Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/viWjIpzrwEGd9y182qEl5M30cJA.roa
File:                     viWjIpzrwEGd9y182qEl5M30cJA.roa (raw, json)
Hash identifier:          Jbn7v2RcHTgc3sdaLazZ6OhdprLzFIFYZS/Oa1QLK5g=
Subject key identifier:   BE:25:A3:22:9C:EB:C0:41:9D:F7:2D:7C:DA:A1:25:E4:CD:F4:70:90
Certificate issuer:       /CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
Certificate serial:       01856FC2978084DCC85EC297ABC335B22A81
Authority key identifier: 90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/viWjIpzrwEGd9y182qEl5M30cJA.roa
Signing time:             Sun 01 Jan 2023 23:55:01 +0000
ROA not before:           Sun 01 Jan 2023 23:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31019
IP address blocks:        45.92.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:97:80:84:dc:c8:5e:c2:97:ab:c3:35:b2:2a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
        Validity
            Not Before: Jan  1 23:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be25a3229cebc0419df72d7cdaa125e4cdf47090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:4e:bb:c1:78:5b:1c:89:de:55:f4:5c:5d:
                    c4:c7:c6:13:41:81:65:5c:a3:58:93:8f:d3:3d:64:
                    11:b8:81:38:c1:0d:94:63:0f:45:4c:40:7e:15:1c:
                    d7:1a:47:ca:ec:b0:0f:9e:6f:31:fd:04:50:6c:7d:
                    48:03:22:9d:b7:de:27:b3:43:05:b2:b4:6b:34:f0:
                    e3:54:40:14:31:7f:fe:cb:3b:fd:92:ee:96:86:ef:
                    fd:60:bb:7b:cd:e9:93:f0:d8:66:a3:00:d9:1f:a0:
                    94:7d:79:21:03:ef:82:7d:4f:48:a8:92:1c:35:2f:
                    10:ff:09:7e:53:38:eb:e2:2e:fc:55:c2:7f:e2:89:
                    23:1d:aa:1f:aa:08:35:74:6d:08:e4:21:a3:d0:b1:
                    96:4a:c8:31:6c:4e:49:32:4e:3e:4c:cc:37:b2:ba:
                    66:7c:62:52:ff:e6:10:11:14:5c:0f:9e:f7:f9:56:
                    54:2d:86:67:6c:9f:d3:1c:cf:8a:c5:72:72:e6:04:
                    3d:71:94:58:22:40:b6:ed:a3:82:87:51:74:16:8a:
                    88:2f:7e:10:1f:40:51:96:8f:90:76:4e:89:f8:fc:
                    d3:4d:fd:a5:29:be:8f:93:52:12:15:5a:24:b1:6b:
                    0d:17:11:6f:0e:92:95:7f:01:0b:c6:d8:cc:07:20:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:25:A3:22:9C:EB:C0:41:9D:F7:2D:7C:DA:A1:25:E4:CD:F4:70:90
            X509v3 Authority Key Identifier:
                keyid:90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/viWjIpzrwEGd9y182qEl5M30cJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:dc:63:fd:62:7e:1f:d6:cd:fd:a2:c9:66:64:72:ce:9a:
         b5:d0:68:48:c3:2b:7e:c2:b5:95:73:e3:3e:9e:2a:c3:7d:76:
         53:56:c8:54:1b:62:b9:da:63:ae:fc:f5:60:45:d5:3a:d3:67:
         6c:dc:bb:de:b5:8f:8e:2e:39:f5:c2:6a:67:a7:dc:02:8e:5b:
         88:f1:4c:50:41:f4:45:a7:9e:32:a4:a3:3e:00:21:f5:93:f7:
         d5:92:71:30:f7:20:81:3a:17:3d:0c:96:0b:06:ac:0d:09:cb:
         82:af:2a:a8:ce:a0:db:98:55:4c:22:fe:66:cc:3a:5b:d9:bd:
         d4:30:90:3f:42:d0:4c:6f:94:5b:02:38:17:97:10:81:2e:f0:
         06:46:be:cb:77:b5:c9:0f:38:c3:ce:74:61:01:e4:69:44:6a:
         e6:a1:42:c1:1d:7d:41:28:04:22:38:af:ec:60:35:3b:7d:8e:
         77:c4:d1:92:58:23:63:a4:90:25:fa:d0:52:a7:4f:78:b0:1b:
         5d:f6:fd:92:20:38:15:45:e4:38:97:09:58:06:f2:c5:c2:5d:
         01:39:c5:3a:28:6e:da:e4:e3:7f:d2:b6:e9:08:18:9b:36:8f:
         75:5b:af:a3:ac:38:d3:e2:10:5f:ad:e7:44:92:2c:f4:a5:f5:
         85:91:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:48 2024 by rpki-client on console-ams.rpki-client.org