Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa
File:                     rf7TJ1ixayUiGVLUn5O4N0FEk64.roa (raw, json)
Hash identifier:          EgGOFHP7hBvEIv2Cq9f2qD+Ov/6IXkFpy+vIVUuSi6A=
Subject key identifier:   AD:FE:D3:27:58:B1:6B:25:22:19:52:D4:9F:93:B8:37:41:44:93:AE
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019055A16684B1A54F44AC618CA08985BCEC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa
Signing time:             Wed 26 Jun 2024 17:39:19 +0000
ROA not before:           Wed 26 Jun 2024 17:39:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        92.114.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 09:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:55:a1:66:84:b1:a5:4f:44:ac:61:8c:a0:89:85:bc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun 26 17:39:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=adfed32758b16b25221952d49f93b837414493ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:74:aa:ae:e0:08:8e:3b:cf:ec:31:95:35:
                    b8:e8:a9:68:8d:70:a2:19:3c:72:d3:24:32:a5:4f:
                    95:9e:16:40:a3:89:7e:54:fd:4a:a4:ac:75:c6:d3:
                    03:7f:3b:44:2d:62:5f:08:be:3b:3f:bf:4a:0b:b0:
                    0d:95:ad:78:c1:e5:2f:57:f9:43:ea:4f:78:19:5b:
                    a3:ef:67:8c:fd:ca:a3:fd:0d:ca:87:74:42:1a:c7:
                    b2:c7:17:9a:e7:bf:b9:7d:0a:b6:61:a0:8e:61:83:
                    d3:0f:04:9f:f8:e2:12:e9:fe:c1:73:9e:41:e2:19:
                    7a:e0:9a:05:99:2b:94:cd:82:5e:f6:e9:5a:65:a2:
                    ee:17:02:24:e3:f5:20:02:a7:15:aa:50:3b:7e:e3:
                    c1:64:17:28:1c:44:98:c8:f7:de:9d:ab:1b:62:40:
                    d6:3e:4e:3a:03:8c:cf:90:08:44:de:13:8d:08:6b:
                    4c:57:ab:31:8a:60:a8:34:31:7a:42:70:c3:8a:ba:
                    eb:a8:36:7f:26:b4:c6:33:f6:40:b2:b5:8d:b3:81:
                    40:5b:a0:0f:aa:e2:cc:70:da:5e:8d:65:c8:b2:43:
                    c8:89:1a:3d:af:0f:74:00:5f:40:95:17:5f:82:eb:
                    4a:41:e6:84:9d:3b:e4:45:86:45:07:c1:04:59:31:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:D3:27:58:B1:6B:25:22:19:52:D4:9F:93:B8:37:41:44:93:AE
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rf7TJ1ixayUiGVLUn5O4N0FEk64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:8e:f3:bb:27:45:c8:65:69:81:c3:fa:4a:5c:54:ff:21:
         a6:f5:64:1c:b1:f9:64:d7:4b:bd:d8:0f:5b:8f:c5:30:7e:3a:
         89:0c:b1:01:57:13:af:72:fe:bc:0b:38:2f:eb:89:56:81:0a:
         04:5d:0a:f7:df:11:52:b9:05:16:ba:77:76:dc:c6:62:66:08:
         79:85:6d:57:63:52:19:04:b3:9d:a8:5a:60:46:6e:c5:90:59:
         da:c4:58:8c:0b:ef:e4:87:75:03:6b:18:e0:8e:69:12:66:47:
         ef:32:95:85:f5:90:7a:9a:5c:55:79:b0:ed:07:75:48:b4:c3:
         08:53:60:d4:01:88:b9:98:17:48:47:69:96:81:b9:d1:ed:5d:
         0d:93:01:f9:d8:4b:21:ab:77:9d:93:b6:af:61:11:ea:3c:c9:
         92:9a:33:e7:8b:5d:7a:fa:1e:fb:32:0d:45:01:01:1f:3c:96:
         c6:ba:f0:d3:3f:e0:47:3b:41:ad:ec:66:a4:a7:20:42:b2:53:
         e2:1b:4d:e6:e9:72:33:50:af:37:fc:ec:4e:c8:19:2e:5b:6c:
         8f:df:0d:18:d0:e9:6d:ac:e6:95:3b:8d:b8:63:70:8b:a8:23:
         42:d7:15:5d:d5:dd:83:75:e0:c7:e2:fe:2b:c0:94:41:10:60:
         58:6f:cb:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBVoWaEsaVPRKxhjKCJhbzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNjI2MTczOTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGZlZDMyNzU4YjE2YjI1MjIxOTUyZDQ5ZjkzYjgzNzQxNDQ5M2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOt0qq7gCI47z+wxlTW46KlojXCi
GTxy0yQypU+VnhZAo4l+VP1KpKx1xtMDfztELWJfCL47P79KC7ANla14weUvV/lD
6k94GVuj72eM/cqj/Q3Kh3RCGseyxxea57+5fQq2YaCOYYPTDwSf+OIS6f7Bc55B
4hl64JoFmSuUzYJe9ulaZaLuFwIk4/UgAqcVqlA7fuPBZBcoHESYyPfenasbYkDW
Pk46A4zPkAhE3hONCGtMV6sximCoNDF6QnDDirrrqDZ/JrTGM/ZAsrWNs4FAW6AP
quLMcNpejWXIskPIiRo9rw90AF9AlRdfgutKQeaEnTvkRYZFB8EEWTF8yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK3+0ydYsWslIhlS1J+TuDdBRJOuMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvcmY3VEoxaXhheVVpR1ZMVW41TzROMEZFazY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHIgMA0G
CSqGSIb3DQEBCwUAA4IBAQBMHI7zuydFyGVpgcP6SlxU/yGm9WQcsflk10u92A9b
j8UwfjqJDLEBVxOvcv68Czgv64lWgQoEXQr33xFSuQUWund23MZiZgh5hW1XY1IZ
BLOdqFpgRm7FkFnaxFiMC+/kh3UDaxjgjmkSZkfvMpWF9ZB6mlxVebDtB3VItMMI
U2DUAYi5mBdIR2mWgbnR7V0NkwH52Eshq3edk7avYRHqPMmSmjPni116+h77Mg1F
AQEfPJbGuvDTP+BHO0Gt7GakpyBCslPiG03m6XIzUK83/OxOyBkuW2yP3w0Y0Olt
rOaVO424Y3CLqCNC1xVd1d2DdeDH4v4rwJRBEGBYb8uY
-----END CERTIFICATE-----
Generated at Sat Oct 26 12:07:47 2024 by rpki-client on console-ams.rpki-client.org