Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hv9YDw7YuvjP6O1r_8TzrplcRVI.roa
File:                     hv9YDw7YuvjP6O1r_8TzrplcRVI.roa (raw, json)
Hash identifier:          C9rJPsbO9KV0ErHjUtutwXHgV184bcJV97yrvNbdcLg=
Subject key identifier:   86:FF:58:0F:0E:D8:BA:F8:CF:E8:ED:6B:FF:C4:F3:AE:99:5C:45:52
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018570154473EB776F6DDEF440F21ECC8852
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hv9YDw7YuvjP6O1r_8TzrplcRVI.roa
Signing time:             Mon 02 Jan 2023 01:25:20 +0000
ROA not before:           Mon 02 Jan 2023 01:25:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55286
IP address blocks:        93.92.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:15:44:73:eb:77:6f:6d:de:f4:40:f2:1e:cc:88:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 01:25:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=86ff580f0ed8baf8cfe8ed6bffc4f3ae995c4552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:21:e1:68:94:f0:39:72:61:40:bb:20:30:86:
                    29:f8:b7:c2:d3:46:12:66:f6:f7:aa:ea:b5:af:1c:
                    81:b3:7d:84:2e:6a:1a:1e:54:fb:02:1f:0f:82:d2:
                    92:f1:ee:b5:f0:14:3e:49:45:ee:ce:43:72:4c:52:
                    29:76:aa:1d:3c:81:3a:56:78:a3:0b:fe:6d:35:9e:
                    8f:4b:0c:6f:d3:f4:5c:01:c8:fb:bc:e8:f4:3e:fc:
                    f3:ae:d9:2a:14:fb:3e:88:ee:44:69:7c:74:75:24:
                    a5:66:5b:f0:b1:fa:01:ae:e9:f7:c4:cd:6b:81:45:
                    ff:0c:8b:c4:29:32:df:31:e2:84:4a:88:4a:a6:16:
                    c7:ae:f5:53:d0:cc:eb:c9:2d:38:36:a0:93:fa:a5:
                    0c:ea:6f:db:91:e8:52:23:8c:ab:21:f5:90:6f:ec:
                    57:45:ee:0a:fa:29:96:2c:ef:a8:ca:86:07:14:8b:
                    7a:5e:b1:57:1c:9a:35:0b:60:2e:02:59:66:08:c0:
                    f8:1a:1a:4e:2a:30:db:0d:ce:62:93:55:0c:96:d1:
                    cb:b3:63:8e:a3:06:e5:44:0c:e2:d1:9d:8a:a8:6b:
                    3b:c5:eb:be:5b:8c:1a:a8:05:d4:bd:2a:f3:d1:f2:
                    50:e5:ea:a5:ce:a6:11:e2:e6:1e:47:8a:57:d0:d7:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FF:58:0F:0E:D8:BA:F8:CF:E8:ED:6B:FF:C4:F3:AE:99:5C:45:52
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hv9YDw7YuvjP6O1r_8TzrplcRVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:80:64:ce:d3:93:21:e0:62:f5:a5:64:29:9d:50:e6:30:49:
         c6:b3:a3:2d:7d:7e:3a:68:97:f1:53:8b:a9:9e:0e:e1:c5:94:
         ef:7e:12:78:28:d0:0e:b1:12:7d:ec:1e:95:03:b3:6d:ab:b3:
         9d:e3:df:83:84:92:46:27:eb:a0:55:8c:8b:d5:0e:66:d6:b9:
         54:d5:05:68:5d:17:b3:95:a0:ad:df:24:f1:91:c0:a8:f1:61:
         8b:dd:8a:a6:4b:75:ad:48:dc:cd:48:b4:29:eb:cb:03:37:85:
         8b:58:84:d6:3a:4d:bd:31:c4:a1:f5:72:c6:a0:22:c5:81:ac:
         3d:bb:2a:f3:1a:0c:d5:51:90:ba:1c:7e:e8:b6:84:19:c1:32:
         d7:ea:dd:03:13:f6:9d:b9:0c:81:1c:85:b5:06:43:7f:50:8a:
         98:4e:57:8a:17:76:65:dc:7b:52:52:f6:b6:9c:da:99:fa:dd:
         4d:15:3b:48:a1:de:b1:e5:71:e4:16:10:ec:88:1b:8b:4f:72:
         ee:2d:e2:82:91:41:4e:a9:85:2e:48:ed:c6:67:b5:7d:2e:7b:
         5d:75:cf:9b:b1:54:60:ff:58:0a:73:48:42:7c:a0:08:5a:e6:
         35:d2:a7:1b:75:0a:7d:db:d6:79:20:8c:29:9b:c1:b1:79:89:
         7d:59:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org