Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4RobTBETpvqJwhteQnB0nGBxkYo.roa
File:                     4RobTBETpvqJwhteQnB0nGBxkYo.roa (raw, json)
Hash identifier:          wtxpNkqAmCeaxwprjjR1a+2FCE9W6IpwjZh7hw566Vw=
Subject key identifier:   E1:1A:1B:4C:11:13:A6:FA:89:C2:1B:5E:42:70:74:9C:60:71:91:8A
Certificate issuer:       /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial:       0186E086175DB970EB79BB4453C20F04DBB8
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4RobTBETpvqJwhteQnB0nGBxkYo.roa
Signing time:             Tue 14 Mar 2023 14:28:49 +0000
ROA not before:           Tue 14 Mar 2023 14:28:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198549
IP address blocks:        92.53.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e0:86:17:5d:b9:70:eb:79:bb:44:53:c2:0f:04:db:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
        Validity
            Not Before: Mar 14 14:28:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e11a1b4c1113a6fa89c21b5e4270749c6071918a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:83:5f:7f:d2:be:eb:b7:82:0a:a3:d4:88:
                    3d:70:56:3a:2f:d9:67:f0:92:b8:7a:e0:5e:23:fd:
                    43:63:67:52:21:96:79:81:94:7c:e0:c8:74:1d:17:
                    f7:22:c1:1e:31:d0:85:6b:d3:31:aa:cd:c0:a8:a2:
                    29:61:20:21:60:a2:28:e2:51:fc:6d:94:9a:96:10:
                    06:29:3f:e1:2b:6d:08:a9:f9:3f:eb:6e:5e:59:8b:
                    cd:b1:e5:e7:52:a4:ab:f2:4d:f8:ab:23:be:0a:f3:
                    0d:6d:6f:80:15:b8:44:cd:07:ba:ae:9d:19:ce:63:
                    3e:8d:48:86:5c:74:a0:cf:95:e5:38:f7:fa:5d:5c:
                    88:42:22:47:4e:74:1f:ca:e5:31:f8:ad:11:3d:fe:
                    13:0d:25:c1:cd:77:fd:cd:34:d6:99:5e:dd:e8:89:
                    0d:02:c2:97:99:32:7e:a8:87:7b:07:02:53:20:78:
                    9c:cf:ee:5f:90:9e:4d:65:fe:bc:49:27:32:64:58:
                    97:8e:45:67:2f:86:73:44:b3:07:e3:95:22:62:ad:
                    92:aa:d0:6c:35:31:d8:3e:a3:21:f3:f4:be:a2:6a:
                    d8:a6:cf:52:79:7c:03:8d:d0:3e:5e:08:2c:cd:7a:
                    50:05:52:b8:43:76:6a:26:38:5e:6e:30:94:a1:48:
                    49:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:1B:4C:11:13:A6:FA:89:C2:1B:5E:42:70:74:9C:60:71:91:8A
            X509v3 Authority Key Identifier:
                keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/4RobTBETpvqJwhteQnB0nGBxkYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:16:41:77:fd:3a:33:ee:8f:39:5e:a9:f8:49:c2:ed:16:
         a4:69:89:ef:d4:d7:fa:fe:fe:f3:70:47:9a:27:fc:3b:42:1d:
         27:19:ca:a7:db:6a:cd:64:56:4f:46:be:11:58:5c:8b:01:11:
         14:57:ba:b2:76:6f:84:9b:a1:6c:35:2d:61:bb:4e:06:df:c1:
         8c:f0:8f:87:7f:b4:25:e3:a5:b6:36:03:74:d0:48:67:4d:78:
         a5:b8:0e:1a:1b:dc:04:b4:48:b7:b9:88:9c:bf:03:ba:71:93:
         7c:37:90:74:62:d9:57:fb:74:1b:78:bf:3a:74:7e:0d:05:5e:
         40:a3:d7:c8:8d:c3:11:3b:ee:49:76:0c:2d:e8:b3:a2:08:70:
         f4:8d:1d:fc:51:77:fa:df:30:ee:fb:ca:b1:85:00:84:54:04:
         dc:97:b2:60:39:81:3c:35:e9:4c:5c:fb:7f:9d:79:de:cd:1b:
         50:0e:b3:0c:67:9d:ee:43:ad:76:b8:25:3b:f0:35:0b:bb:c2:
         6c:8a:a1:aa:65:13:45:f7:db:4c:85:58:fd:80:7c:55:86:c4:
         71:53:71:ed:68:36:4a:08:34:26:e2:df:4e:fe:30:1b:2c:7b:
         fe:ed:d3:a1:bb:91:6a:db:53:2c:30:ee:c5:48:91:21:d8:c3:
         5b:0b:d2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:59 2024 by rpki-client on console-ams.rpki-client.org