Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JoqC0NioZXhZ6X04AccS3p5uT_w.roa
File:                     JoqC0NioZXhZ6X04AccS3p5uT_w.roa (raw, json)
Hash identifier:          sXkYyS//zKhvrfMKQ25lgraYF2OimiJJtf6vWrI8Rqs=
Subject key identifier:   26:8A:82:D0:D8:A8:65:78:59:E9:7D:38:01:C7:12:DE:9E:6E:4F:FC
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018E8E63BDEB29763F55A3D868D2935E2423
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JoqC0NioZXhZ6X04AccS3p5uT_w.roa
Signing time:             Sat 30 Mar 2024 08:04:45 +0000
ROA not before:           Sat 30 Mar 2024 08:04:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     64289
IP address blocks:        92.118.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 30 Mar 2024 08:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:8e:63:bd:eb:29:76:3f:55:a3:d8:68:d2:93:5e:24:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Mar 30 08:04:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=268a82d0d8a8657859e97d3801c712de9e6e4ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:21:23:96:31:91:f1:66:2d:09:0b:ff:b2:
                    11:38:70:6d:be:59:10:d7:56:64:72:e2:a8:ad:de:
                    68:0c:ee:1d:d8:d5:b4:c7:f6:3b:df:93:bc:70:54:
                    20:c2:00:5c:b5:07:29:8d:46:b0:26:be:ea:09:37:
                    fe:96:85:61:96:8a:a7:1c:78:8b:3e:f4:b2:b0:76:
                    37:94:91:3c:01:40:d0:00:19:dd:7c:1a:e5:37:cf:
                    34:98:78:0f:01:0e:20:cd:d3:4c:7d:3d:0d:27:5a:
                    e8:67:27:16:98:5f:3f:b0:ed:85:f1:13:ce:5e:41:
                    48:a5:c0:a2:07:1e:b2:f7:c3:81:61:ad:5e:68:0e:
                    8f:69:63:fd:ee:6e:bc:6f:94:f2:a0:45:0f:c3:27:
                    6a:46:28:44:c3:4a:10:0b:40:66:96:32:fd:f8:bc:
                    b9:97:d7:8b:75:2a:dd:38:ed:c7:7e:2e:64:4a:6d:
                    d9:b6:f4:80:c5:ec:23:8b:f8:3c:a4:84:d6:92:c1:
                    f5:49:56:8b:dd:b0:bd:95:d0:84:1b:57:41:b3:af:
                    d9:81:24:19:2f:a0:d6:46:e5:b7:05:3a:5a:53:1a:
                    c0:da:95:6c:ec:8e:dc:4a:59:25:3e:e7:0a:a8:93:
                    1e:4f:10:d1:c1:88:2b:25:f0:6d:df:03:62:0b:45:
                    16:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:82:D0:D8:A8:65:78:59:E9:7D:38:01:C7:12:DE:9E:6E:4F:FC
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JoqC0NioZXhZ6X04AccS3p5uT_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:3a:e6:99:9b:50:4d:49:41:0a:59:02:e8:2f:cd:c4:ec:
         52:ba:f4:13:c1:90:3e:0a:4c:3a:ca:57:57:71:dd:e1:b2:bf:
         d7:12:eb:cd:f5:22:97:ba:e9:3b:f7:66:68:0f:ab:53:c8:ad:
         16:6e:7d:82:61:3b:bc:5f:d5:60:d2:00:fe:c3:d2:49:24:6a:
         e9:d6:48:8c:32:bc:fd:6f:b5:7d:70:9f:63:dd:80:c2:b2:ac:
         9f:d9:c0:8b:1e:b7:0f:16:94:27:86:43:99:7d:19:7d:44:65:
         98:2a:e6:6b:18:14:d2:af:3a:50:c7:65:5b:ac:55:c3:71:eb:
         8c:02:e0:95:cb:43:d6:d7:fa:1f:bf:08:24:18:43:0f:43:8b:
         5d:b8:ce:61:88:98:7f:f2:47:ad:61:23:5c:1f:ea:e4:83:81:
         1d:9c:42:d8:b3:31:7b:0b:81:7a:7f:fc:57:f6:95:58:aa:29:
         0a:c7:a6:67:ec:8c:d0:ea:ae:b3:28:4a:81:d8:7b:ba:53:6a:
         f2:99:b0:55:4a:a7:af:3c:09:74:d4:73:7a:52:49:f3:7b:c9:
         0c:1b:30:a7:c3:80:93:dc:a3:00:a7:ae:22:26:20:ca:8c:27:
         16:8e:7e:fd:12:c2:4d:5c:56:27:c5:c4:d2:13:3f:a7:1b:30:
         c3:af:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org