Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa
File:                     PcC9opXoc2bOymyvMmJ9CPv7DH0.roa (raw, json)
Hash identifier:          J2A8J1aEvgoQYgqpb2ZS5/TySjt3eoyMBI71zbZKevU=
Subject key identifier:   3D:C0:BD:A2:95:E8:73:66:CE:CA:6C:AF:32:62:7D:08:FB:FB:0C:7D
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       018C38B80C458AFFAAC7A65A78B03DB62263
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa
Signing time:             Tue 05 Dec 2023 06:43:54 +0000
ROA not before:           Tue 05 Dec 2023 06:43:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215906
IP address blocks:        92.61.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:38:b8:0c:45:8a:ff:aa:c7:a6:5a:78:b0:3d:b6:22:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Dec  5 06:43:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3dc0bda295e87366ceca6caf32627d08fbfb0c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:ac:78:77:44:b6:29:09:3a:47:3c:e8:01:
                    6b:6e:89:17:6c:cf:dc:69:0f:4e:73:44:b7:02:6c:
                    b3:58:62:c4:19:7c:91:6c:09:1a:40:99:71:61:8a:
                    97:f6:2d:89:cf:b1:15:bc:8f:b2:8e:e3:41:71:74:
                    c9:73:fe:3b:54:98:c6:bf:8c:82:19:61:42:a7:c3:
                    eb:26:5c:5c:42:54:2c:4f:b7:b5:b6:46:67:31:7a:
                    53:69:da:c1:e6:26:e5:9b:c5:12:6e:b3:1e:91:31:
                    e5:e6:8e:69:71:aa:e4:64:20:df:74:7d:d8:a8:e7:
                    ca:a4:6c:cd:77:5e:a1:1e:4e:86:b1:eb:12:cc:b3:
                    66:e0:c6:11:96:6b:61:6b:e5:ac:75:70:79:dc:45:
                    80:ce:30:a2:e7:7d:2f:18:fc:bc:4b:74:78:be:9b:
                    67:17:30:6f:31:e3:5a:b4:75:a8:0c:3e:f9:33:34:
                    d0:31:19:11:98:66:e7:6a:99:70:73:57:b7:90:6d:
                    e0:6f:87:26:f6:80:fe:62:86:1f:fd:d5:b0:ce:40:
                    99:62:4a:b2:cc:35:e7:39:33:20:c5:36:d3:e0:82:
                    4a:52:88:28:e2:48:19:58:3e:ac:7d:b5:34:47:9f:
                    8a:29:26:f8:c3:4d:1e:19:ad:ce:ef:46:3b:bf:bf:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:BD:A2:95:E8:73:66:CE:CA:6C:AF:32:62:7D:08:FB:FB:0C:7D
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/PcC9opXoc2bOymyvMmJ9CPv7DH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:34:d2:52:33:e7:8d:ea:b3:fd:77:94:ad:1e:db:45:e4:ed:
         38:75:90:9a:50:9a:83:82:21:69:1f:14:ce:03:b9:18:a1:20:
         5f:8a:e0:a2:3e:6c:06:ab:ec:94:da:1d:4a:ac:a9:d3:a6:a2:
         23:9d:b1:6a:4f:45:14:20:fc:da:14:61:74:8d:e8:65:29:12:
         b1:13:c6:ff:3b:8d:2a:ce:6a:76:a8:21:83:c8:3d:d9:4b:be:
         1d:5a:64:59:b9:f1:85:1c:10:9f:ba:a4:78:d8:c7:1c:4b:7d:
         15:fe:b0:5b:40:3f:1a:4a:35:f2:84:86:82:a1:74:ea:df:2e:
         17:95:4c:1e:0c:01:10:eb:3e:48:c8:b0:34:a3:8f:9f:b3:72:
         11:e0:04:72:2a:dd:53:7f:90:ef:af:66:4d:f8:42:30:c8:34:
         8c:a2:d9:1f:b9:b0:76:ad:cf:14:4f:a3:58:4c:1b:c6:09:81:
         17:9e:93:da:24:ad:d8:0c:31:55:0c:09:b2:b4:4b:bc:a7:c5:
         5a:c9:fa:1f:fa:47:c0:f6:1b:9e:92:07:ff:d2:45:b3:2d:42:
         55:1a:51:6e:99:24:f7:d3:2d:ce:19:7e:85:66:80:f8:b7:88:
         6f:b2:53:49:0a:f6:c9:49:9e:64:05:33:a8:52:3c:45:64:e2:
         67:89:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org