Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/J3vAcylusixfKGDmU661ZU66dzg.roa
File:                     J3vAcylusixfKGDmU661ZU66dzg.roa (raw, json)
Hash identifier:          n4cSKWmU20mFM8+GD5l5qxIihEXjPE/atSBgOE3FU0U=
Subject key identifier:   27:7B:C0:73:29:6E:B2:2C:5F:28:60:E6:53:AE:B5:65:4E:BA:77:38
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018CC4933DFEE1F5B94875984A08D2969C65
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/J3vAcylusixfKGDmU661ZU66dzg.roa
Signing time:             Mon 01 Jan 2024 10:30:33 +0000
ROA not before:           Mon 01 Jan 2024 10:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202358
IP address blocks:        92.114.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 May 2024 17:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:3d:fe:e1:f5:b9:48:75:98:4a:08:d2:96:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 10:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=277bc073296eb22c5f2860e653aeb5654eba7738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:02:4b:41:cc:4a:1b:50:26:8c:b1:b9:a9:
                    6c:ea:ea:8a:40:23:70:49:f9:c4:59:5f:21:c3:27:
                    7f:52:51:ca:74:75:9a:77:e6:04:d2:10:5a:6c:1b:
                    2a:35:56:39:a8:d1:75:d1:fb:6b:fa:02:26:ae:e0:
                    d3:b0:c1:d6:39:2c:e8:ea:46:77:ac:58:e4:89:94:
                    ea:b6:ae:af:f3:3f:d7:e4:01:a2:0d:06:93:d6:ca:
                    0d:7d:be:d6:0e:2a:22:12:3e:c1:ca:f3:99:e1:c4:
                    21:dc:ac:8f:a2:2b:42:d1:76:bd:f2:2b:4b:49:63:
                    a0:8d:29:5d:0d:68:99:18:18:23:be:06:55:fd:68:
                    52:6b:26:f0:2f:93:b4:63:94:4f:29:c4:de:b1:e7:
                    ce:cb:bc:c7:55:c0:71:5b:b7:89:2e:c7:3d:36:68:
                    1d:31:97:b5:0a:61:c0:7b:a8:3d:fb:c3:08:e8:a3:
                    ce:45:8e:b2:9d:e6:b4:f9:44:89:2e:92:a2:d4:1c:
                    55:ea:5b:ed:1b:57:c1:aa:62:79:12:fc:3c:70:30:
                    4c:9d:ea:04:d3:4d:89:9c:df:50:c6:69:3d:67:f7:
                    16:ab:0b:06:36:72:4c:61:40:5b:91:c1:78:dd:aa:
                    ed:ce:73:a3:1d:8a:c6:29:23:51:a8:32:d0:5f:0b:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7B:C0:73:29:6E:B2:2C:5F:28:60:E6:53:AE:B5:65:4E:BA:77:38
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/J3vAcylusixfKGDmU661ZU66dzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:b0:cf:e3:26:76:a1:42:f1:2b:b1:d2:e8:9b:e2:04:e9:
         03:98:f4:7e:c3:51:2c:10:71:74:5f:ff:8b:13:c8:05:ff:99:
         5a:f1:89:18:4f:77:5b:c5:67:cb:5b:80:95:7e:70:9b:c9:45:
         1d:8b:69:1a:15:49:ca:14:e0:23:ff:d7:b2:50:9c:3d:83:af:
         aa:1b:4c:ac:56:80:ae:55:81:12:68:45:1b:54:5b:f6:2a:be:
         85:fd:d8:7d:ed:1f:40:64:cf:7f:76:43:95:12:f9:a8:f4:d3:
         bd:16:a4:89:0b:fd:24:db:db:8a:03:f1:f4:7d:f3:3b:64:a4:
         3a:89:10:13:d0:71:7c:d0:5a:b1:5c:37:dd:0d:39:8c:b0:c8:
         bd:8b:7c:98:bb:72:82:f2:94:09:55:24:6c:42:a8:39:82:e5:
         a2:3a:7d:b4:b8:c0:40:7c:16:e7:29:04:97:8c:66:14:62:e5:
         56:22:b9:86:b9:4a:ad:b2:10:9f:f5:25:6e:56:fd:45:78:f0:
         60:0c:51:75:4d:11:81:d3:da:0a:80:f9:da:d7:04:2c:3a:b8:
         20:86:b9:57:b5:da:2b:63:52:4b:e1:d2:07:c9:4f:87:57:eb:
         b4:c9:e0:11:0e:9b:0a:f2:61:04:eb:af:78:49:fd:61:94:ad:
         94:73:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:41:34 2024 by rpki-client on console-ams.rpki-client.org