Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/PRe8E2gVI0Wwas7EYZ6YZZ75hlM.roa
File:                     PRe8E2gVI0Wwas7EYZ6YZZ75hlM.roa (raw, json)
Hash identifier:          WUJRc0wLhUxoMcsPDLW5Qyv9pU4GsFR3pwm7eswW71g=
Subject key identifier:   3D:17:BC:13:68:15:23:45:B0:6A:CE:C4:61:9E:98:65:9E:F9:86:53
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       0187983549246D542CE289120FDB28F85641
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/PRe8E2gVI0Wwas7EYZ6YZZ75hlM.roa
Signing time:             Wed 19 Apr 2023 06:30:41 +0000
ROA not before:           Wed 19 Apr 2023 06:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60912
IP address blocks:        139.28.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 08:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:35:49:24:6d:54:2c:e2:89:12:0f:db:28:f8:56:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Apr 19 06:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d17bc1368152345b06acec4619e98659ef98653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:c0:46:40:34:46:a2:53:5b:3a:d2:be:b7:
                    57:49:a7:5a:1d:72:fb:ca:75:d5:dd:d3:b2:73:95:
                    43:c9:ef:87:ab:67:3b:c7:29:45:72:c4:19:82:f6:
                    41:ab:9a:e8:72:b8:5d:3b:c6:e9:9e:48:8c:83:08:
                    ac:f0:e2:c9:7e:d5:bd:d2:a2:bf:18:67:3d:fe:90:
                    ec:b8:da:e8:70:4f:47:0d:b6:9a:f0:25:58:35:33:
                    4a:03:2b:a8:53:f2:73:c7:c8:95:73:a3:87:09:7a:
                    21:86:02:6d:40:b5:3b:e8:fc:04:6a:e5:9b:76:ca:
                    1f:2c:93:f5:11:85:d0:f4:51:ad:4b:72:73:4d:71:
                    39:7a:9b:82:3d:7e:0c:19:b7:66:ba:0f:52:e0:a9:
                    21:2d:de:93:68:f0:02:59:68:30:1f:1d:91:9c:9b:
                    4e:d6:a0:bc:c0:79:95:53:dd:cc:55:f3:16:23:4e:
                    51:92:94:e9:cf:92:f4:8c:27:ec:12:a9:2e:fd:d6:
                    79:31:9d:fa:fe:3e:14:bd:f3:c7:f9:e9:9c:0e:44:
                    17:a4:78:83:cf:c6:04:22:33:f6:22:64:07:87:14:
                    05:81:b0:0a:3e:96:ff:27:cb:77:9f:f4:2b:a2:b4:
                    c9:4a:3a:f6:ae:c0:96:63:72:38:92:e0:84:5c:6c:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:17:BC:13:68:15:23:45:B0:6A:CE:C4:61:9E:98:65:9E:F9:86:53
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/PRe8E2gVI0Wwas7EYZ6YZZ75hlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:1e:86:ea:72:e5:de:92:02:0c:c3:e4:6a:e6:c5:3b:29:76:
         93:96:59:59:70:98:fe:cc:53:8f:0b:c6:b5:a6:65:88:f0:b4:
         50:d7:57:43:51:b3:25:93:ed:ef:00:51:02:30:2c:1e:eb:3f:
         a6:73:65:c1:54:77:fa:72:e3:b2:4c:83:b2:fb:84:fc:78:1f:
         ae:2b:32:c2:0c:e8:69:e1:24:c3:7e:6e:f9:d7:03:19:96:ad:
         02:74:80:a4:11:fb:f8:9c:08:26:cc:10:53:50:52:39:4c:b0:
         59:83:12:87:21:a0:a3:4d:f9:e8:f1:85:a9:59:f1:6f:d5:f9:
         b3:69:23:2c:17:5d:38:3c:e2:63:8e:c3:ba:3d:5f:05:07:c5:
         7a:65:bd:47:9b:af:a6:b2:5f:78:ce:21:d7:3c:ed:7f:73:22:
         04:58:bc:43:46:e6:52:49:0a:79:3f:a1:9d:c0:59:ec:b9:82:
         a0:16:5b:c0:bd:0c:8b:dd:8e:ae:2d:20:26:da:95:3d:57:8a:
         83:bb:4f:00:4d:5b:fd:f0:f6:6d:ea:98:92:f9:e4:d2:44:a0:
         51:d0:cd:84:0d:dc:a9:a3:b4:dd:c0:89:cb:2a:77:67:a7:c8:
         0b:7d:69:38:4c:29:56:43:e0:68:bf:58:44:15:5d:25:d7:84:
         5f:25:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:41 2024 by rpki-client on console-ams.rpki-client.org