Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa
File:                     m88R3m7vApibfIzE75Gq9ITR0TE.roa (raw, json)
Hash identifier:          K9uxsfxoMIXbpzO1kIXqezo6+KO8FfXAZfjzZLhhE8o=
Subject key identifier:   9B:CF:11:DE:6E:EF:02:98:9B:7C:8C:C4:EF:91:AA:F4:84:D1:D1:31
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0185707062839131238DB72C2BABAD246A09
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa
Signing time:             Mon 02 Jan 2023 03:04:51 +0000
ROA not before:           Mon 02 Jan 2023 03:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197333
IP address blocks:        62.33.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:62:83:91:31:23:8d:b7:2c:2b:ab:ad:24:6a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jan  2 03:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bcf11de6eef02989b7c8cc4ef91aaf484d1d131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:f2:f9:68:26:94:63:b0:ef:7f:f0:b5:79:
                    f9:7e:87:e6:7b:61:64:e6:1f:73:6c:fb:34:ca:66:
                    8b:50:57:cc:ce:d7:af:c0:94:69:6c:77:04:71:7a:
                    91:c7:83:f7:7c:9b:25:4f:27:d4:2f:8d:2f:f0:d5:
                    c8:d5:fe:f6:52:df:0d:6f:b6:39:a7:b4:41:9b:11:
                    ed:b1:a8:82:aa:5d:7b:a9:75:ee:f2:24:a4:b3:35:
                    d0:3c:6e:07:94:91:26:9f:dc:4c:f9:ca:41:24:8f:
                    51:3e:46:87:a9:5b:f3:87:a8:e1:49:37:b2:7f:86:
                    5a:fe:42:f1:6e:9a:d6:5a:7c:c5:87:6f:e0:af:0e:
                    23:4f:e7:21:d7:eb:34:5f:7e:e2:af:94:cb:68:5f:
                    62:07:d4:88:85:3f:f7:6a:ad:08:43:8f:af:a5:e1:
                    01:5a:a8:51:e3:ee:af:da:ba:87:55:4e:ce:8d:20:
                    b0:1b:12:16:e7:0d:82:f0:d7:b8:5b:4a:77:41:51:
                    9d:2a:38:26:57:2d:5b:5f:b5:af:c5:43:42:b2:5d:
                    93:77:2f:36:d0:15:f9:53:ae:f9:9e:e0:a5:3e:e6:
                    63:ca:cd:4c:7e:3b:20:97:b3:e8:0f:e5:40:4a:e2:
                    4a:aa:46:80:39:e2:ad:5e:e2:86:a5:71:69:be:7a:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:11:DE:6E:EF:02:98:9B:7C:8C:C4:EF:91:AA:F4:84:D1:D1:31
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/m88R3m7vApibfIzE75Gq9ITR0TE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.33.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:ac:14:24:7f:be:96:08:ef:9e:3f:d6:49:34:85:ab:b6:
         57:4a:d0:ac:c7:b9:57:03:f1:4a:9d:c3:d8:e9:21:e7:7a:68:
         fd:3e:3e:a9:c0:4b:66:88:52:12:ad:81:19:56:36:76:69:76:
         fa:6e:a7:da:91:64:7c:32:8d:b1:4d:63:7c:fc:ed:98:3d:7a:
         79:3c:47:30:ba:99:69:b1:e6:60:db:60:4a:d0:4f:7c:75:e4:
         c7:47:9f:82:a5:b5:31:9e:11:0d:b1:3c:93:05:11:e3:a7:5c:
         30:16:b5:c7:bd:4f:6f:7f:c2:a5:ff:d4:b1:22:87:15:5e:35:
         7f:96:68:14:7e:41:ed:23:4a:f9:01:c1:d9:c8:a4:72:94:b0:
         ec:27:35:89:67:ac:2f:b4:0f:39:64:dd:90:45:74:23:ad:04:
         1f:41:ea:a4:90:e6:52:ec:99:05:a0:64:16:64:a5:20:86:79:
         a7:64:4b:d5:8e:ec:d2:75:70:03:2f:db:f5:6e:2a:70:21:d7:
         f8:59:e1:0d:c7:f7:cb:36:d3:1d:37:0e:0a:75:8c:15:07:1b:
         51:a2:64:38:58:36:eb:94:71:45:3b:5d:8c:a6:ee:71:44:dc:
         1a:6a:b2:7a:29:c5:99:ad:02:85:26:4b:a1:4a:fa:ef:bf:85:
         f8:6c:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org