Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MS6x-vyjoLMNQQO7jZGkrRm3_Dk.roa
File:                     MS6x-vyjoLMNQQO7jZGkrRm3_Dk.roa (raw, json)
Hash identifier:          YL26ZNz94zU6LJIEEIqG/4uMaWlwLAwtkAuILMsqQuM=
Subject key identifier:   31:2E:B1:FA:FC:A3:A0:B3:0D:41:03:BB:8D:91:A4:AD:19:B7:FC:39
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       0185D86A19EF5A46241EDFC7F420AD678236
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MS6x-vyjoLMNQQO7jZGkrRm3_Dk.roa
Signing time:             Sun 22 Jan 2023 07:38:30 +0000
ROA not before:           Sun 22 Jan 2023 07:38:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21700
IP address blocks:        213.176.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 Feb 2023 17:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:d8:6a:19:ef:5a:46:24:1e:df:c7:f4:20:ad:67:82:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan 22 07:38:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=312eb1fafca3a0b30d4103bb8d91a4ad19b7fc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:3e:aa:e4:00:5c:93:56:49:67:3f:16:18:
                    8a:30:21:10:64:0b:08:6a:93:e8:72:9c:82:6b:25:
                    a6:6f:5f:43:aa:52:b5:f0:49:d4:f7:aa:33:94:f1:
                    1b:30:ad:ab:56:ad:5d:3b:27:88:02:08:84:9e:1b:
                    ff:02:4a:98:6c:cd:98:46:c4:3f:ee:c1:db:f9:92:
                    6a:79:e9:99:b8:c2:2b:03:1c:2a:61:de:d6:ef:b2:
                    2f:b8:d8:d6:a5:cb:03:70:2d:61:a3:2a:b5:10:b9:
                    69:d1:eb:8d:79:34:7d:d5:1a:11:ee:96:a1:f2:91:
                    5b:1e:56:b6:d8:19:62:6c:0f:c7:52:b3:ca:bf:e9:
                    d7:b0:71:6d:9e:e8:2a:2c:63:a1:42:4f:ea:52:7a:
                    5f:ce:98:0e:cd:b5:2b:48:74:21:fe:12:50:6d:05:
                    81:7f:4e:3b:bd:64:c0:be:9c:d0:7d:d7:d5:19:da:
                    91:14:1b:e1:95:fa:36:56:c8:32:a4:ca:46:6e:e7:
                    1c:53:5f:d8:be:43:2a:f1:2b:86:6e:43:63:15:aa:
                    74:3c:d0:7a:82:2f:09:af:a1:b5:fd:41:ba:1c:53:
                    5c:5d:e5:a4:9d:f8:18:65:4a:89:b8:51:11:dc:d4:
                    56:7d:81:df:53:c8:00:2b:c0:72:d4:41:03:2a:aa:
                    37:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2E:B1:FA:FC:A3:A0:B3:0D:41:03:BB:8D:91:A4:AD:19:B7:FC:39
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/MS6x-vyjoLMNQQO7jZGkrRm3_Dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:ca:05:99:d0:7a:06:fc:81:c8:01:9a:f6:29:e0:df:49:
         3e:be:e3:f6:10:bd:e2:07:3e:04:c7:49:b0:91:e0:44:af:2e:
         62:26:65:c5:d7:5e:8a:62:7c:c8:53:0c:7b:b9:3b:3d:1a:75:
         e2:aa:de:23:b2:9d:7e:c4:ef:30:47:f1:25:8a:a2:da:c3:bd:
         6e:2c:2f:44:17:cf:c3:37:9e:c2:da:38:89:b4:f2:4b:b6:89:
         4c:37:e3:64:8a:9b:43:50:f7:da:1c:0e:bb:99:00:f7:51:70:
         e2:21:1b:51:dc:11:8e:08:19:08:06:0c:25:98:1f:e7:91:89:
         20:c1:d8:4a:7c:92:a2:48:b8:33:37:35:d2:d0:26:7c:ba:63:
         22:04:b5:a5:38:81:ec:dc:5e:7a:c8:f0:6e:1d:7f:ab:52:6b:
         18:34:41:25:1c:8f:6b:26:41:dd:03:e7:ba:79:a4:31:41:be:
         99:56:f4:ec:b1:eb:a5:1d:10:e6:21:2b:e1:76:fd:b6:95:65:
         96:a8:03:05:09:ca:26:4e:17:50:90:be:97:52:55:34:76:07:
         44:7b:6e:9b:76:c4:35:0a:6f:2a:77:72:e0:c5:f9:3f:c1:be:
         8b:50:46:a1:df:86:a5:7d:6d:d0:fe:99:13:9e:63:97:9f:16:
         83:8f:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org