Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa
File:                     BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa (raw, json)
Hash identifier:          Fh3JMDwm/jrZM+SfdumMc8JOKmLthI6uXQdC+NLky94=
Subject key identifier:   05:55:27:58:4F:B9:41:E2:92:BC:AF:EF:C8:66:B7:63:67:7D:83:D5
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       018A41C32DEBC51046A35132728799DF3457
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa
Signing time:             Tue 29 Aug 2023 14:47:04 +0000
ROA not before:           Tue 29 Aug 2023 14:47:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     36113
IP address blocks:        89.46.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 13:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:41:c3:2d:eb:c5:10:46:a3:51:32:72:87:99:df:34:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Aug 29 14:47:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=055527584fb941e292bcafefc866b763677d83d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:21:b1:5c:45:86:7b:5f:69:8c:0a:8d:6d:
                    c0:db:11:2f:ce:e0:88:54:58:1c:d2:48:b8:27:53:
                    f5:43:d6:2d:00:de:ad:61:1d:d8:b9:be:3f:fa:f1:
                    0e:36:be:54:a4:c4:00:5e:8a:2a:8a:ec:1b:17:2c:
                    40:c9:e0:e6:56:50:d6:cf:fe:26:b7:8f:6e:30:2a:
                    f7:75:f2:2f:42:8c:35:e2:9c:61:60:36:78:52:f6:
                    8b:3a:2e:38:e0:8d:be:e1:66:b8:58:27:de:ec:fd:
                    6f:d5:e0:35:8f:5f:e2:68:06:db:2d:dc:6a:8f:50:
                    eb:a3:80:0b:7c:f6:c7:db:d3:8f:14:b1:e1:de:ab:
                    79:7f:c4:14:37:4a:d4:32:02:6b:c8:e4:01:8d:4c:
                    09:ec:52:52:07:9f:37:7e:b8:7a:55:8c:7c:6e:b2:
                    6a:82:b4:3d:85:33:dd:b0:dc:b1:3c:c3:99:71:08:
                    67:d7:6c:59:8c:fb:1f:e0:54:c9:01:c3:63:0a:d8:
                    59:96:0c:f2:0c:6c:b0:48:29:3d:65:bc:a9:ae:9c:
                    35:0a:e1:9f:35:f0:d3:18:89:3f:a8:19:09:9c:64:
                    69:d5:75:dc:b4:b7:b6:e2:d7:90:47:21:59:b0:88:
                    8e:d1:2c:c3:f2:5b:79:7b:65:7a:e4:ec:f8:a3:ca:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:55:27:58:4F:B9:41:E2:92:BC:AF:EF:C8:66:B7:63:67:7D:83:D5
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/BVUnWE-5QeKSvK_vyGa3Y2d9g9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.46.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:65:88:2d:fd:27:96:a8:99:77:64:a9:5d:96:2b:91:e6:ac:
         62:27:9f:68:83:af:63:45:b6:fd:dd:83:6f:fa:43:28:98:d3:
         d1:67:b3:3e:7a:0f:c1:17:30:bc:e1:9e:fd:4f:a4:42:93:54:
         a2:f1:82:c1:f2:b9:da:1a:d7:5f:87:5e:85:30:8d:ca:15:3e:
         c8:4a:d0:f3:68:94:a1:89:73:12:66:6d:c6:a8:74:99:90:ac:
         52:ec:89:66:09:12:c9:4d:09:9c:02:d2:e0:bf:04:58:7b:da:
         86:b2:01:ec:bc:bb:5c:df:01:5c:79:82:18:86:48:5a:2c:a9:
         71:94:ef:53:cf:8a:b7:22:4f:6e:f6:42:fa:54:24:a6:3b:77:
         0e:d5:27:7f:1d:fd:13:74:00:1b:31:3f:8a:0e:07:0e:fb:de:
         17:96:66:9b:40:9b:48:ad:a3:0c:48:66:14:18:ab:6a:b5:39:
         ac:d3:2e:10:0d:1e:d0:42:25:ac:e6:a1:44:c6:7e:80:74:aa:
         cd:f6:e5:ed:6e:e6:e5:04:ad:24:51:56:cb:a4:ca:61:0f:e0:
         11:ef:2a:9a:2e:82:bb:53:29:42:4c:ec:2b:a3:24:b0:f0:88:
         ac:e8:a1:77:5e:7f:38:7f:f0:a9:04:39:c2:ed:01:f6:09:40:
         9c:59:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org