Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7046.roa
File:                     AS7046.roa (raw, json)
Hash identifier:          T+cFcpvsSCePaleVkv0ujvkDU3QKQoxCKV7frL5+WpM=
Subject key identifier:   D5:0A:04:D7:01:AE:6D:1C:9D:A9:80:83:A1:51:C4:D7:D3:A7:E7:FD
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       012653C5E84A6947EFB37E2AEB967B0BECC536E8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7046.roa
Signing time:             Wed 16 Oct 2024 08:10:51 +0000
ROA not before:           Wed 16 Oct 2024 08:05:51 +0000
ROA not after:            Wed 15 Oct 2025 08:10:51 +0000
asID:                     7046
IP address blocks:        92.113.86.0/24 maxlen: 24
                          92.113.89.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 18 Oct 2024 07:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:53:c5:e8:4a:69:47:ef:b3:7e:2a:eb:96:7b:0b:ec:c5:36:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Oct 16 08:05:51 2024 GMT
            Not After : Oct 15 08:10:51 2025 GMT
        Subject: CN=D50A04D701AE6D1C9DA98083A151C4D7D3A7E7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:f3:57:af:6b:6a:57:ad:1a:d5:cf:6d:a6:
                    7e:ee:8e:5a:03:9a:87:84:45:1d:e3:8a:02:9d:e9:
                    e1:5d:c3:09:e7:94:6d:cd:7d:7e:56:b0:91:e5:2b:
                    9e:a7:76:31:d4:bd:f3:38:db:f5:82:47:fc:7f:99:
                    e0:8f:c5:68:50:6b:44:dd:28:ff:6c:4f:25:4a:bc:
                    79:da:0a:33:b9:50:d1:fe:2a:4a:c9:12:c5:85:f5:
                    1c:c6:12:7b:d6:40:87:c7:30:cb:d8:ce:f1:b2:bd:
                    5b:97:bd:57:35:07:6c:ef:47:06:fb:67:d5:b5:f9:
                    e5:10:65:be:85:ed:9d:3a:78:01:86:82:c2:11:46:
                    10:71:72:d6:b8:79:65:07:d8:fa:4b:cc:01:52:3f:
                    0c:09:d4:fc:aa:f6:34:87:ff:08:1c:54:88:47:96:
                    73:10:dc:e3:2b:ee:c6:9d:08:75:73:8a:d7:c6:08:
                    56:e1:4a:d6:35:9d:d6:b6:6e:a6:c5:59:f7:30:0c:
                    af:81:8b:f3:a5:22:15:1a:bd:65:76:41:57:8f:32:
                    a3:7b:a9:1b:3a:62:33:7e:4a:4f:57:76:13:9a:57:
                    22:38:d9:57:98:b9:a8:08:6d:0f:1c:a8:6f:2f:88:
                    2d:8b:c5:a2:0f:3a:e9:95:62:92:c5:b3:6e:23:4b:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0A:04:D7:01:AE:6D:1C:9D:A9:80:83:A1:51:C4:D7:D3:A7:E7:FD
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.86.0/24
                  92.113.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:04:53:da:5f:58:5d:9c:a6:98:c3:6f:14:5e:c8:f3:63:08:
         c6:7d:20:73:be:8a:7c:1d:c0:9a:e1:a3:73:ad:80:f1:1b:9d:
         dc:46:8f:3e:a9:a7:88:be:04:57:b8:6e:67:56:54:3b:9e:90:
         31:3c:71:97:70:57:12:bf:c6:95:50:30:3e:d7:ea:04:3e:9f:
         75:15:a7:03:0a:40:db:11:34:b9:95:f2:3e:90:ef:99:4c:15:
         20:b8:91:2d:8d:09:a0:8b:d3:46:ec:f5:07:57:c7:e2:e5:8e:
         8d:a2:87:4c:16:93:aa:ff:92:15:32:86:a1:a4:51:96:3e:c9:
         3b:b9:02:35:a8:08:f1:b0:cc:f2:00:28:99:2a:f7:b0:fc:23:
         02:f9:c5:0c:ec:cc:9c:f8:83:9d:48:c5:61:15:63:88:a7:76:
         c7:98:88:f7:81:22:f9:07:06:37:a6:27:ca:8f:92:4e:ae:40:
         a9:d2:16:8e:6f:45:db:14:67:29:37:98:6c:76:96:a4:c7:b0:
         a8:b9:18:8d:1e:ff:ea:12:66:7e:fc:c7:a1:3d:53:29:ab:19:
         81:89:c2:da:31:3e:30:bd:7f:73:c7:e0:82:1a:cb:0e:62:4f:
         29:73:79:84:79:e5:e0:be:a9:c6:cb:68:b5:7f:68:93:12:d8:
         33:d4:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:53:25 2025 by rpki-client