Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa
File:                     meP85pki1Sjcco_QRkRiOxHxpH4.roa (raw, json)
Hash identifier:          srcqQNXIk3At5qsbOiZ73S6s9D2X5Im0GZxeS47ZveU=
Subject key identifier:   99:E3:FC:E6:99:22:D5:28:DC:72:8F:D0:46:44:62:3B:11:F1:A4:7E
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       018572A7F8D0DD0D9EB82456F8225FEF2CF8
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa
Signing time:             Mon 02 Jan 2023 13:24:48 +0000
ROA not before:           Mon 02 Jan 2023 13:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6707
IP address blocks:        185.92.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:a7:f8:d0:dd:0d:9e:b8:24:56:f8:22:5f:ef:2c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jan  2 13:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99e3fce69922d528dc728fd04644623b11f1a47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:a0:56:ed:0f:ec:0d:69:51:7c:3d:da:7d:
                    d8:32:a9:e7:ff:e2:79:07:1e:5a:19:fc:31:e7:bc:
                    d6:66:37:a1:ca:b6:eb:c7:14:7f:d8:ea:b6:a9:14:
                    cf:ce:f7:13:f2:9e:86:22:3e:df:38:8d:6c:1c:ca:
                    fb:18:c3:96:f6:e8:4e:d3:27:a2:84:42:3c:9d:ed:
                    94:e5:5d:04:be:82:65:17:d3:86:a9:81:7a:c4:b5:
                    f4:29:94:47:33:e9:71:cf:f4:47:72:76:7c:4b:b3:
                    4b:58:e6:e6:a6:d4:3d:e1:05:25:67:ba:49:8a:15:
                    ee:c9:e4:d4:8c:e8:51:0b:a8:97:05:24:20:4e:56:
                    05:13:99:62:1e:09:58:43:9e:1f:e9:05:9f:39:43:
                    c1:5f:ff:df:03:1b:ee:b0:23:1e:f6:f2:0b:91:ee:
                    a1:b9:61:1a:ee:ce:e6:94:e6:eb:17:73:31:4a:8a:
                    57:73:b2:5c:5a:d2:57:e2:8f:c1:e6:f3:9e:6d:a3:
                    6f:b8:cc:3b:8e:31:0a:07:ac:b8:a9:85:da:38:63:
                    86:5d:20:27:5e:5e:f2:18:56:9e:1b:6e:18:f3:31:
                    cb:86:75:96:e1:4f:7c:20:32:c6:00:65:1c:a8:45:
                    6a:d8:66:c4:0c:a9:f2:ae:35:8f:ae:ee:25:28:a7:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:FC:E6:99:22:D5:28:DC:72:8F:D0:46:44:62:3B:11:F1:A4:7E
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/meP85pki1Sjcco_QRkRiOxHxpH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:60:ac:28:56:cb:6a:8f:af:b7:7b:a1:ab:30:a0:6a:c2:
         ef:f2:2a:47:44:4b:3f:91:b9:39:64:0e:41:69:db:98:24:7f:
         6e:02:53:67:37:51:42:4a:63:88:de:26:9a:7b:07:be:63:8e:
         12:4c:7b:ac:85:30:b9:07:53:ea:b3:ff:78:71:41:43:ca:23:
         2c:11:35:d8:de:d2:3d:a3:ff:07:d1:3b:af:a5:19:8a:6c:78:
         7d:c1:3a:66:82:9d:c0:a9:46:8d:ee:a1:5f:df:5b:2a:5e:e5:
         27:ab:17:92:1f:cf:7d:18:1f:1c:67:0e:e0:09:29:5e:58:e2:
         27:62:c0:0f:1a:03:7c:36:ee:e7:d0:1f:7e:67:a6:44:c7:a1:
         12:e0:d0:d0:ec:13:8c:9c:80:e8:42:34:8d:0a:af:cb:bd:48:
         a9:38:ca:29:a6:cc:38:91:36:a4:68:4e:e9:a5:59:ef:b3:33:
         88:e3:78:a9:c8:44:43:fe:cb:8c:4d:fa:56:2a:88:8f:a7:60:
         b3:3d:1c:2e:07:f6:3f:8c:f5:5b:e1:fe:c9:0e:be:a3:76:a4:
         64:b4:69:b9:40:a9:08:88:25:54:00:58:9b:e6:69:d1:51:95:
         3d:17:8d:e9:b6:20:07:02:d6:ea:a0:80:cb:db:72:f1:bf:5b:
         a9:92:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:49 2024 by rpki-client on console-fra.rpki-client.org