Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vOmxKKAug15hGtEC7nP5Ga5Ryt4.roa
File:                     vOmxKKAug15hGtEC7nP5Ga5Ryt4.roa (raw, json)
Hash identifier:          Z4BCSDi0VxqWWf+6DZAYdPQKhDWP/m/eQfsfnVUMJaw=
Subject key identifier:   BC:E9:B1:28:A0:2E:83:5E:61:1A:D1:02:EE:73:F9:19:AE:51:CA:DE
Certificate issuer:       /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial:       0185735622FB44F38D01A9C847E7F5D4171E
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vOmxKKAug15hGtEC7nP5Ga5Ryt4.roa
Signing time:             Mon 02 Jan 2023 16:35:02 +0000
ROA not before:           Mon 02 Jan 2023 16:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44766
IP address blocks:        92.45.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:56:22:fb:44:f3:8d:01:a9:c8:47:e7:f5:d4:17:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
        Validity
            Not Before: Jan  2 16:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bce9b128a02e835e611ad102ee73f919ae51cade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:2f:26:cf:4e:3b:e9:af:da:0f:75:19:ab:
                    76:77:98:64:db:b2:dc:e2:b2:bb:b5:ea:cd:90:77:
                    22:a0:9c:62:45:fa:8a:48:20:81:b9:e0:02:b8:3a:
                    f6:cf:e8:1b:0b:ae:be:1b:df:c5:ee:3b:78:07:a5:
                    15:76:b1:f6:74:19:75:3b:d4:05:71:56:b4:bd:3a:
                    73:79:3f:f2:26:04:d4:28:91:05:30:7d:cc:74:7b:
                    54:3c:b4:14:9d:6c:d7:f3:7e:c4:0f:d5:e6:3a:32:
                    1c:85:f9:30:87:0c:38:f0:6c:2a:61:f0:34:d0:44:
                    9e:da:5f:3a:21:e2:99:e9:a2:ef:a4:69:e0:b2:77:
                    64:d0:9d:b8:d8:a0:11:8a:5f:2d:e1:bd:9d:8a:a5:
                    9f:fa:fa:4d:c0:ef:2f:94:44:05:84:e0:d9:5b:fc:
                    83:d5:3c:d3:9d:43:34:e7:b4:a2:58:e8:a8:c5:08:
                    fb:fb:d1:7f:ce:7f:20:13:68:21:71:fa:8a:0f:7d:
                    f5:d7:4d:8d:4b:97:32:47:db:0d:c9:9b:c6:61:80:
                    34:84:5a:86:f9:65:e2:8f:2a:61:92:9f:69:f8:d1:
                    1a:fb:f3:af:38:01:a3:d3:ed:4c:f8:33:10:ff:f1:
                    aa:05:2f:cd:86:ac:68:eb:a2:96:92:5e:66:4d:36:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:B1:28:A0:2E:83:5E:61:1A:D1:02:EE:73:F9:19:AE:51:CA:DE
            X509v3 Authority Key Identifier:
                keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/vOmxKKAug15hGtEC7nP5Ga5Ryt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.45.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:87:8d:54:58:3c:b4:53:44:5e:7b:71:3c:37:d3:43:01:
         59:e6:57:48:14:48:49:09:f8:b1:00:88:ad:8c:6a:2a:b2:4f:
         43:d8:2d:55:b2:67:42:39:01:66:d3:c3:ce:64:1a:41:c8:4c:
         8b:93:dc:db:7d:63:c0:15:c2:5b:65:08:fb:eb:bf:69:ce:01:
         53:59:69:ed:55:e0:ca:6c:c9:ad:f8:69:47:77:6b:f4:b8:3f:
         f3:9e:65:85:e9:cc:cf:d0:d9:8d:0c:e5:7e:94:39:a4:a1:95:
         e2:05:60:dc:dd:91:d0:eb:1e:70:70:3f:3b:ea:88:3d:11:96:
         60:ce:80:bb:35:22:18:33:2f:7d:ce:22:5a:e6:47:50:2b:27:
         db:8b:26:f9:77:2a:66:27:5b:4a:ec:e8:17:58:a5:53:1a:19:
         6f:57:fa:80:79:20:09:ae:07:7d:c2:c0:20:f6:1a:e9:98:3c:
         cb:e5:b6:7e:c6:b0:e9:f8:fc:81:be:a5:c1:52:63:65:4c:37:
         e6:fb:95:a8:14:ed:d8:68:14:14:85:34:a2:98:b0:a9:f3:34:
         b1:00:32:06:95:db:cb:dd:18:99:3a:74:77:b5:c5:19:a4:9e:
         50:2b:ed:2d:8a:e2:a5:62:82:ae:2c:22:a2:42:42:28:0c:4c:
         6b:12:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org