Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w6SuZ-Zk0vA44Jf_hy52jM8vT3Y.roa
File:                     w6SuZ-Zk0vA44Jf_hy52jM8vT3Y.roa (raw, json)
Hash identifier:          IokjcbSyyDHpk+gcBcLlYehTA7d2bZRwBZYWIHZd5YM=
Subject key identifier:   C3:A4:AE:67:E6:64:D2:F0:38:E0:97:FF:87:2E:76:8C:CF:2F:4F:76
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095455230FA8B2090093F5773E4B9A7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w6SuZ-Zk0vA44Jf_hy52jM8vT3Y.roa
Signing time:             Mon 02 Jan 2023 03:45:08 +0000
ROA not before:           Mon 02 Jan 2023 03:45:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49711
IP address blocks:        92.38.56.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 14:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:45:52:30:fa:8b:20:90:09:3f:57:73:e4:b9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3a4ae67e664d2f038e097ff872e768ccf2f4f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:4b:36:15:07:d8:80:77:09:e9:95:ce:a3:
                    f0:ed:e7:82:8f:76:bb:89:32:07:6a:62:59:e0:cf:
                    c6:e3:56:83:0a:81:22:50:07:91:8d:aa:40:40:f2:
                    b1:5f:18:62:82:e2:0f:1e:3c:ee:00:6f:a4:88:42:
                    0f:61:79:b8:74:01:db:d7:e7:cd:6a:7a:87:41:49:
                    8c:e4:6d:87:64:29:7c:67:fb:c6:38:3a:d3:6d:4f:
                    0c:79:62:18:d9:6a:05:9e:43:2f:9f:27:48:17:f2:
                    e6:07:6c:7e:af:28:32:2c:af:fc:53:c6:d1:b4:09:
                    c5:2f:1c:19:c6:47:6f:aa:96:81:c7:96:c9:08:fc:
                    cc:22:8f:66:39:9a:c0:2d:e0:42:f2:82:0d:be:80:
                    90:cc:6a:8c:02:c0:e6:1f:6a:ce:93:fa:8f:91:78:
                    f4:a1:ee:f7:5f:b3:eb:a2:8c:3d:8e:e9:b5:4a:85:
                    34:8b:c2:87:4a:f7:a6:40:55:12:29:9d:d4:5a:b3:
                    cc:54:b5:13:70:db:fc:67:8d:95:49:8a:6f:6a:c6:
                    c8:cb:97:ba:0c:0e:e7:f3:22:98:67:38:f0:c5:f3:
                    ef:23:ef:b3:7c:21:38:97:01:d6:77:cd:0b:eb:f7:
                    d2:64:b1:a3:3e:6a:94:20:39:d9:98:6c:b2:1a:5a:
                    5e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A4:AE:67:E6:64:D2:F0:38:E0:97:FF:87:2E:76:8C:CF:2F:4F:76
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/w6SuZ-Zk0vA44Jf_hy52jM8vT3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.38.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:f8:89:3f:e6:5b:9b:3b:54:74:32:f9:30:fd:0a:97:cc:53:
         66:50:7a:22:32:23:e1:b9:81:90:67:e2:90:57:a3:c7:51:e4:
         ff:83:fa:16:5c:fa:5d:2e:01:9c:60:bc:48:ad:ec:e0:72:de:
         70:65:8b:16:b2:ce:8a:f5:97:3a:cd:bb:53:31:a1:4a:24:a7:
         75:31:c2:98:b1:1f:d8:77:d7:6c:4c:96:13:35:11:03:68:ba:
         23:bf:91:7a:d4:78:7c:ec:21:44:1a:46:ab:3c:e7:38:1e:f6:
         e4:8b:89:f1:f4:47:32:90:e6:1f:68:0f:9c:fe:e0:7d:31:0f:
         55:3d:c6:a4:ef:35:36:2f:15:78:c5:45:c7:e2:56:fe:3f:82:
         27:61:ba:23:df:5f:c5:ce:b1:13:64:2a:86:84:eb:8b:15:f8:
         41:f2:09:d0:12:a1:5d:b9:13:3b:3d:49:cc:7c:fc:ce:83:d4:
         40:35:dd:cd:9a:89:05:a2:48:07:3d:2c:a9:e1:82:7e:b5:de:
         98:cc:cf:31:be:17:df:5c:cd:cd:5f:72:f1:be:08:fb:9c:37:
         26:93:e9:f4:24:e4:be:0b:4e:d4:af:b2:82:15:33:41:18:0d:
         1e:ec:4b:a5:2d:7f:3b:de:c2:e6:d7:cc:12:d1:01:0f:87:ae:
         92:ce:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org