Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jad2LYEaeyruIG2oin5svUAoGso.roa
File:                     jad2LYEaeyruIG2oin5svUAoGso.roa (raw, json)
Hash identifier:          c7ADDSB9LRzGPodLur4uZ3cMeRNRJAljo583byHr3RY=
Subject key identifier:   8D:A7:76:2D:81:1A:7B:2A:EE:20:6D:A8:8A:7E:6C:BD:40:28:1A:CA
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       018FAF779D473E2FB848D228D841BC7A194E
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jad2LYEaeyruIG2oin5svUAoGso.roa
Signing time:             Sat 25 May 2024 11:16:42 +0000
ROA not before:           Sat 25 May 2024 11:16:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21700
IP address blocks:        213.176.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 12:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:af:77:9d:47:3e:2f:b8:48:d2:28:d8:41:bc:7a:19:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: May 25 11:16:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8da7762d811a7b2aee206da88a7e6cbd40281aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:0a:0f:83:e9:af:c8:85:22:62:ae:b5:6a:
                    04:3e:80:e4:74:42:89:9c:b6:3d:52:c4:05:36:c9:
                    b5:14:3d:6d:9d:12:91:d5:46:3b:5c:b4:d7:cd:a0:
                    4c:05:78:19:71:85:9c:76:03:24:39:40:c4:00:3b:
                    bf:67:d7:5a:7c:44:46:fe:dc:b6:77:ef:58:bc:0e:
                    6d:62:3c:ff:90:67:a5:09:22:3e:10:de:2e:68:d2:
                    47:a4:58:c0:67:7b:14:2c:46:0b:b3:3f:61:23:47:
                    c0:71:1f:a3:b4:31:7a:d0:77:5a:a9:90:ca:2d:ec:
                    12:da:91:89:1e:1a:27:86:9c:92:06:2a:0e:8b:23:
                    1a:84:b3:ba:9c:12:ce:f4:9c:f5:ca:e1:db:26:a5:
                    77:fe:e3:be:a6:d2:91:2f:f9:72:94:3b:c3:3d:d6:
                    26:13:7d:ab:01:4b:af:7f:7b:54:7d:1f:02:16:3e:
                    4c:cb:e5:d9:9e:25:76:6d:01:61:b7:69:f1:35:c6:
                    13:e8:73:a2:ce:fc:f8:33:cd:55:3e:49:81:41:da:
                    84:70:73:87:fe:92:fc:ee:89:9a:2c:a2:01:fd:24:
                    80:c1:69:d4:26:f4:b0:56:b1:83:50:62:44:67:7e:
                    ed:0a:5e:b2:2b:f5:1d:3e:c4:92:67:73:ff:2d:91:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A7:76:2D:81:1A:7B:2A:EE:20:6D:A8:8A:7E:6C:BD:40:28:1A:CA
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jad2LYEaeyruIG2oin5svUAoGso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.176.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:0f:e8:8c:64:6b:29:ab:3d:e6:c9:f3:1d:f7:53:d4:af:
         4c:3c:f6:80:8c:c1:4c:ab:91:a0:3f:f5:26:96:00:e1:86:44:
         38:96:37:cd:2e:35:e8:18:2b:dd:41:2c:0c:78:5b:58:3b:ed:
         81:d1:66:aa:10:40:bc:2d:26:d5:9f:80:e4:fb:b0:14:a7:5d:
         d8:bf:db:12:6b:64:0e:cd:f0:d2:2f:ff:d3:e6:f4:75:ac:c6:
         4f:96:cb:e1:dd:fc:f0:20:78:cb:da:bc:73:54:05:65:09:e1:
         e4:cc:56:42:09:d6:f7:f8:ec:3b:b3:5f:db:fc:31:65:d3:3a:
         36:89:be:7a:a5:a0:92:fd:88:6d:c9:54:33:5b:9a:41:bb:0c:
         23:e3:b2:af:82:52:f9:5c:53:54:3a:18:99:01:aa:a8:d0:84:
         61:f7:a0:f1:e4:45:73:c7:9f:8e:45:05:65:4b:a7:96:bc:63:
         34:1e:dd:6e:0d:5a:87:47:1f:58:a2:0c:5a:f2:2d:da:17:a9:
         17:27:a2:a6:b0:98:9a:bc:a4:ab:27:b4:03:cd:60:b9:f0:b7:
         3c:e1:a2:df:f0:1f:9c:f6:c3:8d:cc:ce:10:f5:49:7e:71:ce:
         d1:27:8c:ec:2e:e1:3e:15:78:c8:1f:b4:c2:d7:17:9b:0c:ac:
         ce:8a:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:39 2024 by rpki-client on console-fra.rpki-client.org