Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/CnrnV_TpdPWEvsA3mMTBKp-dla8.roa
File:                     CnrnV_TpdPWEvsA3mMTBKp-dla8.roa (raw, json)
Hash identifier:          cskj9V+8z97Jx33Ttc4ZIzK+LoLcJ+H4jJ6Mi4jVrIg=
Subject key identifier:   0A:7A:E7:57:F4:E9:74:F5:84:BE:C0:37:98:C4:C1:2A:9F:9D:95:AF
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       01856F1D85BA061DABC66D6B27BF4379343E
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/CnrnV_TpdPWEvsA3mMTBKp-dla8.roa
Signing time:             Sun 01 Jan 2023 20:54:43 +0000
ROA not before:           Sun 01 Jan 2023 20:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12812
IP address blocks:        185.190.29.0/24 maxlen: 24
                          185.190.30.0/24 maxlen: 24
                          185.190.31.0/24 maxlen: 24
                          185.190.28.0/22 maxlen: 24
                          185.190.28.0/24 maxlen: 24
                          193.188.131.0/24 maxlen: 24
                          193.188.128.0/24 maxlen: 24
                          193.188.128.0/22 maxlen: 24
                          193.188.129.0/24 maxlen: 24
                          193.188.130.0/24 maxlen: 24
                          2a02:f700::/29 maxlen: 29

Validation:               Failed, certificate revoked on Mon 30 Oct 2023 17:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:85:ba:06:1d:ab:c6:6d:6b:27:bf:43:79:34:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: Jan  1 20:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a7ae757f4e974f584bec03798c4c12a9f9d95af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:f5:ef:2d:7b:a6:ff:bc:90:c9:04:32:cb:
                    42:a5:dc:6e:01:2c:30:ad:c1:0e:db:bb:ed:ca:25:
                    0c:19:e1:16:fe:d0:bd:1b:70:61:d1:b9:4f:96:60:
                    15:53:b4:5a:04:69:9d:99:71:3b:af:52:f9:82:c7:
                    96:e4:7a:7e:57:b9:70:89:6e:a7:f6:ef:4d:59:de:
                    dd:3b:9b:fd:84:5d:35:ac:d5:c6:22:14:19:56:bf:
                    b4:13:06:32:48:52:ad:97:bd:b1:8b:6f:0f:6f:2a:
                    74:a7:49:f5:d8:b0:5b:5f:c5:dd:78:f0:91:3c:9c:
                    03:b7:8e:2c:17:e7:29:9e:0c:e2:41:1f:21:89:59:
                    8c:f4:9e:b9:c0:82:94:fe:b6:0f:08:ed:0e:a7:d2:
                    b0:3a:9c:7d:1f:a7:4a:10:2b:72:6e:da:b7:e9:9e:
                    ed:36:42:7c:01:46:8e:47:29:44:54:4b:cb:67:d2:
                    bf:b4:e2:44:05:ab:4d:67:47:1e:0a:46:df:01:62:
                    bf:01:4a:0e:65:f7:f0:34:65:1d:8b:c9:7d:86:e1:
                    07:f5:40:4d:13:e4:4d:df:18:93:22:af:c3:2c:a3:
                    29:f3:e8:69:d7:95:51:06:94:a1:9c:e1:e0:e0:65:
                    01:9f:53:35:06:27:18:b2:9a:3d:7a:56:f8:18:a4:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:E7:57:F4:E9:74:F5:84:BE:C0:37:98:C4:C1:2A:9F:9D:95:AF
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/CnrnV_TpdPWEvsA3mMTBKp-dla8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.28.0/22
                  193.188.128.0/22
                IPv6:
                  2a02:f700::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:26:6a:fe:90:ce:b1:b2:1c:92:5b:ca:bc:8c:f6:3a:da:
         b8:19:08:90:64:5f:cb:45:7b:fc:5e:1f:19:f4:7c:f0:7c:fc:
         98:65:c7:b3:ec:d5:95:85:7a:53:9c:0e:07:1f:a9:60:af:af:
         0a:d4:55:2e:68:65:51:90:1d:e5:0d:95:7b:43:d7:61:1d:22:
         d0:5f:3b:86:ab:55:9c:c5:17:36:2f:aa:a9:80:0b:b3:3b:22:
         3c:32:df:88:e7:f8:64:30:07:ac:72:b4:1a:4a:5c:6a:8c:25:
         6f:dc:87:19:7b:16:32:0f:79:40:cc:0d:46:65:55:07:bc:01:
         c6:a8:b1:7d:10:2d:76:62:c2:3c:de:0c:db:c9:c5:8b:c1:ff:
         85:d6:7b:bd:8b:a3:df:93:35:4b:73:b8:69:6c:46:3f:f9:d0:
         07:d3:dd:45:cb:f1:e7:13:54:8e:23:e8:36:84:12:0a:bd:3b:
         b8:7c:45:bc:0d:09:90:5a:83:0d:d1:c3:68:19:b0:d5:a2:23:
         a5:4b:4f:ee:04:5d:ef:73:29:21:79:b7:91:bb:52:37:81:48:
         24:45:a4:15:2c:a2:3f:18:d3:cd:3e:ad:d0:d4:ce:83:7a:34:
         88:d6:e2:56:1d:74:b0:c4:91:5e:ca:71:85:08:8d:3f:bb:f9:
         b7:1a:01:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:21 2024 by rpki-client on console-ams.rpki-client.org