Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Vwxgn604izdgYydbMRbI3jChS5E.roa
File:                     Vwxgn604izdgYydbMRbI3jChS5E.roa (raw, json)
Hash identifier:          ZjYY44NQGpfC1ZIJIcfoWQK5zs++miLVelYO9/odpmM=
Subject key identifier:   57:0C:60:9F:AD:38:8B:37:60:63:27:5B:31:16:C8:DE:30:A1:4B:91
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       01918D96E6CF97AB114D85E92E063843E05A
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Vwxgn604izdgYydbMRbI3jChS5E.roa
Signing time:             Mon 26 Aug 2024 07:29:22 +0000
ROA not before:           Mon 26 Aug 2024 07:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.233.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 07:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8d:96:e6:cf:97:ab:11:4d:85:e9:2e:06:38:43:e0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Aug 26 07:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=570c609fad388b376063275b3116c8de30a14b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:04:2d:19:f6:a0:25:98:ef:02:54:13:9d:
                    e2:66:ad:73:29:11:32:99:93:3b:20:09:e9:2e:34:
                    be:1e:17:80:fd:5e:bd:33:6d:af:8a:67:0d:fc:4e:
                    a2:97:dd:e7:a9:66:dc:05:be:46:cb:05:61:aa:ab:
                    bd:bf:81:af:e0:8c:a1:0e:86:f8:5f:5f:92:72:52:
                    c4:57:42:cb:8d:88:1c:4b:e4:c4:64:21:d2:3e:29:
                    eb:dc:2b:89:53:d3:22:08:02:81:20:0e:52:42:a9:
                    82:27:6d:43:29:73:7d:dc:1d:94:12:86:bd:f9:29:
                    24:f8:ef:49:27:d6:a3:7d:96:79:d7:0c:8b:a8:50:
                    05:58:24:dc:20:5a:b2:e8:32:fc:64:ff:31:86:16:
                    96:1b:c5:d7:15:d3:84:6f:01:63:1f:de:4b:ae:b1:
                    d2:9b:16:b9:99:d2:a8:c8:e9:73:2b:ac:8e:6d:2f:
                    2c:5b:f0:81:84:5b:35:3d:d1:f4:e1:60:2f:b5:8f:
                    94:d3:db:bd:f3:fe:1d:05:77:20:75:6b:76:a0:21:
                    b1:c9:b4:5b:9f:62:9b:7d:b3:f1:3b:0c:cf:dd:72:
                    a1:cb:31:57:77:b8:87:a1:ba:a1:de:62:5a:41:55:
                    52:24:35:64:bb:ed:3c:64:d7:97:03:80:66:25:32:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:60:9F:AD:38:8B:37:60:63:27:5B:31:16:C8:DE:30:A1:4B:91
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/Vwxgn604izdgYydbMRbI3jChS5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:db:2a:2f:84:3b:49:04:44:1f:8b:75:7a:8c:91:b4:14:
         94:ef:5e:5a:df:45:f4:ab:9c:14:c7:61:d1:ce:1a:63:77:95:
         de:74:b8:20:9a:59:21:f3:0d:84:5c:39:53:7a:6a:58:54:cc:
         aa:19:a2:82:7d:83:1c:7e:e9:08:44:33:a2:5d:ee:3d:98:71:
         af:e2:ec:3c:73:32:b5:78:e7:07:78:ac:31:f1:a1:36:bd:50:
         ef:dd:cc:ce:a7:3a:3b:98:39:f4:bb:23:f6:6d:e8:72:73:7c:
         66:af:bb:6d:46:e9:f6:ab:83:ce:4c:fa:90:32:ec:f1:11:99:
         12:8f:bb:e5:d5:33:3e:29:aa:2f:4f:3d:f0:a9:b1:7f:76:47:
         38:5b:23:41:c8:af:94:e6:d5:57:c4:c1:ae:ab:4d:ba:e6:51:
         87:70:8a:ac:40:f1:94:db:53:0e:76:d8:68:7c:ec:58:9e:37:
         db:9f:c6:4b:c1:b2:89:79:a7:02:b3:ca:5a:6f:c9:71:ba:4c:
         69:ce:cb:e3:55:3c:1b:f4:9d:7c:75:70:30:e3:d4:08:00:d8:
         ac:16:12:92:50:ea:30:a6:b5:a8:94:d1:66:2d:84:e6:d7:fc:
         32:8e:45:c9:92:77:5e:f4:6c:67:d7:2d:38:da:9d:54:84:01:
         fd:7f:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:16:37 2024 by rpki-client on console-fra.rpki-client.org