Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa
File:                     vM2DMRLzfVvsydCSXessehZNXoM.roa (raw, json)
Hash identifier:          8IdRU/quMK/+A7Ya83cPvxtK1rZ94DLO/An3LNqO2Ac=
Subject key identifier:   BC:CD:83:31:12:F3:7D:5B:EC:C9:D0:92:5D:EB:2C:7A:16:4D:5E:83
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       01856ED4D391AE40878D2B12466F574C678A
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa
Signing time:             Sun 01 Jan 2023 19:35:19 +0000
ROA not before:           Sun 01 Jan 2023 19:35:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47957
IP address blocks:        160.92.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:d3:91:ae:40:87:8d:2b:12:46:6f:57:4c:67:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Jan  1 19:35:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bccd833112f37d5becc9d0925deb2c7a164d5e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:32:3b:7f:6a:c8:eb:3d:52:7a:f0:f3:5d:
                    10:eb:02:44:dc:f6:a4:8b:7b:ad:62:86:99:1b:e2:
                    b7:6e:6b:34:b2:89:ae:8b:f5:2f:49:74:a2:79:e2:
                    9e:2f:13:ce:3e:03:b8:d4:ed:fc:5e:cb:b3:15:32:
                    00:f7:14:f1:58:b9:70:7e:f4:6b:82:7f:a1:6c:3d:
                    9a:bd:42:bb:94:c1:b3:9d:e8:90:c0:c5:de:52:5d:
                    14:a7:10:99:c7:0f:7a:32:e7:5e:b8:69:e6:f7:02:
                    f3:1b:6b:ee:f1:3e:a4:21:fb:eb:b3:7a:95:b0:0f:
                    4b:a6:dd:a8:d2:9c:f5:ed:ef:db:d8:c1:00:e4:40:
                    e0:5c:b9:5a:34:42:a0:d5:93:c3:77:5d:84:28:52:
                    d3:48:45:42:b5:38:cd:29:e3:bb:5d:91:a9:5c:e4:
                    a4:cd:48:21:90:17:a0:aa:d4:83:82:2f:a4:93:14:
                    a9:11:f2:3c:23:07:ed:a7:c5:f8:01:8c:02:eb:65:
                    3a:83:fa:bf:08:8a:07:57:22:d3:3c:66:ac:fe:b6:
                    43:99:2d:1c:f5:76:ab:85:3d:20:8a:a7:b6:d1:1d:
                    74:c8:e7:0f:cd:20:c8:5e:17:6a:60:43:29:65:dc:
                    63:08:ee:92:5d:b7:20:c3:3b:77:b7:c6:a6:d2:dc:
                    84:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:83:31:12:F3:7D:5B:EC:C9:D0:92:5D:EB:2C:7A:16:4D:5E:83
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/vM2DMRLzfVvsydCSXessehZNXoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:02:46:b4:e9:21:ce:16:b9:69:43:5b:10:73:cf:d2:73:
         e8:76:b5:e6:b1:11:31:d8:98:d5:3e:a5:40:21:dc:de:6f:7a:
         3a:d0:8b:4b:e9:79:35:51:04:ef:f9:af:78:ec:a8:81:8c:dd:
         53:71:4c:52:9f:61:d7:07:02:9b:75:c6:f3:19:f3:c9:f2:1b:
         14:09:09:23:17:29:bc:84:05:9a:d7:37:79:9c:35:44:aa:93:
         fe:13:18:56:14:4f:bd:15:6b:77:26:d7:7d:e2:60:9a:12:44:
         df:9b:22:45:da:db:1c:d7:d8:29:63:80:a1:ba:f8:71:45:bb:
         7c:24:10:50:e4:0c:00:72:fe:cf:34:33:e3:24:a0:ee:61:12:
         7d:b6:96:7f:d4:21:15:c6:82:bf:7d:7d:6d:46:46:55:7d:38:
         d7:5c:1d:f5:ca:f6:9f:74:34:ae:4c:20:fe:f5:3d:9c:fc:39:
         34:79:fb:6c:d9:77:18:b8:62:c1:fc:fd:11:75:92:72:2c:b4:
         e6:39:77:2f:b9:f4:3d:36:60:b0:15:40:e2:5a:a2:e3:96:e3:
         4d:4f:ae:31:23:d2:ba:71:f3:ce:0f:b3:ab:17:07:be:be:21:
         bb:d0:89:36:a5:a7:d4:14:ff:84:21:36:90:4e:a1:3d:59:96:
         97:86:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:07 2024 by rpki-client on console-ams.rpki-client.org