Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa
File:                     _sMvMcAEwUQcFjehUpfAJV5g0yM.roa (raw, json)
Hash identifier:          T6pgTdFpv6PbU32zdtzueaz6sGiZjFxskXv86l5Top8=
Subject key identifier:   FE:C3:2F:31:C0:04:C1:44:1C:16:37:A1:52:97:C0:25:5E:60:D3:23
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019055A165A8F9052DA9C6CCDADBD32C17BF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa
Signing time:             Wed 26 Jun 2024 17:39:18 +0000
ROA not before:           Wed 26 Jun 2024 17:39:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        92.114.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 09:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:55:a1:65:a8:f9:05:2d:a9:c6:cc:da:db:d3:2c:17:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 26 17:39:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fec32f31c004c1441c1637a15297c0255e60d323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:d6:d8:20:2c:b0:f1:d4:b0:f0:03:b9:5b:
                    fa:90:c6:ec:60:14:58:2f:68:87:64:b5:8d:6a:56:
                    bb:ba:ee:d9:9e:9b:d2:d9:91:55:b9:27:ac:c1:42:
                    41:23:6c:b8:42:7f:cd:35:5c:71:53:f8:fa:0b:c9:
                    67:66:33:11:2e:73:7b:6d:dc:95:f8:9e:b1:03:c7:
                    08:65:3c:38:fb:61:58:f0:f2:e6:91:08:a2:6c:88:
                    93:d4:81:eb:1f:af:7c:f0:c5:fe:8e:41:55:10:b0:
                    de:74:51:bc:d6:21:ea:2a:29:61:55:3a:6e:93:50:
                    89:44:8d:62:d6:fe:37:a7:1e:3b:a6:f1:5c:54:a1:
                    f4:8d:21:53:de:7d:0b:99:40:99:b4:9e:74:de:51:
                    c7:ea:c8:c8:d3:f9:e9:f8:b6:9f:84:59:26:d8:8c:
                    aa:fa:06:8b:7a:b4:b8:ba:b3:80:30:c6:19:5d:6a:
                    0d:8d:d0:77:99:96:a4:30:a7:a6:eb:16:8a:79:bf:
                    b5:63:d6:ed:e1:2f:0d:54:20:43:11:57:cf:e7:e7:
                    04:82:92:ba:0f:cb:61:cd:41:f7:96:e2:30:de:d6:
                    5c:dc:6e:17:23:db:d7:89:b0:19:a0:d0:ae:57:53:
                    6c:a5:6a:15:ca:7f:6a:29:7c:63:84:7f:a4:61:63:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:2F:31:C0:04:C1:44:1C:16:37:A1:52:97:C0:25:5E:60:D3:23
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_sMvMcAEwUQcFjehUpfAJV5g0yM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:87:26:0c:63:fa:69:7d:e5:ec:ed:53:a6:d6:db:bd:c2:65:
         c7:59:7a:a9:f9:a3:d1:32:98:0c:5c:a0:a4:c3:60:ec:4a:48:
         89:e1:be:50:10:2d:09:6e:77:67:c2:d8:99:e2:6c:75:43:b9:
         73:a9:ee:f8:7f:87:a4:52:00:c6:57:59:6e:bd:d5:8c:27:61:
         81:f3:78:11:06:eb:51:fc:4c:93:96:a2:85:1d:e6:60:5d:2e:
         4e:8a:6e:0a:85:fd:65:be:02:5f:b5:42:ac:e2:9b:c4:15:f1:
         2e:1e:1a:b7:1d:04:63:1f:d0:79:e4:d9:45:b7:02:a2:b4:26:
         a5:0a:ee:12:f3:1d:1d:52:d1:fb:71:54:59:c4:4e:8d:a4:bb:
         0a:bd:83:ec:12:77:90:31:89:7b:6f:3e:9f:32:6e:d9:2e:c7:
         9f:b1:8a:1d:ce:a6:96:f4:6f:12:3b:76:e5:8c:70:0a:71:0c:
         c3:7a:72:6b:a3:db:07:0b:38:72:99:bf:bb:60:30:5f:8b:ec:
         a8:7e:be:e0:69:67:89:a4:d9:ca:7a:38:cf:1c:b9:ee:f0:db:
         99:1c:e4:bf:7f:bc:16:5f:e7:07:29:1b:e2:f9:09:b4:0e:db:
         c7:9b:26:e0:27:ff:90:75:c6:c2:eb:17:a0:d7:6d:4c:4a:0f:
         d8:f1:a7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 12:07:46 2024 by rpki-client on console-ams.rpki-client.org