Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa
File:                     uiYjtyGVF9e4Xkxwqt9cIab31U4.roa (raw, json)
Hash identifier:          GXRs9r0L00og7WHscm2C5Lmb0uBh9LNNKYsXDCjmq8A=
Subject key identifier:   BA:26:23:B7:21:95:17:D7:B8:5E:4C:70:AA:DF:5C:21:A6:F7:D5:4E
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       0192F241F440056353B0EA3F28895431471A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa
Signing time:             Sun 03 Nov 2024 13:41:01 +0000
ROA not before:           Sun 03 Nov 2024 13:41:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        37.202.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Nov 2024 04:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f2:41:f4:40:05:63:53:b0:ea:3f:28:89:54:31:47:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Nov  3 13:41:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba2623b7219517d7b85e4c70aadf5c21a6f7d54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:2f:1c:e6:1d:27:bb:03:cf:22:1f:9c:c0:
                    66:a2:8a:5d:88:e6:23:5f:54:5c:68:1f:fa:cf:db:
                    c1:0d:c3:0b:86:a9:73:ce:38:ba:16:80:37:11:c0:
                    1a:0d:aa:b0:83:54:64:37:3f:6a:1c:48:60:fe:67:
                    3d:7f:1e:ab:64:78:cf:40:fc:0a:c8:79:1b:05:5b:
                    c1:56:ff:d6:77:59:78:8d:a2:21:9d:98:79:27:2f:
                    bb:bc:69:fb:42:17:b4:28:06:1b:da:ba:4e:d6:7d:
                    a5:4c:c1:ec:e2:09:f9:b4:a7:db:27:12:bd:c8:75:
                    35:93:0f:37:eb:55:8f:84:8f:2f:7a:b7:c8:d2:6e:
                    2d:9f:45:58:95:da:c1:cd:4b:31:1d:76:6b:ef:95:
                    9b:a3:ce:47:fa:aa:1f:3f:6a:12:49:ac:6a:74:c2:
                    78:b6:9d:9e:3b:60:09:cd:26:9c:e2:50:65:68:0b:
                    3e:b0:dc:c9:50:58:b6:ed:11:96:f0:67:29:e9:d2:
                    fc:06:8c:c4:9a:d0:f0:64:08:bc:74:f8:8a:34:21:
                    29:06:8e:9e:15:eb:48:15:3c:a4:9c:e7:5e:df:a8:
                    f3:a3:bd:37:dd:08:98:12:54:55:a4:4b:2e:5f:b5:
                    da:40:fa:db:c8:7f:2a:73:ec:52:5b:08:be:da:37:
                    c4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:23:B7:21:95:17:D7:B8:5E:4C:70:AA:DF:5C:21:A6:F7:D5:4E
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uiYjtyGVF9e4Xkxwqt9cIab31U4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.202.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:78:08:ae:f5:85:97:9e:9b:6d:a6:09:3a:a5:3f:d0:10:79:
         a0:7b:c2:17:1c:f0:5f:af:44:2e:82:b4:c6:a2:75:e0:17:bd:
         97:d0:92:80:92:57:d3:22:56:bc:96:26:1b:ad:63:76:40:cf:
         30:70:22:84:96:73:cd:43:1c:9a:e8:49:f4:49:2d:3e:99:6e:
         af:d3:99:6e:e8:9f:51:e9:10:e4:56:c3:89:06:50:bc:4e:97:
         39:96:d1:6d:0c:25:9d:a9:ff:50:01:60:ff:16:40:24:c9:bc:
         9b:fc:17:5f:e8:67:05:84:7b:7b:fa:0b:51:4e:e2:68:86:46:
         28:eb:20:f8:3b:9e:02:8f:da:c8:c6:93:40:21:5e:d3:2c:f7:
         96:c8:92:13:68:2c:df:eb:92:82:87:b4:8f:5e:df:cb:d1:d1:
         5a:69:db:77:14:b9:ce:33:72:94:c6:b4:55:da:dd:3d:bb:d7:
         ce:2c:a9:e7:38:b2:05:85:6c:55:8c:76:37:0c:a7:02:2d:5e:
         ab:f6:2d:e7:b5:16:ef:e9:88:c3:fb:4a:f5:37:e3:e0:9c:d6:
         93:23:16:f1:e5:51:4c:bb:7f:44:a2:f8:e6:5e:ed:bd:26:6f:
         db:8e:11:3c:d7:e8:ee:43:c1:4e:0a:7c:1c:2e:83:98:77:d9:
         e9:eb:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:56 2024 by rpki-client on console-ams.rpki-client.org