Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/d9qtFMHiXtBXaBpc4rbKy_Yi9Xk.roa
File:                     d9qtFMHiXtBXaBpc4rbKy_Yi9Xk.roa (raw, json)
Hash identifier:          ZCuBisI/CauP21GrFpwhnGKUJBxT0kS5jsiCGJwkD+8=
Subject key identifier:   77:DA:AD:14:C1:E2:5E:D0:57:68:1A:5C:E2:B6:CA:CB:F6:22:F5:79
Certificate issuer:       /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial:       0185708293AE80FCF61300F6412F6939CACB
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/d9qtFMHiXtBXaBpc4rbKy_Yi9Xk.roa
Signing time:             Mon 02 Jan 2023 03:24:43 +0000
ROA not before:           Mon 02 Jan 2023 03:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35278
IP address blocks:        193.222.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:93:ae:80:fc:f6:13:00:f6:41:2f:69:39:ca:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
        Validity
            Not Before: Jan  2 03:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77daad14c1e25ed057681a5ce2b6cacbf622f579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:9d:6a:72:b6:d0:98:71:d8:34:07:41:f0:
                    20:04:87:d9:08:b1:9d:bd:1d:b5:65:32:35:b4:be:
                    03:54:df:aa:89:ab:e1:54:af:46:3b:2c:f2:23:05:
                    b4:27:85:d8:c9:5a:1a:fb:3d:05:70:da:dd:94:01:
                    a1:4c:07:ef:95:73:e1:01:6c:98:9b:ac:76:b3:1e:
                    5b:b0:e5:2e:8b:b1:04:39:f9:5a:b0:92:d3:3a:73:
                    28:85:2f:da:90:b7:d8:90:5f:33:3f:20:aa:9e:3a:
                    6e:47:44:5f:f6:fd:89:6c:b5:a0:76:01:37:24:d7:
                    4f:20:8c:f4:cd:57:76:de:fd:fd:09:1e:45:a6:d1:
                    4e:cf:58:d5:94:65:8c:d7:44:c6:6d:a1:a6:d0:87:
                    a9:0e:4c:e6:2e:d3:4b:51:4f:92:c8:57:5d:31:6e:
                    52:55:72:04:4b:9d:7f:5d:f7:d2:db:e4:70:b8:d7:
                    bd:a5:d1:00:92:37:95:a7:5a:0a:34:fd:88:70:1e:
                    39:f1:5f:2f:8e:2e:cb:00:0b:ea:91:7c:1e:6f:f8:
                    97:57:41:87:11:b0:79:c5:9b:83:72:d3:c3:3f:fd:
                    0c:70:a0:44:e0:55:c8:11:d5:ed:8b:a1:9a:d7:cc:
                    da:b0:b3:fb:5d:d0:ec:e2:f2:ab:77:18:67:56:5a:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:AD:14:C1:E2:5E:D0:57:68:1A:5C:E2:B6:CA:CB:F6:22:F5:79
            X509v3 Authority Key Identifier:
                keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/d9qtFMHiXtBXaBpc4rbKy_Yi9Xk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:67:73:01:a4:2c:2c:14:6a:34:b1:1c:4f:bb:a2:cd:d8:
         fc:e0:55:62:db:3f:55:66:dd:27:05:b2:2d:54:73:8c:45:d5:
         89:87:3d:48:a7:f2:70:e1:64:0b:a1:b7:a1:e9:f5:1e:7a:e4:
         e4:b3:a8:2d:93:b2:ab:4a:f8:e9:c8:69:ac:b4:49:ef:ec:ec:
         19:92:f9:95:63:08:01:04:39:09:be:a3:d7:e8:b2:ed:89:87:
         ed:4e:60:55:30:23:99:79:8c:2f:88:5b:de:ed:ca:10:7c:11:
         4b:93:0c:2c:44:a4:8c:a7:b5:ef:d0:3f:c6:ce:bf:f4:b7:e6:
         a2:2b:49:b3:2f:cf:6e:1a:85:60:45:fd:1f:2b:eb:d7:25:1b:
         a5:c2:0a:4e:56:38:67:18:40:f9:80:d7:8a:8a:03:4f:a0:55:
         f8:53:9d:03:af:c6:f9:cb:1f:07:dd:b3:17:c8:c0:99:5b:46:
         e8:b5:06:b9:a7:9c:a0:ad:8e:8c:7a:c4:bc:5b:74:3e:1c:00:
         8e:07:e1:71:00:7e:17:c3:fe:32:4d:de:b8:bc:36:9a:15:44:
         66:f0:68:4a:d2:51:e1:a9:90:2e:c3:84:38:3b:74:1f:1a:95:
         1c:3a:e5:2d:fa:4d:02:c2:4b:49:e9:31:45:b6:5b:8a:36:02:
         ab:96:02:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:35 2024 by rpki-client on console-ams.rpki-client.org