:87:c1:af:21:
         d4:35:4a:b7:be:ad:91:1f:0e:f4:a2:34:61:3a:88:6d:10:ae:
         0c:81:83:62:62:30:1c:3b:d9:81:b6:6e:75:08:5e:ae:bc:1a:
         b2:81:a3:95:b4:7c:9d:c8:c0:bf:1e:14:4f:e5:3a:82:07:01:
         60:84:90:f3:33:11:47:f6:a6:3e:63:07:0e:6b:b7:d9:16:17:
         43:07:f1:f4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1Tk5O03FekvVVptHy3QjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGRiOGQ0NzJjZDNkYTg0NDI2NzU4ZmYwNDgwNWE3NjhmOTE3NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQwx3NZZFUZ/oqRyWo3NT9QBEyr
HUx9wtghsd1PCc0Wl2PcobIIJjYyaUtJBDWQOtqaxTCfrjBRWTecoZmeCHIRcgkh
Y8Td5zZxiGi4lTY5/NWD/td79rzC2ZycXdhVo9oQWCO9T3ZBnnPa7wVI2uqIiUCa
yMpECiKQrE3uGHYiOTdgdDU+nMK6N63JjXJJYKuGZchXZGbiP1Kg7j8+BhjUCiJ8
lIL93ollQx8MD9gGXN75PFbYHGZlAblr3k0sebg2gsthfJkuWso2VCGtkF+BtlG6
4lYLnNdLWuEfEM6t0zhM4Wf30CE5b6lFu1tUv4Qi6C2ZII5Ryn/W64KhKwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFB3bjUcs09qEQmdY/wSAWnaPkXZIMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL0hkdU5SeXpUMm9SQ1oxal9CSUJhZG8tUmRrZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLgUw
DQYJKoZIhvcNAQELBQADggEBAG67k+2Hd81WIgKySFjeckNIBPuqi7BoXP6cKJEt
1epiL+NEF3Mj+ucasOXaK2L+wCEdMlpHDcuCOY0L6UNP76l+OF0quyrVjgjnVWNN
EzmO1mO3CTXSxhGd6jJY693rMplxvw6egh4/iME1dY1BNZLbR2z4gc4Slrdz0jnu
nehdcuL/SHNjXtfscC4nHsRc86NNCuuYc5Hk/WjPdVp2ngMZh9H8QpEGgzWSV6Uh
P/ihh8GvIdQ1Sre+rZEfDvSiNGE6iG0QrgyBg2JiMBw72YG2bnUIXq68GrKBo5W0
fJ3IwL8eFE/lOoIHAWCEkPMzEUf2pj5jBw5rt9kWF0MH8fQ=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org