Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/I1l-Lmsxmpudr1Dyc9IwZbiPZ9Q.roa
File:                     I1l-Lmsxmpudr1Dyc9IwZbiPZ9Q.roa (raw, json)
Hash identifier:          25FsY2E+EI51FM2D3fX+xzLLqkdzJDmtHqgWgfPfMwQ=
Subject key identifier:   23:59:7E:2E:6B:31:9A:9B:9D:AF:50:F2:73:D2:30:65:B8:8F:67:D4
Certificate issuer:       /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial:       018B3A22937A7822DC74D2141711FB7061D5
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/I1l-Lmsxmpudr1Dyc9IwZbiPZ9Q.roa
Signing time:             Mon 16 Oct 2023 20:17:06 +0000
ROA not before:           Mon 16 Oct 2023 20:17:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44598
IP address blocks:        185.150.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3a:22:93:7a:78:22:dc:74:d2:14:17:11:fb:70:61:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
        Validity
            Not Before: Oct 16 20:17:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23597e2e6b319a9b9daf50f273d23065b88f67d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:8f:a8:e3:8e:05:19:b4:e6:06:8d:00:e3:
                    49:e3:0c:e7:28:e8:a3:5c:f0:ae:3d:63:4e:33:29:
                    52:ab:91:02:17:24:e8:b9:63:55:eb:04:3b:4b:30:
                    99:d0:6e:61:7a:66:e9:db:b4:b1:51:3f:d6:82:b6:
                    03:a1:21:82:18:26:f0:89:b9:8b:30:5c:5b:7e:e4:
                    03:16:61:c5:23:57:95:61:e7:81:e4:79:c5:53:67:
                    fb:f0:41:a8:43:d2:8f:08:7f:ee:4d:cc:9e:c9:26:
                    d2:b7:ef:74:bb:e8:b4:84:3b:98:29:a7:7f:b5:05:
                    e1:aa:31:4d:c1:56:14:5c:9e:d1:0f:6b:cc:35:dc:
                    e1:bc:2f:aa:c2:a4:4f:b2:ea:7b:a0:79:2a:72:86:
                    76:a9:1a:ed:14:19:e2:3a:36:4f:52:c2:06:a4:77:
                    ee:48:6a:ed:f5:ac:5c:2a:ba:ca:f7:da:73:70:4c:
                    de:0e:4f:a2:07:26:6c:c8:ef:6b:00:c1:25:80:cd:
                    f1:9a:5e:15:d3:d7:e5:f6:89:de:e4:ba:99:48:3a:
                    8f:5b:2e:f8:ea:e6:05:52:ec:57:f6:d6:65:1f:a8:
                    14:6a:d8:1c:df:de:cb:c5:8d:64:a9:bf:22:82:68:
                    36:82:dc:ac:1e:e6:8a:c0:7f:32:94:d4:6b:ce:ae:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:59:7E:2E:6B:31:9A:9B:9D:AF:50:F2:73:D2:30:65:B8:8F:67:D4
            X509v3 Authority Key Identifier:
                keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/I1l-Lmsxmpudr1Dyc9IwZbiPZ9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:f5:22:15:bf:6a:34:94:4a:68:8f:a4:84:aa:b2:bd:28:df:
         6b:ba:a8:0f:99:f9:28:65:3b:25:01:be:d2:e1:73:7a:75:6d:
         c9:a7:cd:1c:ba:bd:cb:8e:92:db:3b:74:42:f2:7f:71:30:56:
         81:c6:27:35:f2:ff:3f:6a:79:6a:97:4b:bd:91:62:19:df:ee:
         1d:44:6f:af:f7:4e:9c:bc:91:b2:3b:09:a8:6f:bd:39:87:c3:
         42:97:e4:25:88:c3:c8:85:8f:ae:58:0e:6f:dc:c2:91:6a:dd:
         f2:97:77:54:16:62:e6:2c:87:2d:eb:7a:5b:ad:a4:02:21:c6:
         e3:1f:cc:85:9c:8f:b1:a9:f1:2c:80:90:94:84:08:c6:99:71:
         ce:41:79:a4:de:d7:ab:e9:98:6a:03:cd:f9:54:6d:62:70:93:
         c3:f7:99:b6:37:8d:64:5b:20:45:af:1f:6a:bd:e5:7f:42:5c:
         42:f4:29:e0:b5:88:a3:e3:b6:3e:c9:3f:d8:d4:98:23:4e:27:
         7e:04:0d:ef:ed:df:c4:70:ef:b4:f0:64:fd:58:1b:de:46:61:
         16:19:c9:06:d3:da:1e:19:90:9e:9b:61:b0:48:aa:e6:24:5b:
         cb:54:fb:18:b4:5a:d9:58:79:b4:33:16:2f:af:ec:7d:b7:af:
         01:f1:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:22 2024 by rpki-client on console-fra.rpki-client.org