Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa
File:                     B6vKTadeSJdiu8jo9W9bJa6W1HE.roa (raw, json)
Hash identifier:          GZ50GOYhQmgz0GWGgneQL+39o4+KyOeK1o5BAx7Hdtc=
Subject key identifier:   07:AB:CA:4D:A7:5E:48:97:62:BB:C8:E8:F5:6F:5B:25:AE:96:D4:71
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       018570FB9477B6825886D3DA049992E3A66A
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa
Signing time:             Mon 02 Jan 2023 05:36:53 +0000
ROA not before:           Mon 02 Jan 2023 05:36:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56729
IP address blocks:        45.91.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:fb:94:77:b6:82:58:86:d3:da:04:99:92:e3:a6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Jan  2 05:36:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07abca4da75e489762bbc8e8f56f5b25ae96d471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7f:62:05:eb:19:07:17:2e:8c:8b:f2:c5:04:
                    b9:11:12:0d:85:43:4f:f8:24:2e:d7:e2:4b:f7:47:
                    25:b6:0d:62:e5:51:84:dc:f5:08:f8:2d:8f:2d:f8:
                    7c:17:c9:16:35:f6:c4:17:4a:b4:2e:24:d4:60:c0:
                    92:08:87:b5:b2:5f:cf:13:bc:06:5c:ef:ae:7c:71:
                    55:8b:26:c5:50:31:4c:8f:46:9f:49:48:d9:0f:32:
                    2e:0c:b4:26:8f:92:0c:9a:35:24:71:55:6b:6e:bd:
                    68:8c:f6:25:d2:4f:90:a3:64:e1:01:14:bd:bc:f7:
                    ac:73:2d:dd:de:b2:50:bb:91:b0:00:eb:4c:e5:27:
                    08:d6:4f:73:72:6d:6a:83:98:d8:4b:1a:be:1c:86:
                    b1:42:b7:50:e5:79:df:9c:53:d2:9f:61:63:b5:a0:
                    5d:d7:67:e8:40:5d:d5:7f:d7:44:4e:f9:e3:2e:5e:
                    bf:99:a3:ff:96:1a:07:d6:d7:24:18:a8:6f:ce:ee:
                    84:48:b1:0b:0d:44:20:89:bd:c6:45:3d:2a:74:c0:
                    b9:b9:fd:56:b0:27:f9:01:de:5d:58:d5:83:24:25:
                    2d:26:df:ee:9f:25:75:6b:aa:56:c0:13:88:a7:a8:
                    e4:ae:87:3f:f5:f6:26:db:28:ea:b4:8c:b7:b5:54:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AB:CA:4D:A7:5E:48:97:62:BB:C8:E8:F5:6F:5B:25:AE:96:D4:71
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/B6vKTadeSJdiu8jo9W9bJa6W1HE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:af:99:88:27:83:94:19:f2:a1:96:15:6f:c0:38:50:f4:
         aa:46:8e:b7:c5:c3:71:f1:ab:08:ec:97:9c:f6:0f:a2:75:c0:
         60:45:a9:18:7d:20:11:25:3f:3a:56:cd:b0:8c:12:e8:97:de:
         22:ec:be:09:6e:c9:d4:ca:76:3b:d1:ec:cf:aa:09:21:4a:54:
         05:9f:bd:e9:97:bd:ff:e4:6d:31:50:35:72:2c:08:3b:6e:95:
         53:ea:bb:33:6d:f4:64:e4:ad:06:e6:6a:98:16:a8:9d:dd:69:
         20:e4:c7:d2:1a:02:7c:e8:2d:a7:ef:ab:cf:ab:78:1c:57:7a:
         26:f3:75:da:e5:33:a8:91:dc:c6:95:ab:36:d5:78:7e:d1:ba:
         ac:76:d1:e6:8b:bc:2f:61:b1:89:74:8b:8c:47:e8:95:d6:ee:
         c2:b0:40:34:1d:f8:eb:7b:1e:fe:c4:20:6d:46:fe:bb:6c:a4:
         6a:38:1c:2c:d8:a0:eb:13:f1:d5:46:da:e2:a1:38:f4:2a:f1:
         6a:29:af:d2:97:61:f6:99:c3:92:b4:9c:70:e2:f7:a7:17:98:
         a5:49:6a:69:19:28:dc:99:40:45:90:fd:f5:d2:0e:f5:63:d9:
         4f:6b:44:e4:e7:e1:c7:67:96:55:fc:47:7d:ff:24:2c:33:84:
         bd:e3:bf:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw+5R3toJYhtPaBJmS46ZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjMwMTAyMDUzNjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FiY2E0ZGE3NWU0ODk3NjJiYmM4ZThmNTZmNWIyNWFlOTZkNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA339iBesZBxcujIvyxQS5ERINhUNP
+CQu1+JL90cltg1i5VGE3PUI+C2PLfh8F8kWNfbEF0q0LiTUYMCSCIe1sl/PE7wG
XO+ufHFViybFUDFMj0afSUjZDzIuDLQmj5IMmjUkcVVrbr1ojPYl0k+Qo2ThARS9
vPescy3d3rJQu5GwAOtM5ScI1k9zcm1qg5jYSxq+HIaxQrdQ5XnfnFPSn2FjtaBd
12foQF3Vf9dETvnjLl6/maP/lhoH1tckGKhvzu6ESLELDUQgib3GRT0qdMC5uf1W
sCf5Ad5dWNWDJCUtJt/unyV1a6pWwBOIp6jkroc/9fYm2yjqtIy3tVQVUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAeryk2nXkiXYrvI6PVvWyWultRxMB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEvQjZ2S1RhZGVTSmRpdThqbzlXOWJKYTZXMUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsFMA0G
CSqGSIb3DQEBCwUAA4IBAQCKSa+ZiCeDlBnyoZYVb8A4UPSqRo63xcNx8asI7Jec
9g+idcBgRakYfSARJT86Vs2wjBLol94i7L4JbsnUynY70ezPqgkhSlQFn73pl73/
5G0xUDVyLAg7bpVT6rszbfRk5K0G5mqYFqid3Wkg5MfSGgJ86C2n76vPq3gcV3om
83Xa5TOokdzGlas21Xh+0bqsdtHmi7wvYbGJdIuMR+iV1u7CsEA0Hfjrex7+xCBt
Rv67bKRqOBws2KDrE/HVRtrioTj0KvFqKa/Sl2H2mcOStJxw4venF5ilSWppGSjc
mUBFkP310g71Y9lPa0Tk5+HHZ5ZV/Ed9/yQsM4S947+U
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org