Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ogMmYxWuuth8uzHI-1JYR54mKLs.roa
File:                     ogMmYxWuuth8uzHI-1JYR54mKLs.roa (raw, json)
Hash identifier:          J5m47QMDuJVQLxqXk5rIic5joAcAdUsOy2MyT0zaWeo=
Subject key identifier:   A2:03:26:63:15:AE:BA:D8:7C:BB:31:C8:FB:52:58:47:9E:26:28:BB
Certificate issuer:       /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial:       018E5292A191518E28D72316272BFA0387C0
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ogMmYxWuuth8uzHI-1JYR54mKLs.roa
Signing time:             Mon 18 Mar 2024 17:18:45 +0000
ROA not before:           Mon 18 Mar 2024 17:18:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215826
IP address blocks:        92.42.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Aug 2024 14:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:52:92:a1:91:51:8e:28:d7:23:16:27:2b:fa:03:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
        Validity
            Not Before: Mar 18 17:18:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a203266315aebad87cbb31c8fb5258479e2628bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:34:f6:ec:38:a3:37:ef:92:ab:86:97:9b:
                    21:f9:84:07:a6:ab:b1:af:22:6e:ef:c0:16:e7:b0:
                    2d:13:ed:42:4f:f0:04:69:88:47:80:c8:82:95:c0:
                    f5:c7:5a:34:be:de:56:e1:d3:b4:25:5c:1f:92:b9:
                    e5:c1:f5:af:87:f0:9b:68:81:b7:4f:ae:4f:26:85:
                    4c:c1:68:cc:8d:fe:e8:61:7f:30:07:90:7e:93:f3:
                    e3:53:bc:34:b9:95:48:be:1f:69:81:34:c6:c0:34:
                    48:7d:16:47:6e:bd:b2:b8:61:ef:73:27:2e:f3:e5:
                    7f:f3:bf:28:13:b2:15:e4:57:d0:99:7d:20:66:c7:
                    ab:ec:3f:24:50:8a:39:a8:9b:c4:70:9a:00:f4:c7:
                    e3:9f:7e:72:e5:ab:5c:64:c7:b2:a6:76:98:29:29:
                    0a:eb:fc:66:bc:1e:79:b3:c2:29:ea:2c:ca:33:e4:
                    93:3a:55:24:2e:41:ab:3e:05:35:60:96:43:97:b5:
                    d6:11:9b:30:41:48:e7:da:f9:8c:24:ca:4b:d5:b8:
                    be:6d:1a:42:18:e8:9c:a4:6b:72:98:8d:22:67:af:
                    d7:98:d7:29:ac:d1:c4:cc:7e:ce:e8:8f:33:59:c0:
                    8b:92:cd:43:9d:08:f7:18:b7:08:dc:9f:8d:5b:80:
                    66:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:03:26:63:15:AE:BA:D8:7C:BB:31:C8:FB:52:58:47:9E:26:28:BB
            X509v3 Authority Key Identifier:
                keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/ogMmYxWuuth8uzHI-1JYR54mKLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:fb:7a:d1:f9:e1:c5:60:a3:23:a7:1d:49:12:59:21:58:
         8a:18:c4:3b:6a:12:e4:19:20:04:28:ea:ca:a2:86:99:ab:c0:
         45:02:53:ea:4c:c8:8e:5a:58:6e:0a:ed:16:7e:b8:fa:d2:6b:
         c7:23:d6:b2:ea:39:77:ee:8c:be:a9:c3:45:a2:e9:36:5b:3e:
         0e:56:56:c3:ad:2a:fe:6b:8f:e1:0d:9e:03:a7:a9:bf:43:c8:
         e6:4b:61:6d:1c:5e:f2:f3:e0:08:4c:ca:43:08:df:35:28:85:
         81:3f:0e:cf:ef:38:02:81:46:06:31:49:39:83:68:90:26:cb:
         33:5d:4f:f9:a9:4d:dd:e7:c5:89:e3:8c:81:ac:2f:ed:45:75:
         98:da:cd:2f:f6:9f:37:d9:46:19:12:2a:4b:9c:33:1a:ab:28:
         9a:26:52:28:ef:9e:38:26:1d:67:eb:eb:08:4b:a9:13:43:f8:
         fa:62:52:9d:e3:18:8c:f3:81:9e:9b:ea:63:9b:7b:66:ea:7d:
         b9:50:d4:e3:1f:ff:d3:b9:26:02:65:ff:cf:27:bb:f6:f8:1d:
         b9:f9:1d:3b:a6:28:0f:a3:24:21:e6:8c:16:60:9c:5a:90:40:
         db:42:8f:3c:10:f8:f0:9f:78:bd:a5:1f:67:46:e5:ef:d7:49:
         b3:88:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 17:37:48 2024 by rpki-client on console-fra.rpki-client.org