Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa
File:                     aCYbjx9k8czDEnywRabDieTDto8.roa (raw, json)
Hash identifier:          F908KBCKx8f/RvqTCP0uio24pT4PDoOOEoz5TF8bVOc=
Subject key identifier:   68:26:1B:8F:1F:64:F1:CC:C3:12:7C:B0:45:A6:C3:89:E4:C3:B6:8F
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0187E20BE708879B098EB43333C8C5F9C899
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa
Signing time:             Wed 03 May 2023 14:37:23 +0000
ROA not before:           Wed 03 May 2023 14:37:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        192.145.29.0/24 maxlen: 24
                          192.145.30.0/24 maxlen: 24
                          192.145.31.0/24 maxlen: 24
                          192.145.28.0/24 maxlen: 24
                          185.252.162.0/24 maxlen: 24
                          185.252.161.0/24 maxlen: 24
                          185.252.160.0/24 maxlen: 24
                          185.252.163.0/24 maxlen: 24
                          193.148.50.0/24 maxlen: 24
                          194.11.197.0/24 maxlen: 24
                          193.148.49.0/24 maxlen: 24
                          194.11.198.0/24 maxlen: 24
                          194.11.199.0/24 maxlen: 24
                          193.148.48.0/24 maxlen: 24
                          193.148.51.0/24 maxlen: 24
                          194.11.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Sep 2023 11:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e2:0b:e7:08:87:9b:09:8e:b4:33:33:c8:c5:f9:c8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May  3 14:37:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=68261b8f1f64f1ccc3127cb045a6c389e4c3b68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:7b:d1:01:20:54:cf:63:12:05:63:62:90:
                    8b:c1:51:eb:e5:a2:66:3a:36:a5:57:11:d8:5b:be:
                    4e:48:ac:22:7f:56:26:51:92:50:a3:30:d4:51:3a:
                    dc:52:b2:6f:3b:92:60:f1:68:92:e2:52:61:d7:94:
                    e7:ed:19:11:6e:b6:bd:72:5e:f6:48:95:75:a8:b5:
                    14:08:90:9a:29:ac:86:e4:ce:44:56:2a:fa:7f:d3:
                    95:a2:ba:77:7a:95:ec:a7:52:07:af:ca:56:65:7e:
                    4b:cc:60:6d:e9:e1:9f:94:4a:39:77:1c:96:0f:e0:
                    9c:d0:62:9e:d8:c7:c2:c3:d8:03:9c:8e:e2:11:a6:
                    0f:d2:d9:e0:6f:4b:37:d2:1e:64:e0:f1:51:27:1c:
                    91:8b:af:32:02:42:8a:20:d3:9c:fb:7b:6f:f2:9c:
                    a8:2b:bd:d3:8d:af:82:53:e7:4a:59:2a:7a:17:22:
                    f6:09:03:16:df:01:95:ef:b1:b3:cf:e4:30:75:61:
                    a9:ad:25:00:1a:04:50:c0:b7:c2:03:01:08:8d:51:
                    3a:6f:32:47:41:3b:d0:4f:04:70:3a:1a:73:f7:70:
                    21:19:1f:88:1f:66:f3:e6:11:5a:64:5c:3c:7d:b1:
                    d7:5a:a4:f2:78:0d:f3:ab:dc:99:47:cf:89:2c:41:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:1B:8F:1F:64:F1:CC:C3:12:7C:B0:45:A6:C3:89:E4:C3:B6:8F
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aCYbjx9k8czDEnywRabDieTDto8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.160.0/22
                  192.145.28.0/22
                  193.148.48.0/22
                  194.11.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:af:f0:5e:ca:df:63:5b:da:34:e8:44:cb:f2:73:a3:47:56:
         9f:00:fc:e4:b4:c5:3d:a5:ac:cc:39:44:d3:57:e1:23:f1:0f:
         88:92:dc:55:b7:be:86:c4:e6:e6:4b:93:7e:5c:cb:d0:db:da:
         65:74:81:f1:16:4c:a1:32:47:30:ea:32:d1:8b:29:d2:93:b4:
         f6:e9:d1:3a:7d:6b:be:cd:8a:da:22:5e:1c:42:a8:ad:1e:b4:
         86:98:2f:c5:ce:19:2d:38:b2:33:15:0e:d2:b1:24:52:a3:5e:
         73:8e:6d:16:c8:ca:27:4d:49:f3:b9:19:c0:ce:51:b3:16:03:
         a4:9e:88:51:d1:c7:5d:83:74:e8:c4:75:9a:2b:fa:0b:57:41:
         66:02:3a:89:2b:3a:3a:de:6a:80:ce:4d:39:73:ae:71:41:56:
         f2:6b:66:fe:b6:1e:9d:09:2e:20:a8:92:5a:f8:bf:9f:10:d6:
         75:d7:db:08:c6:10:28:e6:22:2b:85:2a:a9:0a:67:05:76:b6:
         f7:96:df:e8:59:2c:2c:d2:64:9c:aa:d9:25:ca:6f:02:96:6a:
         0a:c3:df:62:e5:ac:46:ce:17:fc:11:2c:58:4b:d3:fc:63:b4:
         4c:e2:11:7d:c5:de:7d:76:49:54:8e:a2:96:6c:e8:4d:b9:43:
         63:bc:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:37 2024 by rpki-client on console-ams.rpki-client.org