Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa
File:                     1ozu5gvOtFnc451waquRnnAxx2s.roa (raw, json)
Hash identifier:          Q6iVB7mAXoTEVXil6Aj/I9PmNiaAhddhUtmv1uG0KPU=
Subject key identifier:   D6:8C:EE:E6:0B:CE:B4:59:DC:E3:9D:70:6A:AB:91:9E:70:31:C7:6B
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       018DCFA36684404CD116402875D76C1B2CFF
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa
Signing time:             Thu 22 Feb 2024 07:06:48 +0000
ROA not before:           Thu 22 Feb 2024 07:06:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        89.40.83.0/24 maxlen: 24
                          89.42.81.0/24 maxlen: 24
                          89.42.82.0/23 maxlen: 23
                          89.46.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 06:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:cf:a3:66:84:40:4c:d1:16:40:28:75:d7:6c:1b:2c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Feb 22 07:06:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d68ceee60bceb459dce39d706aab919e7031c76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:45:17:15:02:d3:2e:83:a4:89:c4:5c:74:
                    30:54:79:85:07:23:58:ec:4d:b4:f7:6d:0f:d3:6a:
                    c4:bf:ce:e5:ea:93:ef:ad:0c:79:77:5a:fe:63:ac:
                    08:15:ee:37:35:65:8b:5e:ef:38:59:fc:6d:33:22:
                    41:a0:4b:e1:e6:c5:c9:8f:c1:9c:49:1c:66:49:0a:
                    01:98:43:6b:75:11:c2:81:2f:38:3d:24:db:8a:c6:
                    97:a1:58:e3:a0:78:a6:db:21:b1:39:bc:b2:7d:9f:
                    5a:a3:a7:7c:0b:ae:6c:22:09:39:77:9f:30:dd:a0:
                    2f:c2:57:40:dd:0f:2f:1c:2c:89:32:14:6b:3c:05:
                    b1:bf:2f:92:66:0f:04:7d:3a:48:3f:31:8a:52:0d:
                    7a:3f:2b:2c:2e:94:f4:b7:46:e1:61:d1:d0:68:f4:
                    a8:e2:45:68:fb:87:3a:2b:8b:46:a3:84:35:ed:ae:
                    32:c1:aa:dd:10:7b:90:7c:39:da:24:02:87:01:25:
                    a1:08:a8:e1:62:25:fb:40:41:98:ff:d9:d5:15:4c:
                    c9:28:fb:6a:ae:59:16:2f:d5:02:af:e9:6f:da:67:
                    ff:9b:95:b4:17:2c:eb:2d:21:df:71:63:5e:aa:7f:
                    fd:a3:22:ff:70:60:19:78:e6:17:f3:db:ae:3b:99:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8C:EE:E6:0B:CE:B4:59:DC:E3:9D:70:6A:AB:91:9E:70:31:C7:6B
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1ozu5gvOtFnc451waquRnnAxx2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.40.83.0/24
                  89.42.81.0-89.42.83.255
                  89.46.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:21:1f:d0:db:53:eb:a8:33:0a:12:ac:c4:6d:d8:a0:20:
         62:0d:06:65:9d:08:52:d2:16:51:dd:da:0f:06:d6:16:a2:21:
         e4:e4:66:ce:08:32:4b:e5:0b:57:d3:51:70:33:90:4b:9f:df:
         2b:39:16:08:41:ca:d2:fb:68:19:37:27:2f:19:e2:01:0c:6f:
         fa:18:8f:52:f5:66:5a:6e:1d:13:51:dc:2d:44:25:f2:3a:55:
         b3:02:b2:5d:78:8c:f0:09:91:df:e6:7a:1c:8b:6b:74:ac:a1:
         bb:73:8c:27:ed:4b:1a:2b:a1:13:29:0f:8b:7b:2c:2a:7a:44:
         74:c7:0d:c9:58:29:93:a7:30:59:df:4c:e7:14:06:1b:dc:05:
         3c:bf:04:86:5a:0d:51:60:0a:33:bc:35:76:54:10:8c:8f:e2:
         94:73:d5:e5:f5:b6:f2:6b:22:4b:17:9f:29:6d:e6:11:c2:40:
         57:9b:47:97:75:e5:38:d5:cd:08:29:46:3f:7e:bd:d7:87:a4:
         d7:63:d4:54:d3:28:e9:a2:b1:ac:a1:9b:70:55:01:bc:e1:e1:
         79:af:4d:ca:e9:e7:fd:ab:e9:b4:f0:3e:43:36:bc:29:be:e1:
         b8:fc:cd:6e:24:f7:2a:6f:7b:9a:86:a3:61:c5:e9:7a:70:bb:
         1c:36:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org