Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/8wfZInEHAr2k_Vf9SUn3ifza-tk.roa
File:                     8wfZInEHAr2k_Vf9SUn3ifza-tk.roa (raw, json)
Hash identifier:          bfllu86uILgZVohl9qdL6cc4PdXkf6bQy/9ql90Qauk=
Subject key identifier:   F3:07:D9:22:71:07:02:BD:A4:FD:57:FD:49:49:F7:89:FC:DA:FA:D9
Certificate issuer:       /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial:       01856F0224561309708851114628877A3737
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/8wfZInEHAr2k_Vf9SUn3ifza-tk.roa
Signing time:             Sun 01 Jan 2023 20:24:49 +0000
ROA not before:           Sun 01 Jan 2023 20:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51903
IP address blocks:        195.26.92.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:24:56:13:09:70:88:51:11:46:28:87:7a:37:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
        Validity
            Not Before: Jan  1 20:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f307d922710702bda4fd57fd4949f789fcdafad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:fb:4b:59:8e:cc:23:af:f6:aa:d1:fb:82:
                    d8:f9:5f:79:b0:06:6d:87:ba:3b:5d:a9:65:d8:0d:
                    66:0a:c1:1f:cd:07:22:7f:5c:f2:43:34:4c:97:fb:
                    77:0f:75:e7:3b:84:22:81:68:a3:34:f0:bd:f6:d0:
                    7b:30:3a:29:f8:b3:8b:37:5c:6f:af:27:a1:67:35:
                    8c:2c:07:0d:da:04:2f:3b:c0:48:6b:b2:58:0e:85:
                    72:c9:1c:e7:a7:73:3a:3e:84:cb:ea:00:0d:4e:ba:
                    92:68:df:fc:e3:4f:c8:03:59:69:fd:9f:89:79:9f:
                    a4:4a:47:e8:c5:47:8f:41:67:c4:86:6c:e1:68:66:
                    d0:f9:7f:50:eb:de:8e:ec:b4:1b:09:1c:5b:09:1b:
                    0a:ed:02:72:2c:ea:f3:10:ea:c9:7d:7b:2f:0a:6d:
                    37:27:37:29:99:2c:08:ae:c5:cb:f4:29:ac:3c:1b:
                    46:15:00:b9:83:a4:31:f2:dc:2c:e6:4b:29:93:52:
                    75:6e:78:42:90:cd:ba:b1:4b:13:06:7b:35:fe:3d:
                    f9:f0:ed:2f:4c:4a:2a:71:77:af:7b:0c:55:c7:43:
                    3b:d0:28:32:ba:1d:5d:31:83:a4:c1:b1:5c:96:00:
                    3d:6f:7f:12:a9:f3:9e:b5:fb:6b:60:e0:6b:7d:07:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:07:D9:22:71:07:02:BD:A4:FD:57:FD:49:49:F7:89:FC:DA:FA:D9
            X509v3 Authority Key Identifier:
                keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/8wfZInEHAr2k_Vf9SUn3ifza-tk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:71:8d:37:a1:32:02:2e:0c:a8:c7:af:65:6d:0f:bd:4d:fe:
         c1:8c:8b:0c:2a:17:06:db:c4:39:e4:4e:7d:74:af:68:0f:5b:
         37:1a:38:b4:a2:89:69:f0:25:7d:ea:8b:bf:1f:30:05:2b:6a:
         23:b8:fd:a3:8b:09:ff:93:41:ea:da:c4:83:38:1e:6d:d5:f5:
         51:8d:26:8e:ee:6c:03:ac:41:68:ef:9f:c5:3d:af:bb:0e:7b:
         cc:1c:2f:89:af:93:a8:1d:05:93:52:76:97:b5:c2:b7:db:8d:
         61:96:d7:90:86:cd:23:c6:97:a8:f9:ae:94:4b:02:44:90:d7:
         d6:7b:14:cd:57:c1:aa:1b:3f:af:e6:6c:e6:9a:10:8a:88:37:
         a8:18:9b:ee:0b:1f:38:f1:fe:84:82:09:3f:67:ac:9d:01:c8:
         7e:68:ee:88:69:f8:86:a3:a4:00:94:e8:7f:fc:4b:f0:7a:a5:
         94:2d:b1:ab:36:34:06:65:cb:0e:cb:85:01:cb:0a:0d:7f:1b:
         6a:71:d2:17:84:29:4f:f4:67:c9:06:fa:8a:e3:54:55:36:ce:
         cb:78:5a:68:9f:f6:2d:f3:4c:a6:9b:5f:00:97:5e:bf:74:ce:
         b6:93:64:4c:a6:bf:87:06:5e:59:60:8b:7c:75:d0:e5:58:49:
         73:ff:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:48 2024 by rpki-client on console-fra.rpki-client.org