Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AbBGjJSkXEY9euXFzIIiF99nSVo.roa
File:                     AbBGjJSkXEY9euXFzIIiF99nSVo.roa (raw, json)
Hash identifier:          AD6FQiPVjmYtuazr8PqYL8ARfwT0dIeWrBA5esKILCA=
Subject key identifier:   01:B0:46:8C:94:A4:5C:46:3D:7A:E5:C5:CC:82:22:17:DF:67:49:5A
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095B2916B30CC4E89E222FC39251112
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AbBGjJSkXEY9euXFzIIiF99nSVo.roa
Signing time:             Mon 02 Jan 2023 03:45:36 +0000
ROA not before:           Mon 02 Jan 2023 03:45:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209954
IP address blocks:        92.38.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:b2:91:6b:30:cc:4e:89:e2:22:fc:39:25:11:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01b0468c94a45c463d7ae5c5cc822217df67495a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:39:23:84:cc:36:d1:10:16:8b:a2:68:da:
                    07:3f:e3:81:aa:ba:e6:be:0c:0e:ae:36:0f:26:14:
                    63:60:7b:81:a9:56:bb:d5:b4:12:93:9d:7d:d7:c3:
                    7a:3c:fa:f4:27:15:7e:b2:44:2e:27:d3:f3:ea:1e:
                    1f:04:64:77:e5:09:21:62:f3:98:b8:58:59:de:38:
                    d8:0b:b9:54:00:98:5b:97:ef:81:73:77:86:12:7a:
                    2e:ad:9c:03:9d:af:b4:37:ee:5d:40:00:e7:29:d7:
                    12:13:9e:3c:a6:a5:94:b2:8e:39:04:75:c8:3b:fb:
                    11:85:0f:76:c1:33:d1:64:23:30:75:36:23:33:14:
                    2f:1b:21:28:b5:b6:b0:0f:d1:d6:c6:e9:35:44:76:
                    c9:f2:86:46:54:1d:ef:0f:c7:05:32:57:ba:a2:cd:
                    9d:c7:98:75:b7:4f:86:76:e1:7c:8d:fc:9b:a1:01:
                    90:37:e1:be:5c:49:15:e0:d3:be:5c:9d:17:94:e1:
                    48:39:fb:cf:90:38:33:79:1d:46:fb:68:ba:9a:03:
                    30:4f:7c:42:26:8c:ef:db:18:3e:83:7b:e5:36:d2:
                    b3:1e:73:6a:91:b4:bc:fa:ae:34:af:38:56:6c:4b:
                    72:ce:c5:8e:5f:58:93:8e:94:09:fe:3e:88:87:7f:
                    71:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:46:8C:94:A4:5C:46:3D:7A:E5:C5:CC:82:22:17:DF:67:49:5A
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AbBGjJSkXEY9euXFzIIiF99nSVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.38.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a3:e8:ef:de:6a:d3:55:d7:17:a3:4b:51:2b:1b:bf:84:d4:
         02:2e:41:d0:46:83:d8:81:20:77:c7:2e:f6:70:6d:d3:b5:9c:
         20:74:54:a8:17:76:f4:45:c7:40:fe:01:48:d7:cf:da:9b:64:
         4c:47:09:1f:16:2c:f8:b5:a6:8b:50:94:95:ce:59:26:8f:9f:
         d2:94:c7:40:78:a9:de:16:20:54:89:51:00:91:56:97:77:5c:
         ad:db:50:bc:2c:3d:e4:1b:34:6c:aa:f6:54:46:60:f9:e9:80:
         e9:97:ec:84:ee:99:06:85:44:df:ca:16:a9:57:3b:86:b8:32:
         7b:c6:4d:b5:63:1f:32:30:1e:78:52:ca:9c:fa:a8:80:2e:03:
         e0:a4:92:27:59:2a:26:d2:81:0c:02:c9:35:f3:ef:9c:0d:58:
         5e:2e:f6:84:c7:8c:5c:2e:59:8c:af:84:85:12:a8:de:98:aa:
         ba:fc:87:2b:c8:f9:1a:80:52:03:ab:99:3d:62:f0:04:5c:7f:
         c1:c9:f7:13:dd:8b:44:25:d8:6b:9d:75:50:99:2e:e1:5c:cd:
         7f:59:cb:33:ba:31:17:df:ed:cb:2d:40:0e:15:43:9f:0c:57:
         84:58:9a:b8:51:dc:e5:dd:c4:98:d3:d5:29:59:89:01:fd:ac:
         7f:72:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:49 2024 by rpki-client on console-ams.rpki-client.org