Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vAD7C67sglE8siCNEMyQDTixQj4.roa
File:                     vAD7C67sglE8siCNEMyQDTixQj4.roa (raw, json)
Hash identifier:          Vh79LlD/OUGo1VGNQK1OV6MZ2ZQC7x9Xc87B+XEXYp8=
Subject key identifier:   BC:00:FB:0B:AE:EC:82:51:3C:B2:20:8D:10:CC:90:0D:38:B1:42:3E
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       0192C1DB7117DBD44AC88CC12E38F84F0627
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vAD7C67sglE8siCNEMyQDTixQj4.roa
Signing time:             Fri 25 Oct 2024 04:07:16 +0000
ROA not before:           Fri 25 Oct 2024 04:07:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        185.233.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Nov 2024 22:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:c1:db:71:17:db:d4:4a:c8:8c:c1:2e:38:f8:4f:06:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Oct 25 04:07:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bc00fb0baeec82513cb2208d10cc900d38b1423e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2c:31:a1:0f:f2:80:3c:f1:a0:03:4f:e2:85:
                    c9:e7:a3:40:ef:6f:4d:a6:03:c1:1e:4e:5e:16:ab:
                    2a:98:ba:28:9b:55:67:30:f1:ce:10:93:54:78:a0:
                    c2:98:20:3a:b5:18:4e:fe:8c:14:7f:4b:74:ca:1c:
                    52:80:37:6a:78:4f:b3:96:e0:50:9c:13:a5:d2:d8:
                    68:ac:68:a8:4e:1f:13:93:6d:c2:17:6e:84:fe:df:
                    18:a3:c2:f7:a6:35:f7:a9:5f:27:3f:9b:73:58:f0:
                    b0:25:64:be:86:e6:73:45:50:a8:e9:09:8f:b0:33:
                    20:bc:89:90:02:fb:61:1d:57:52:3e:20:9b:e8:8c:
                    30:d9:b2:2c:6a:ce:0f:72:1c:2f:2e:6b:80:02:cc:
                    f5:a6:a8:49:7d:93:10:d6:9a:85:a4:c1:15:47:d8:
                    54:2a:f7:28:01:75:46:3a:99:fe:3d:12:24:b1:ce:
                    3a:bd:6e:94:e0:48:8d:9d:ef:9b:17:f0:60:ed:b9:
                    4e:70:d9:df:29:ac:1f:c2:ec:37:bb:3f:9b:2a:bc:
                    f5:71:ca:48:65:6e:87:5c:30:f4:23:a6:ed:98:0a:
                    74:29:49:58:65:39:b9:a6:11:3f:91:fe:e0:a0:92:
                    3d:75:f7:16:95:f0:24:e7:31:84:d3:73:90:13:f3:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:FB:0B:AE:EC:82:51:3C:B2:20:8D:10:CC:90:0D:38:B1:42:3E
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/vAD7C67sglE8siCNEMyQDTixQj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:d6:79:53:0a:53:ef:f8:83:e4:ff:0d:15:c9:9d:46:12:
         92:a4:94:4f:31:ab:2a:35:60:17:14:31:a4:73:ca:70:c8:44:
         aa:b1:5b:96:a8:f6:d2:73:cd:ac:ce:14:37:cc:6f:8a:52:1b:
         9b:62:ed:41:1c:f6:2f:be:92:17:7f:e0:72:c4:34:ec:65:8b:
         19:8c:bf:2e:23:e1:42:b6:7c:79:33:35:1b:8b:67:c6:03:af:
         91:9c:bc:f6:9c:83:53:81:17:db:fb:0e:7e:a4:64:11:1f:69:
         cb:6c:5a:6d:01:4a:82:4d:9d:52:7d:81:4f:70:cd:22:cd:75:
         e4:fc:30:cd:cd:1d:62:14:ca:dd:1c:03:d9:bb:ca:2c:f8:6b:
         6f:e3:60:e7:45:7a:4b:f1:dc:3c:c8:d9:d0:cc:3c:eb:c6:f3:
         29:ac:2a:84:8e:81:ee:d8:a8:ed:d3:d7:f3:e0:b1:e5:b2:52:
         af:2b:ef:5a:b9:77:b5:e6:5c:46:4b:13:ee:b1:53:d6:bd:4e:
         5d:0f:64:55:2c:20:ad:19:75:11:af:59:99:1a:f2:54:f7:06:
         27:c1:e9:17:bf:28:31:cb:7f:ac:e5:da:04:c8:3c:c2:08:ff:
         71:51:62:c6:c2:b6:18:12:f9:51:5b:26:a8:b4:3b:0a:ad:60:
         fd:60:93:f9
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 14 00:17:56 2024 by rpki-client on console-ams.rpki-client.org