Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sp5dRn6H2QgCOX3EQaSfMdUQ6qA.roa
File:                     sp5dRn6H2QgCOX3EQaSfMdUQ6qA.roa (raw, json)
Hash identifier:          fj2u9EqHmDIRxxtMoXvuESY3142yKD++KwMWMoe4bYs=
Subject key identifier:   B2:9E:5D:46:7E:87:D9:08:02:39:7D:C4:41:A4:9F:31:D5:10:EA:A0
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF961A1452A61B7977A2ACF8512FF9A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sp5dRn6H2QgCOX3EQaSfMdUQ6qA.roa
Signing time:             Mon 02 Jan 2023 00:54:52 +0000
ROA not before:           Mon 02 Jan 2023 00:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3187
IP address blocks:        92.247.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:61:a1:45:2a:61:b7:97:7a:2a:cf:85:12:ff:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b29e5d467e87d90802397dc441a49f31d510eaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:bb:71:d6:89:86:c7:66:11:35:cf:95:6f:
                    5a:b5:d8:78:01:a7:1b:b6:3e:6d:66:3e:4f:a5:f3:
                    9a:4c:70:61:e9:b4:28:33:e2:a2:2d:0a:16:a3:a1:
                    11:74:2c:03:4d:8d:ea:05:71:95:26:ef:87:d3:e1:
                    81:45:67:7b:7e:ee:72:65:2b:43:82:ca:51:65:51:
                    e4:f4:6f:5f:ee:45:f9:eb:5c:ca:50:f0:91:e9:6a:
                    e9:fe:a5:0f:26:43:5c:ac:19:25:71:63:05:a2:e5:
                    57:19:cb:b2:4f:7f:c4:e8:04:b7:22:57:40:b0:ac:
                    01:e0:2f:dc:a1:2c:84:1b:6a:34:11:b6:9e:06:28:
                    b5:a2:41:b1:71:85:38:e3:a6:b2:2a:43:15:e9:a7:
                    77:0e:f9:3b:9f:90:39:68:fa:08:46:8f:f5:0d:8b:
                    7a:7f:c8:51:25:39:87:eb:31:2e:9d:c9:c5:57:d7:
                    1e:d1:d8:82:1c:f8:98:ce:f1:6c:d3:62:ac:36:1b:
                    cb:80:8d:93:4c:e5:e0:52:33:c5:e3:d3:16:ae:bf:
                    a6:db:e1:e5:92:a2:eb:1b:70:8f:7c:73:c0:74:60:
                    34:00:93:c2:6e:d2:59:cf:98:5e:9c:29:8d:fa:66:
                    ed:dd:65:51:df:da:72:e7:b3:3c:9e:28:7d:de:b0:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:5D:46:7E:87:D9:08:02:39:7D:C4:41:A4:9F:31:D5:10:EA:A0
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sp5dRn6H2QgCOX3EQaSfMdUQ6qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:f5:6c:f5:7b:d8:fa:d9:05:78:5c:62:b5:0f:8a:fd:e2:3a:
         0d:f2:c6:99:e1:3c:68:56:b9:94:1c:55:45:53:bd:1b:df:14:
         f9:0d:11:f3:ac:a1:63:af:d7:59:72:70:6e:63:17:d6:ce:1d:
         dd:d2:8d:5a:49:cb:fe:34:5d:79:fb:82:f3:5a:71:a7:08:c4:
         c1:7b:6c:46:49:14:dd:a5:e1:bb:a4:07:d6:9f:e1:b5:5e:7d:
         f3:c8:a0:cb:58:4c:19:8f:05:1d:45:a6:e3:2d:3a:c9:fe:07:
         e7:fc:fd:8b:0b:a1:56:17:4b:51:88:5b:20:bf:8a:7a:b7:6c:
         eb:08:e6:71:43:4a:9f:86:2e:1f:db:f4:07:60:1d:f3:cc:fd:
         97:6a:a5:45:81:be:d0:45:27:43:77:dc:af:25:c4:7d:6a:e2:
         5a:7f:d1:57:8e:86:4f:4d:2f:1e:0d:e4:45:55:98:49:03:8c:
         30:1d:44:d5:5b:7a:7c:13:bc:bd:6a:1d:8c:d9:e6:81:99:9a:
         4d:b3:7a:12:d3:e7:2e:c9:32:53:9c:82:90:ba:de:ef:91:5c:
         90:f5:77:8b:b9:94:ba:20:21:e6:3c:a2:8b:48:78:64:bc:22:
         82:28:c5:8d:73:9c:81:bb:bb:84:00:b2:85:8b:de:16:78:a2:
         43:ba:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org