Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa
File:                     V9HndWK_jOVBe52MbPMJYyqbTF8.roa (raw, json)
Hash identifier:          e73dDrGHDNrtZCa5Us+8otPwe5epS7Urst3BhwBRz8c=
Subject key identifier:   57:D1:E7:75:62:BF:8C:E5:41:7B:9D:8C:6C:F3:09:63:2A:9B:4C:5F
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       0189D4912CD56BD9CE3361ABDCF4CD02D369
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa
Signing time:             Tue 08 Aug 2023 09:53:51 +0000
ROA not before:           Tue 08 Aug 2023 09:53:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.220.146.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 04:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:91:2c:d5:6b:d9:ce:33:61:ab:dc:f4:cd:02:d3:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Aug  8 09:53:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57d1e77562bf8ce5417b9d8c6cf309632a9b4c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:4c:46:0d:6c:3b:e6:3e:63:40:50:48:ff:
                    8e:fe:58:97:83:3e:0f:65:8c:e3:8a:09:fc:55:33:
                    09:34:91:04:ee:90:03:3e:95:11:3d:87:e2:57:2e:
                    92:ad:a8:ca:91:98:89:a3:07:be:67:f8:3f:18:8c:
                    6d:ba:70:0b:8a:5b:0f:ee:71:ee:47:2f:23:6f:bd:
                    93:f8:c7:02:ef:58:93:86:b2:26:b2:2b:f4:f7:1b:
                    af:32:9b:6c:4e:1b:92:3e:e1:85:bd:6f:76:79:35:
                    e4:2c:84:6e:8b:f1:00:f8:0f:e7:5d:3a:7d:ae:71:
                    ed:e1:ef:96:c1:13:e2:43:d8:a1:9c:87:f1:10:02:
                    dc:ab:1b:9d:e1:15:f6:83:18:9a:dc:27:c0:98:81:
                    7b:aa:1b:0f:8f:b2:0d:43:a1:78:35:51:59:0a:53:
                    b8:25:9a:45:3c:c1:c7:1f:c6:d1:e7:ec:cd:2e:c3:
                    c6:7e:b0:69:24:9d:e9:db:10:f3:ee:ab:34:53:a3:
                    9a:92:eb:93:2c:d2:b1:10:50:65:92:a9:b9:11:94:
                    a8:49:f3:e8:df:ce:b1:11:57:6a:b6:78:a6:c4:a7:
                    76:fb:da:18:a2:e2:8c:30:34:0a:62:55:29:60:9a:
                    9b:33:bd:a5:67:bd:40:6d:23:93:45:e4:59:0b:d6:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:E7:75:62:BF:8C:E5:41:7B:9D:8C:6C:F3:09:63:2A:9B:4C:5F
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/V9HndWK_jOVBe52MbPMJYyqbTF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:8b:df:44:c6:74:68:19:3e:ff:24:9e:fc:42:6e:bb:96:6a:
         04:b3:e5:20:ee:e6:50:c7:9e:24:78:1e:c2:ac:a8:86:dd:84:
         55:40:a4:ab:27:b2:61:a2:bc:b0:6d:ac:7b:b1:cb:0b:17:29:
         b3:1b:ab:37:94:61:1a:26:02:c2:50:6d:55:aa:3a:02:ba:ab:
         25:c5:d9:9d:d4:d2:71:2f:c2:3c:e8:f3:52:3a:da:e1:0c:bd:
         ef:df:e6:e4:cf:ab:59:91:c7:8e:3a:08:bc:1c:ae:e0:95:95:
         87:78:8e:0d:49:89:80:a9:58:a4:c5:a6:59:22:50:93:17:72:
         b3:47:39:24:3a:96:4e:2c:bd:1f:f2:e4:3c:d0:f6:4b:af:e1:
         a0:6b:f2:f7:d3:7c:07:94:4c:8b:53:b6:bf:7f:06:d3:ef:f9:
         5a:fb:22:24:e6:c4:6b:ec:b0:50:46:81:20:be:f3:be:b7:f0:
         6e:d3:44:79:e9:80:e8:71:76:01:d5:6c:5b:75:f2:7c:d9:1b:
         0e:72:e3:fe:ad:31:ec:cf:f5:3e:16:9c:80:c3:5e:f7:4b:a7:
         0f:22:c1:a1:01:65:a7:8b:46:a5:7e:6c:33:97:2f:cc:e4:8e:
         e1:bc:6a:ba:a6:a7:fb:28:1e:bf:e8:66:72:78:cf:28:73:0c:
         60:62:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:58 2024 by rpki-client on console-ams.rpki-client.org