Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f47O7gb9h3vlS7Bl3BAZe2Ye4gg.roa
File:                     f47O7gb9h3vlS7Bl3BAZe2Ye4gg.roa (raw, json)
Hash identifier:          y7NFZlAnvqW48JCSbhdz2GNBuIoYWdeshgm7jArCuBA=
Subject key identifier:   7F:8E:CE:EE:06:FD:87:7B:E5:4B:B0:65:DC:10:19:7B:66:1E:E2:08
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       01857139A99481A15938225CDA53D0D800D2
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f47O7gb9h3vlS7Bl3BAZe2Ye4gg.roa
Signing time:             Mon 02 Jan 2023 06:44:42 +0000
ROA not before:           Mon 02 Jan 2023 06:44:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57707
IP address blocks:        92.119.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:a9:94:81:a1:59:38:22:5c:da:53:d0:d8:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  2 06:44:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f8eceee06fd877be54bb065dc10197b661ee208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:71:c5:33:61:c8:51:db:21:25:e8:12:ee:
                    c9:a7:4d:b2:4e:a5:e3:f9:f9:7f:f9:4c:d5:fb:0a:
                    d1:7d:34:76:dc:c1:c1:bd:20:d0:16:61:bb:6f:fc:
                    27:94:95:be:06:c5:88:c1:7b:38:52:31:23:b8:f2:
                    d0:91:f5:48:4b:7f:87:4c:01:87:f2:71:7f:ce:b5:
                    42:f4:a6:8d:4b:9b:ee:f4:c0:1b:8b:f5:07:a2:ed:
                    d2:34:e5:da:8b:b6:0d:7b:c0:ea:8c:13:02:92:bb:
                    f6:15:60:02:a0:33:f5:69:45:e7:76:d6:4e:09:c3:
                    48:c4:ac:41:be:68:e7:80:bf:b0:0a:a4:0d:60:5c:
                    7b:0d:74:cc:29:34:e7:86:19:73:c2:2c:d0:d6:85:
                    73:33:cf:b5:59:c2:54:18:ca:55:5e:33:fb:d4:5e:
                    d2:de:61:90:dd:7a:53:8c:cd:86:da:2a:e2:a1:d8:
                    d7:cb:4c:1d:e7:ca:2c:d5:ae:e0:46:88:18:f5:c5:
                    fb:e4:39:54:13:f4:c6:07:f8:f6:1f:40:b5:e9:15:
                    c3:a3:63:d0:f3:d3:49:49:24:d3:e3:37:b9:33:41:
                    71:d0:28:3e:33:ad:8e:ea:91:c8:01:be:da:b4:48:
                    74:73:f0:24:bd:5b:e1:2d:6a:27:c1:fc:71:f6:a7:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8E:CE:EE:06:FD:87:7B:E5:4B:B0:65:DC:10:19:7B:66:1E:E2:08
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/f47O7gb9h3vlS7Bl3BAZe2Ye4gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:d2:a5:05:58:e3:f3:67:d1:fa:0b:9e:52:cc:4c:21:c5:
         ea:31:63:9d:7e:1d:02:cf:0d:af:ee:9f:33:b2:0c:a4:1d:c3:
         6a:20:e8:e9:88:c0:39:5a:79:84:42:3c:96:11:03:f5:a8:57:
         86:4b:ff:32:d4:96:a3:f1:bc:13:ac:0f:f8:10:59:97:44:6f:
         41:96:d8:a8:2e:cf:74:e1:f7:bb:3d:94:e4:fb:76:43:42:e1:
         ac:e2:5a:ad:31:58:09:1e:c9:de:fb:25:f5:76:ad:e6:6a:0f:
         29:3b:09:09:78:8e:5e:52:b0:55:a6:6e:eb:07:53:78:89:26:
         3b:7a:1e:e8:fb:23:86:77:99:b1:b8:40:e1:fe:41:cc:c2:0b:
         00:ac:0d:76:05:45:80:ea:51:f5:12:d6:37:5a:c8:18:45:d3:
         0d:e1:15:9e:26:1a:30:71:97:88:5c:51:17:73:7a:71:7a:a1:
         4f:4f:48:c0:4f:32:fe:2b:33:3f:f9:3e:78:74:8d:33:98:20:
         33:4b:bb:15:fa:0a:6d:10:2c:36:bd:91:f2:f9:c6:d9:8f:8c:
         2e:6d:d2:e6:c7:be:5f:1e:41:d6:eb:29:77:11:01:b6:b9:3d:
         e8:28:01:00:a4:24:04:a4:a4:38:84:a6:5f:7a:42:b2:20:e7:
         3e:50:76:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOamUgaFZOCJc2lPQ2ADSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjMwMTAyMDY0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjhlY2VlZTA2ZmQ4NzdiZTU0YmIwNjVkYzEwMTk3YjY2MWVlMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGJxxTNhyFHbISXoEu7Jp02yTqXj
+fl/+UzV+wrRfTR23MHBvSDQFmG7b/wnlJW+BsWIwXs4UjEjuPLQkfVIS3+HTAGH
8nF/zrVC9KaNS5vu9MAbi/UHou3SNOXai7YNe8DqjBMCkrv2FWACoDP1aUXndtZO
CcNIxKxBvmjngL+wCqQNYFx7DXTMKTTnhhlzwizQ1oVzM8+1WcJUGMpVXjP71F7S
3mGQ3XpTjM2G2iriodjXy0wd58os1a7gRogY9cX75DlUE/TGB/j2H0C16RXDo2PQ
89NJSSTT4ze5M0Fx0Cg+M62O6pHIAb7atEh0c/AkvVvhLWonwfxx9qfVNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+Ozu4G/Yd75UuwZdwQGXtmHuIIMB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvZjQ3TzdnYjloM3ZsUzdCbDNCQVplMlllNGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHe4MA0G
CSqGSIb3DQEBCwUAA4IBAQAWetKlBVjj82fR+gueUsxMIcXqMWOdfh0Czw2v7p8z
sgykHcNqIOjpiMA5WnmEQjyWEQP1qFeGS/8y1Jaj8bwTrA/4EFmXRG9BltioLs90
4fe7PZTk+3ZDQuGs4lqtMVgJHsne+yX1dq3mag8pOwkJeI5eUrBVpm7rB1N4iSY7
eh7o+yOGd5mxuEDh/kHMwgsArA12BUWA6lH1EtY3WsgYRdMN4RWeJhowcZeIXFEX
c3pxeqFPT0jATzL+KzM/+T54dI0zmCAzS7sV+gptECw2vZHy+cbZj4wubdLmx75f
HkHW6yl3EQG2uT3oKAEApCQEpKQ4hKZfekKyIOc+UHYm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org