Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/4oTrYVvEFZFVbNTHuAwsTj4A5Tw.roa
File:                     4oTrYVvEFZFVbNTHuAwsTj4A5Tw.roa (raw, json)
Hash identifier:          yPc/sRlvPC08l5QOXY+ncCv79X9/3D0QkQr99iWDrQw=
Subject key identifier:   E2:84:EB:61:5B:C4:15:91:55:6C:D4:C7:B8:0C:2C:4E:3E:00:E5:3C
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       01857283765F3BDFFFC6D3277A3D00FB11DD
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/4oTrYVvEFZFVbNTHuAwsTj4A5Tw.roa
Signing time:             Mon 02 Jan 2023 12:44:56 +0000
ROA not before:           Mon 02 Jan 2023 12:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61389
IP address blocks:        92.55.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:76:5f:3b:df:ff:c6:d3:27:7a:3d:00:fb:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  2 12:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e284eb615bc41591556cd4c7b80c2c4e3e00e53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:80:37:32:98:39:83:fe:98:98:e3:8f:61:
                    d0:3b:ec:f7:87:01:86:bd:36:76:a0:2f:b7:6b:39:
                    7b:f4:25:a3:66:d6:a3:15:ff:13:2d:03:8f:cf:a5:
                    13:9b:54:3b:75:09:52:44:28:11:5a:78:25:42:72:
                    bc:08:fa:e4:55:4c:2b:38:82:bf:ea:57:ff:59:0c:
                    6b:b6:f2:71:04:6b:cb:e1:7e:9f:ca:ed:38:be:03:
                    c7:a9:9f:d2:c3:e2:ef:a9:dc:71:e1:59:aa:d2:66:
                    75:9e:2a:dc:2f:fb:98:63:c7:58:cc:2f:2e:c2:1f:
                    c5:8a:63:08:07:ab:f4:32:33:26:fc:0a:9c:b8:d3:
                    1f:cf:f5:c3:a0:90:78:94:ec:d2:6c:9a:a9:61:11:
                    11:16:c3:2a:ea:6c:97:7a:fc:d9:90:fa:24:e6:f7:
                    01:0b:48:ef:71:20:f4:41:0e:c7:fd:eb:b4:5f:0c:
                    38:6d:42:fb:0f:e1:04:cb:a6:7c:d5:55:66:34:c6:
                    b2:b4:b1:02:6e:d5:0c:80:71:c1:07:5d:61:ac:f5:
                    91:01:a7:dd:31:5b:2a:3f:5b:ba:2d:a4:db:bc:76:
                    cf:2a:55:f5:88:5a:06:8a:ca:4d:5f:07:12:90:5a:
                    ed:85:e0:f8:ea:cc:04:05:a6:b7:e9:d6:f3:ef:14:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:84:EB:61:5B:C4:15:91:55:6C:D4:C7:B8:0C:2C:4E:3E:00:E5:3C
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/4oTrYVvEFZFVbNTHuAwsTj4A5Tw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.55.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:b9:7c:d2:11:ce:53:1d:a5:b0:bd:bf:32:6f:07:d7:d7:
         c2:b3:96:e3:3d:33:14:06:e8:e1:2a:07:66:2d:78:03:81:16:
         3b:48:1c:13:d9:2d:c8:89:51:08:b6:4a:1d:ca:cd:fe:c0:ac:
         1e:d5:a8:1e:8d:3e:2c:5a:36:95:92:ee:16:07:bb:c4:97:ee:
         d2:1a:bc:6e:a6:2a:42:07:23:52:5b:84:83:b0:48:f5:ea:01:
         c0:3c:c3:03:26:61:f9:c3:64:9e:11:da:bd:a8:0e:e7:ea:67:
         55:76:24:3e:f4:d9:d2:6e:3a:27:18:9e:7d:4a:c9:3d:f0:56:
         c3:7c:9a:e2:ee:c9:df:ba:dd:e4:13:ff:11:ee:26:85:13:05:
         48:05:83:b0:a6:70:34:01:08:14:80:93:cc:a9:03:e3:c9:71:
         9d:6e:7f:60:bc:e7:75:8b:d4:83:45:6a:e9:f2:45:f5:54:1e:
         b3:8f:bd:dd:51:fc:f4:14:12:db:f7:65:39:cc:6e:80:7a:15:
         f5:9d:84:fd:d1:2c:0c:09:4f:ac:0d:54:aa:82:4b:4b:19:df:
         25:90:e8:a0:4c:81:1c:1f:43:b2:5d:b1:a3:b8:47:19:b9:24:
         21:d3:fa:a4:a8:63:35:4d:60:16:b9:c2:3b:65:e9:61:49:4f:
         4b:01:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org