Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/Md9BKAytS2pwV-9RAkAwVCoCv-Q.roa
File:                     Md9BKAytS2pwV-9RAkAwVCoCv-Q.roa (raw, json)
Hash identifier:          w9RLBxijXFCe9VQfqgxKbCNqY64/YRgeeZxAB3QNAIc=
Subject key identifier:   31:DF:41:28:0C:AD:4B:6A:70:57:EF:51:02:40:30:54:2A:02:BF:E4
Certificate issuer:       /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial:       018572FA85FCB513D722B97B5523DBF03245
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/Md9BKAytS2pwV-9RAkAwVCoCv-Q.roa
Signing time:             Mon 02 Jan 2023 14:54:58 +0000
ROA not before:           Mon 02 Jan 2023 14:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209217
IP address blocks:        92.119.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:fa:85:fc:b5:13:d7:22:b9:7b:55:23:db:f0:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
        Validity
            Not Before: Jan  2 14:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=31df41280cad4b6a7057ef51024030542a02bfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:d0:53:fd:b3:05:70:85:e0:9d:9d:19:e2:
                    2d:9a:ad:b4:df:28:eb:48:bc:b3:78:dc:41:14:48:
                    a1:2d:93:ea:5e:ed:91:61:b5:86:69:10:6d:92:87:
                    c9:ca:97:fa:d2:79:a9:55:54:66:e9:08:a5:82:aa:
                    43:b0:e1:71:7f:7f:5c:c7:2d:ae:39:63:1f:f8:f0:
                    be:ca:d6:e6:f8:43:87:f3:26:e7:f0:14:09:bc:d8:
                    8d:05:ef:f3:2c:e0:72:d1:a1:2a:c4:83:bd:af:1b:
                    14:13:3b:f6:b6:f0:82:aa:2f:85:00:af:b3:29:2c:
                    b8:f3:8f:72:1d:cc:77:3b:07:53:8c:16:52:cc:b1:
                    b3:8d:a0:61:f4:72:17:11:a2:1e:5c:27:ba:d8:44:
                    a3:77:10:31:1b:08:5a:e4:83:c6:d2:94:32:16:ea:
                    d5:cd:bc:83:2e:2e:3a:93:bb:9e:14:ed:28:f8:75:
                    bc:18:f4:78:92:51:8e:16:0e:46:c6:fd:24:14:25:
                    98:1e:75:43:d3:4d:f2:25:69:ea:67:f7:ab:06:7b:
                    56:7e:8f:40:12:f7:70:27:9d:ca:da:85:df:29:9f:
                    a2:cd:04:f9:0b:71:6c:ba:21:d3:18:2d:8f:bd:01:
                    ea:02:c1:7c:90:49:a9:95:e7:42:aa:75:d5:62:fc:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DF:41:28:0C:AD:4B:6A:70:57:EF:51:02:40:30:54:2A:02:BF:E4
            X509v3 Authority Key Identifier:
                keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/Md9BKAytS2pwV-9RAkAwVCoCv-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:3f:92:39:0c:27:53:bd:a4:d9:55:61:30:bb:0f:46:c5:
         a1:51:1e:bc:73:94:77:fb:c5:7b:a2:11:db:a0:1e:5f:69:b5:
         10:fb:3d:2e:73:66:1e:79:30:ca:6b:a6:e6:2e:16:59:00:c5:
         7c:2c:21:3e:be:19:3e:19:aa:bf:28:81:9c:4a:97:49:c4:11:
         74:b3:b7:e3:c9:92:57:84:5f:d6:59:f7:5e:71:56:52:e5:82:
         37:23:c8:27:6d:50:92:47:69:a8:dd:04:d3:9a:a0:10:60:49:
         a1:8c:68:14:8d:87:bd:9c:5a:a2:25:3f:24:c5:80:2e:9d:81:
         71:e7:1e:c7:bb:08:d7:97:79:1f:13:ce:b7:ba:16:81:38:66:
         d5:cb:40:6e:67:1e:a8:ca:8e:9c:dc:6e:44:a4:d6:e6:48:93:
         22:30:a8:f0:2f:d6:53:a5:51:ea:03:1c:ec:2f:85:98:3c:05:
         44:1c:25:41:5b:ff:3d:d3:20:45:d3:64:91:f7:dc:fe:34:f2:
         3b:9c:fc:b1:be:ac:e3:59:37:fb:16:dc:57:44:50:67:df:13:
         d1:a6:30:e7:79:18:6f:97:11:2a:8a:69:b8:ed:e4:99:23:1f:
         19:84:43:4f:60:6e:fa:a8:95:b6:df:77:2a:28:6d:35:52:25:
         42:21:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:30 2024 by rpki-client on console-ams.rpki-client.org