Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BusgiEFPiRBQJPjBEwQb3VzqItc.roa
File:                     BusgiEFPiRBQJPjBEwQb3VzqItc.roa (raw, json)
Hash identifier:          oMBcnA5sZ1JHeRA37s+9c4Fu53F/TzXTZqqSkK436hk=
Subject key identifier:   06:EB:20:88:41:4F:89:10:50:24:F8:C1:13:04:1B:DD:5C:EA:22:D7
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018650580EDCE00DD641A0B4C1723120C3E4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BusgiEFPiRBQJPjBEwQb3VzqItc.roa
Signing time:             Tue 14 Feb 2023 14:33:13 +0000
ROA not before:           Tue 14 Feb 2023 14:33:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        185.246.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 15:45:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:50:58:0e:dc:e0:0d:d6:41:a0:b4:c1:72:31:20:c3:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Feb 14 14:33:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=06eb2088414f89105024f8c113041bdd5cea22d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:69:86:5f:ad:80:f8:13:43:33:55:1b:73:
                    73:10:0f:0c:4a:c4:2f:de:45:c6:67:b7:ce:71:ba:
                    89:e4:63:17:9a:d2:79:ec:9a:13:1a:b6:d3:dd:f7:
                    4a:16:a2:37:c6:92:54:c4:39:d1:df:71:7b:a1:2e:
                    2f:48:c3:7b:e7:ab:d9:7f:7c:ce:71:0d:32:81:fa:
                    f1:ef:14:b3:50:cf:33:35:70:1d:fd:c2:43:7a:e7:
                    33:89:c7:6e:0e:d8:2b:2d:22:27:86:12:30:4b:a1:
                    64:fa:74:42:41:eb:3f:c5:4d:b5:b5:80:d4:d7:a6:
                    f9:6b:83:67:e5:5a:a1:d7:4d:13:22:2b:c4:1d:7a:
                    df:f5:d1:35:18:7b:ef:aa:11:06:b3:e6:5e:24:90:
                    41:53:a0:22:c6:66:67:16:b3:48:e5:fc:5b:97:db:
                    b0:dc:8c:62:a1:2f:fc:dd:2b:57:fd:0f:2a:20:3e:
                    8d:76:19:cc:4b:cc:17:0f:ba:ea:27:9d:46:ce:d3:
                    b3:5a:be:56:1f:fc:e3:8c:57:e8:88:2d:1a:32:b1:
                    b8:cc:dc:60:3d:7b:f8:24:c9:67:0d:42:4f:03:6a:
                    79:67:b3:51:8b:df:08:61:d1:7d:64:07:02:08:04:
                    47:11:2a:e4:a7:6f:62:82:60:63:3b:63:5f:97:aa:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:20:88:41:4F:89:10:50:24:F8:C1:13:04:1B:DD:5C:EA:22:D7
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BusgiEFPiRBQJPjBEwQb3VzqItc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:bc:18:16:4d:f2:17:fd:78:58:8c:1d:73:05:b6:41:e9:
         61:e9:d0:30:d7:b6:c8:7a:f0:89:d1:01:b9:83:ea:22:3f:59:
         25:d2:ec:6f:27:34:4e:52:79:23:fe:26:93:50:f6:4d:0c:d8:
         e8:db:02:19:f3:fa:54:91:06:07:c1:e7:6a:d5:f5:cf:1e:91:
         55:54:5a:4a:65:c8:0f:6b:6c:84:fb:0c:fc:71:16:fc:df:38:
         75:61:42:a8:7c:5a:07:6f:77:51:c6:8d:ec:6c:88:3a:d0:03:
         9c:54:bd:cb:2d:19:55:53:f6:f1:48:9a:24:73:55:84:02:4f:
         84:0d:3d:0f:a6:05:d7:8a:81:93:0d:06:d6:70:45:b3:01:a6:
         c1:48:fc:96:2d:e0:d9:14:63:21:53:0c:67:f6:62:7b:0f:2e:
         b5:08:55:77:2f:49:9d:f1:ed:f1:60:ed:e6:0d:c2:9b:70:40:
         10:29:88:54:37:bb:f3:7c:a6:a2:a9:fb:d7:2b:34:f4:d3:7c:
         8a:bf:33:da:76:cc:29:96:92:ef:ac:80:56:26:b6:cc:58:70:
         c8:48:f7:cd:52:86:2f:15:97:96:e7:1e:2f:33:fd:b1:51:ca:
         88:a4:b1:a6:af:be:d0:af:e3:8a:b9:cf:d1:65:9d:11:30:97:
         2f:9b:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org