Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VyS9iaS0B6wxPE3e5gSpWIDjcYc.roa
File:                     VyS9iaS0B6wxPE3e5gSpWIDjcYc.roa (raw, json)
Hash identifier:          VX7P04hIHBSXQYwi6ITKP4EYxwMqhMPIZbZIq4VUgk4=
Subject key identifier:   57:24:BD:89:A4:B4:07:AC:31:3C:4D:DE:E6:04:A9:58:80:E3:71:87
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0188C5F53F6CC12C2037F1EA07A23CBD639E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VyS9iaS0B6wxPE3e5gSpWIDjcYc.roa
Signing time:             Fri 16 Jun 2023 20:46:03 +0000
ROA not before:           Fri 16 Jun 2023 20:46:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46573
IP address blocks:        92.114.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 18:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c5:f5:3f:6c:c1:2c:20:37:f1:ea:07:a2:3c:bd:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 16 20:46:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5724bd89a4b407ac313c4ddee604a95880e37187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:5a:e4:e3:0e:d1:8e:6b:26:db:20:85:81:
                    61:c1:58:0d:a1:60:be:6a:58:06:e4:f4:93:e8:ed:
                    b6:9f:ff:41:cc:64:b6:d9:93:64:42:c3:d9:6b:c8:
                    5a:80:21:76:ff:2b:4d:33:30:31:db:3a:5c:33:2a:
                    35:6c:42:c4:87:28:b3:fd:69:1b:4d:3c:68:ab:c0:
                    d1:bc:72:56:f5:12:5a:9c:eb:04:65:01:17:e3:10:
                    6a:bd:68:1a:13:ec:a1:fe:f2:0d:dc:0c:07:65:0e:
                    18:c0:9a:16:5b:24:89:74:2e:fc:af:40:16:e1:00:
                    8b:a4:b1:0d:4a:9f:49:58:46:61:6d:dd:d8:a2:19:
                    48:4e:a0:95:78:2e:ef:87:74:2d:42:66:a3:2a:ee:
                    b1:53:4d:d6:21:fe:83:d2:e1:35:55:f3:83:be:7d:
                    91:89:3d:91:e1:eb:2f:c4:c1:fb:14:4f:80:42:d9:
                    f9:93:f1:bd:6f:38:a4:58:c3:f6:d8:99:02:f1:10:
                    f9:22:43:6f:5a:c3:93:a5:14:02:86:6c:6e:3d:51:
                    0f:94:4c:f0:96:60:11:ae:e5:d8:c0:c9:e7:f3:14:
                    c7:98:f8:6c:8d:09:25:a0:99:3f:4d:23:7c:08:81:
                    4b:99:86:d4:27:dc:ce:d2:9e:99:34:19:c8:01:37:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:BD:89:A4:B4:07:AC:31:3C:4D:DE:E6:04:A9:58:80:E3:71:87
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VyS9iaS0B6wxPE3e5gSpWIDjcYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:cb:75:21:0a:2a:9a:b7:7e:21:6b:53:06:ff:60:fa:d6:
         e4:53:24:41:1b:32:3d:fe:b2:d7:50:b4:f7:70:85:1f:06:25:
         75:a7:35:6a:3f:cf:22:53:cf:29:46:ed:af:b6:59:21:26:54:
         d7:1b:25:11:ad:ae:07:3f:ef:8d:e8:07:86:9d:5f:b0:68:40:
         c5:d5:8f:9f:44:e6:09:4e:a0:4c:26:fb:c0:ce:47:83:5b:fb:
         4a:70:d8:66:6e:2d:d7:9c:6e:91:59:35:92:ad:52:3b:bb:5d:
         0b:80:66:a0:c6:da:f8:77:2c:7d:7f:81:8a:37:4d:84:e7:ed:
         18:be:9c:8e:9b:e6:72:98:1f:82:6d:62:60:70:85:80:fb:7f:
         07:d2:d8:8b:0b:c4:9c:f6:5e:80:c8:94:79:81:3e:50:17:6d:
         67:32:a7:c5:f6:73:33:ca:4b:a5:8c:65:c0:4b:29:d6:39:81:
         db:60:94:0d:56:7e:52:6b:9c:75:7d:b9:a9:d8:33:54:c8:cf:
         6e:8a:83:1d:06:b9:ad:21:2f:4c:a7:46:57:1e:fa:74:f7:2d:
         ac:37:cf:a7:cf:a5:16:ad:84:7e:56:96:ba:a3:d7:9c:20:79:
         3b:62:68:8b:ed:f4:54:87:e3:d3:34:20:9d:77:6d:2b:67:71:
         7b:32:d8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org