Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa
File:                     U-Y8TrABoyQ7r-jlMhrrno0lINg.roa (raw, json)
Hash identifier:          5Xe6kIFdB/mg2fhKXbM49JsfVelfETVgjsglwlVc//w=
Subject key identifier:   53:E6:3C:4E:B0:01:A3:24:3B:AF:E8:E5:32:1A:EB:9E:8D:25:20:D8
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       018CC6B935E6DD37635B767D17A05323D663
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa
Signing time:             Mon 01 Jan 2024 20:31:15 +0000
ROA not before:           Mon 01 Jan 2024 20:31:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7018
IP address blocks:        92.119.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jan 2024 14:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b9:35:e6:dd:37:63:5b:76:7d:17:a0:53:23:d6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jan  1 20:31:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=53e63c4eb001a3243bafe8e5321aeb9e8d2520d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:32:19:1e:f5:18:5d:b3:25:8e:4b:a4:ef:
                    9b:5a:4a:ed:1d:f4:b8:fd:ee:d1:15:bc:5f:99:0b:
                    8f:24:12:d7:20:e2:b7:4f:24:23:db:90:12:cf:68:
                    a9:e5:2d:1f:0b:d1:d8:a3:5f:77:06:50:94:87:67:
                    b0:34:d7:bb:af:3f:c8:af:d1:95:1a:fa:40:ea:7a:
                    ac:ed:d6:de:d1:ad:f5:4b:d1:2d:9b:16:a1:66:9f:
                    85:64:ce:59:6f:fb:56:fc:71:a6:9d:a9:e3:94:85:
                    00:7a:7c:f4:c7:56:2c:e7:bf:98:cb:6b:18:fd:45:
                    92:6c:d7:7e:ed:78:2c:66:71:c1:2e:60:07:34:db:
                    8a:17:69:29:6d:d9:82:b8:80:e5:dd:87:f7:79:54:
                    43:3a:b2:0b:4e:eb:4c:25:4f:f9:f9:db:21:1c:96:
                    bd:9e:39:8e:ec:a5:70:c2:ed:d6:ab:cf:05:d2:90:
                    de:dd:1e:86:6c:b8:16:fd:77:7e:69:77:01:02:0c:
                    17:03:ad:46:d1:5f:e7:3c:95:0a:9e:00:02:68:f5:
                    f1:31:79:d9:6a:49:cf:56:a4:aa:c2:32:60:72:b2:
                    91:87:5d:35:2b:67:6c:17:1b:2c:21:29:14:29:08:
                    a7:95:94:a8:b3:5d:90:85:6e:f3:1c:55:30:fa:52:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E6:3C:4E:B0:01:A3:24:3B:AF:E8:E5:32:1A:EB:9E:8D:25:20:D8
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/U-Y8TrABoyQ7r-jlMhrrno0lINg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:b8:15:db:a3:ed:3c:cf:92:fa:06:ad:c7:82:11:ba:c6:
         3c:c8:b9:44:21:b4:f4:7a:5d:21:b5:25:e5:f2:48:72:ca:2b:
         24:f6:a5:87:8c:b2:57:0c:e2:e4:cf:75:66:c9:ea:46:bc:5f:
         24:a4:5a:51:06:51:e3:6f:27:14:3e:48:58:ec:4d:e7:d8:47:
         b3:8a:e4:0e:3b:f8:29:af:f0:2c:dd:a9:7e:18:8e:f4:40:61:
         5e:39:34:b7:b6:80:02:20:3c:2d:b4:71:7c:7e:d1:84:57:d0:
         ed:8b:d5:d4:56:49:39:1c:9e:60:a1:ff:da:34:81:45:92:15:
         bb:34:2c:f4:08:d2:d9:6e:0e:61:0e:fe:a6:4f:89:42:9e:9d:
         25:f7:7e:72:37:8c:e2:23:49:45:5a:1c:21:76:05:9a:9b:d8:
         84:36:6b:c0:d4:1f:f3:ff:c1:75:6a:02:0b:09:d9:b8:a1:8c:
         57:9b:6e:38:4d:74:36:72:bf:d0:99:21:b8:1f:b7:98:c0:80:
         be:f0:16:e4:2d:59:f1:8a:4e:23:c1:85:37:5f:0c:50:87:3f:
         bb:f1:84:33:73:63:32:f8:04:0e:26:b0:e5:89:a2:8d:31:7f:
         af:3d:e5:07:68:8e:5b:05:46:1b:5e:d7:55:19:11:0e:e9:43:
         f4:07:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:54 2024 by rpki-client on console-fra.rpki-client.org