Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/iD6f60M5A3s2ZMhNFsnvOHqgN9s.roa
File:                     iD6f60M5A3s2ZMhNFsnvOHqgN9s.roa (raw, json)
Hash identifier:          Xsy9Tsh8vawGVYkyzqXchvcE0M2QM+2LvBBad+3iAhY=
Subject key identifier:   88:3E:9F:EB:43:39:03:7B:36:64:C8:4D:16:C9:EF:38:7A:A0:37:DB
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       018A0E6CBAB30F8B81AE9D641CDCEB4645DC
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/iD6f60M5A3s2ZMhNFsnvOHqgN9s.roa
Signing time:             Sat 19 Aug 2023 15:32:01 +0000
ROA not before:           Sat 19 Aug 2023 15:32:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198802
IP address blocks:        92.61.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:0e:6c:ba:b3:0f:8b:81:ae:9d:64:1c:dc:eb:46:45:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Aug 19 15:32:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=883e9feb4339037b3664c84d16c9ef387aa037db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:b4:1c:02:2a:8e:ad:7a:bd:e6:8f:3a:10:
                    cf:a2:a7:7b:6b:3e:10:b6:7b:00:b9:18:00:56:75:
                    fd:a9:a3:7d:09:66:27:ff:ad:b9:b6:62:f4:b1:d2:
                    89:ce:e1:5b:9a:d3:bd:73:fa:6d:54:24:d5:ab:89:
                    64:d3:d1:2d:e9:7b:70:e2:b3:17:c7:f3:92:78:fc:
                    63:5b:a9:6e:9b:9e:7e:bd:c0:ba:dd:66:16:d6:61:
                    0a:8d:7a:8e:2d:17:30:3d:fb:b6:0c:b2:a7:0a:12:
                    47:f2:74:9a:0b:29:bb:dd:93:e3:c4:19:3e:08:29:
                    a5:ef:5d:48:4a:65:1c:6b:9e:f4:77:47:c4:3e:15:
                    1e:44:bb:fd:71:fa:70:4b:0e:09:da:14:6f:27:0f:
                    13:8e:eb:59:75:a9:15:7f:8b:69:c1:60:8e:3c:be:
                    f1:1e:c7:fe:7e:e0:94:03:e0:99:bf:63:15:14:a0:
                    90:ef:c9:80:3c:b0:54:94:fb:31:41:31:65:1e:b5:
                    39:52:57:4a:68:27:9b:7c:85:b0:f8:32:be:58:a3:
                    1f:01:ab:c3:87:8e:df:d6:a3:ea:2a:33:f0:76:b3:
                    bb:d7:bd:eb:40:59:18:a2:e3:6a:8f:74:5c:ad:8c:
                    8c:fb:c0:62:c6:8a:dd:1b:f1:4e:7f:c0:19:8c:7c:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3E:9F:EB:43:39:03:7B:36:64:C8:4D:16:C9:EF:38:7A:A0:37:DB
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/iD6f60M5A3s2ZMhNFsnvOHqgN9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:af:5b:0b:ec:5c:06:b2:8d:04:f0:05:4b:a9:0d:cd:92:
         75:70:97:fb:89:17:12:0e:34:d9:7b:c6:9d:91:ca:d3:81:fd:
         64:a7:eb:60:83:3e:57:f8:81:7e:90:16:57:ad:77:55:1c:ee:
         af:3d:ea:36:61:dc:15:55:e5:28:a2:d5:60:89:02:de:0c:31:
         12:ed:a6:70:7f:a1:a8:bf:d0:f7:0f:22:30:49:85:dc:38:87:
         2d:1d:36:44:39:0c:af:4b:eb:a6:b4:8a:e1:d5:e0:f0:bb:c1:
         24:4c:fe:d5:7f:be:0d:e2:d6:3c:fa:5c:ce:a1:5a:53:07:24:
         b1:51:0c:1f:37:c2:24:fd:66:aa:6e:0f:46:c2:b6:17:6a:0f:
         f2:e2:f5:f3:f7:20:26:0d:bb:3f:4f:61:56:f6:05:9e:b7:24:
         75:54:b3:69:7f:56:f6:fe:64:de:fc:4f:1a:69:bc:ba:1e:d7:
         c3:2a:4d:7a:94:e6:9a:4f:61:56:dc:85:39:9d:66:f8:05:e7:
         c5:71:2c:ff:df:ad:4a:fa:fc:4c:d8:97:3a:d3:ef:0c:ff:6f:
         1e:9a:db:5f:55:ed:e5:78:54:9e:95:e1:0e:d0:47:0a:25:26:
         95:3a:7a:17:53:3d:d4:60:07:a0:c7:0d:b2:05:cf:b4:58:c9:
         20:41:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:21 2024 by rpki-client on console-fra.rpki-client.org