Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/enuo2pgnMeOgUoiAI8hL3perwzk.roa
File:                     enuo2pgnMeOgUoiAI8hL3perwzk.roa (raw, json)
Hash identifier:          I1VgC5VDclU/hDV+ILrn0OxZyX4E7VbPhYk2YEskYho=
Subject key identifier:   7A:7B:A8:DA:98:27:31:E3:A0:52:88:80:23:C8:4B:DE:97:AB:C3:39
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       018DB968FC9FFDA6787DBE426878A46D6B01
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/enuo2pgnMeOgUoiAI8hL3perwzk.roa
Signing time:             Sat 17 Feb 2024 23:31:21 +0000
ROA not before:           Sat 17 Feb 2024 23:31:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208324
IP address blocks:        92.119.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 21:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b9:68:fc:9f:fd:a6:78:7d:be:42:68:78:a4:6d:6b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Feb 17 23:31:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a7ba8da982731e3a052888023c84bde97abc339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:0c:59:01:26:6d:49:b8:81:2c:8e:18:6a:
                    92:b0:71:96:bf:ab:1b:e9:d8:73:90:81:48:5c:18:
                    03:f2:e4:36:18:41:ac:76:3f:5c:99:f8:ea:0f:f4:
                    7c:fb:f9:64:f6:19:3d:01:e3:5b:86:4d:1e:a7:11:
                    aa:27:6b:98:d6:7d:12:80:b9:c8:82:e8:d5:2e:18:
                    a2:5b:38:7b:8c:1f:de:ff:3f:7d:ae:bb:e1:b1:a5:
                    a9:0c:25:b9:02:2c:fb:c0:93:17:b1:63:56:3b:b8:
                    03:2a:a6:7c:3a:87:67:b5:87:24:85:36:6e:41:b8:
                    a7:28:ae:17:c3:4f:61:d4:63:e9:a5:33:29:fe:ac:
                    f7:bb:b8:64:fe:2f:07:a0:79:1f:2c:11:43:cc:f8:
                    46:a1:82:34:7a:a1:64:ae:f6:ad:31:2a:46:2e:99:
                    73:21:5c:bf:1a:2c:6e:e1:ed:1e:b3:ec:0a:b5:04:
                    e0:ac:b9:a0:be:fe:22:29:19:02:73:47:3d:6b:56:
                    b7:03:d3:13:02:e8:f8:f2:b0:2d:94:05:7d:f0:b4:
                    30:91:0f:a1:0d:76:3a:92:a8:a9:fa:c2:d5:a6:e2:
                    d8:a8:ae:29:2c:3d:81:53:1c:f5:7f:24:30:00:8c:
                    cb:9f:0e:6f:31:36:80:03:aa:af:10:f1:f7:2a:90:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7B:A8:DA:98:27:31:E3:A0:52:88:80:23:C8:4B:DE:97:AB:C3:39
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/enuo2pgnMeOgUoiAI8hL3perwzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:4e:d2:9a:c7:ad:ed:6f:9e:89:df:c5:2f:31:c3:bf:57:90:
         ad:06:0c:91:ff:f0:b0:cd:2f:7c:09:18:c8:21:c9:cb:6d:74:
         92:e5:97:e7:46:1f:35:d1:3f:35:a1:96:b3:c0:de:23:cc:45:
         64:de:14:55:2f:71:ec:fa:5e:91:b4:94:22:ac:a3:ac:98:7d:
         6e:5d:15:77:3d:bf:bb:34:18:94:aa:e9:e9:78:61:59:30:d3:
         c1:69:99:fe:57:02:9d:f9:f9:ad:68:1f:6e:49:89:05:f7:a7:
         dd:00:9b:0c:8f:36:10:0f:30:6f:5c:c5:85:8c:ad:2d:e5:23:
         4a:11:05:69:e4:b8:df:2d:a9:28:33:a5:03:26:9d:30:68:2f:
         e7:b4:43:03:b0:fa:50:fe:9e:9b:da:31:f6:eb:8f:01:17:15:
         45:ee:50:6d:e5:6e:44:a6:0b:75:d9:fb:51:cd:cd:c1:8d:66:
         de:cf:f6:7b:3b:f6:21:0a:f4:88:9d:db:cf:36:2c:58:9f:a0:
         f8:d5:c6:74:96:0f:8e:9c:5e:ce:9e:d6:e7:8d:d7:98:80:48:
         d0:34:08:89:bd:54:e9:69:92:32:ca:a1:9d:51:59:16:76:39:
         17:bc:97:bf:3b:95:22:b7:6d:8d:cd:ee:17:21:07:b4:39:db:
         a0:29:d3:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY25aPyf/aZ4fb5CaHikbWsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZkOTAyNjM3MmNmY2U4ZmRlODIzYzNlZjljOWY3OTBh
YWUxNGYwHhcNMjQwMjE3MjMzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdiYThkYTk4MjczMWUzYTA1Mjg4ODAyM2M4NGJkZTk3YWJjMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM8MWQEmbUm4gSyOGGqSsHGWv6sb
6dhzkIFIXBgD8uQ2GEGsdj9cmfjqD/R8+/lk9hk9AeNbhk0epxGqJ2uY1n0SgLnI
gujVLhiiWzh7jB/e/z99rrvhsaWpDCW5Aiz7wJMXsWNWO7gDKqZ8OodntYckhTZu
QbinKK4Xw09h1GPppTMp/qz3u7hk/i8HoHkfLBFDzPhGoYI0eqFkrvatMSpGLplz
IVy/Gixu4e0es+wKtQTgrLmgvv4iKRkCc0c9a1a3A9MTAuj48rAtlAV98LQwkQ+h
DXY6kqip+sLVpuLYqK4pLD2BUxz1fyQwAIzLnw5vMTaAA6qvEPH3KpDiGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHp7qNqYJzHjoFKIgCPIS96Xq8M5MB8GA1UdIwQY
MBaAFLO22QJjcs/Oj96CPD75yfeQquFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjct
ZDRmMTJiMzdhMzE4LzEvZW51bzJwZ25NZU9nVW9pQUk4aEwzcGVyd3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MzFkNTMtMDRlMC00NTczLWFjZjctZDRmMTJiMzdhMzE4
LzEvczdiWkFtTnl6ODZQM29JOFB2bko5NUNxNFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHc/MA0G
CSqGSIb3DQEBCwUAA4IBAQDQTtKax63tb56J38UvMcO/V5CtBgyR//CwzS98CRjI
IcnLbXSS5ZfnRh810T81oZazwN4jzEVk3hRVL3Hs+l6RtJQirKOsmH1uXRV3Pb+7
NBiUqunpeGFZMNPBaZn+VwKd+fmtaB9uSYkF96fdAJsMjzYQDzBvXMWFjK0t5SNK
EQVp5LjfLakoM6UDJp0waC/ntEMDsPpQ/p6b2jH2648BFxVF7lBt5W5Epgt12ftR
zc3BjWbez/Z7O/YhCvSIndvPNixYn6D41cZ0lg+OnF7OntbnjdeYgEjQNAiJvVTp
aZIyyqGdUVkWdjkXvJe/O5Uit22Nze4XIQe0OdugKdOg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:16 2024 by rpki-client on console-fra.rpki-client.org