Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DVv6OtK6PzQCTmJ5LeX3C092AwY.roa
File:                     DVv6OtK6PzQCTmJ5LeX3C092AwY.roa (raw, json)
Hash identifier:          4Id7AgGaRQvWY2gDvL6JhEW0TGhyzIFrOzB+WqJ2op8=
Subject key identifier:   0D:5B:FA:3A:D2:BA:3F:34:02:4E:62:79:2D:E5:F7:0B:4F:76:03:06
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       018F39151F91DFDEC544220D841AA8352AEF
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DVv6OtK6PzQCTmJ5LeX3C092AwY.roa
Signing time:             Thu 02 May 2024 11:33:56 +0000
ROA not before:           Thu 02 May 2024 11:33:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        92.53.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 14:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:39:15:1f:91:df:de:c5:44:22:0d:84:1a:a8:35:2a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: May  2 11:33:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0d5bfa3ad2ba3f34024e62792de5f70b4f760306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:b2:f6:61:4e:db:e6:16:98:c5:f7:16:80:
                    26:f5:e1:1a:94:9b:f2:f9:a5:79:63:a3:6a:74:a2:
                    b7:62:ad:1e:82:a2:2b:bf:b9:b5:67:8f:d1:c8:37:
                    5d:6f:8d:42:b2:26:56:d9:34:04:86:4c:6d:41:8f:
                    77:c4:e2:63:82:94:50:73:fe:1e:71:d1:4b:50:f7:
                    21:56:39:ec:8c:c2:ac:70:fe:3b:7f:1b:55:fc:4d:
                    55:e3:31:8c:dc:3c:b3:f5:81:6f:62:87:5d:f1:54:
                    b0:ae:b0:a0:2f:f2:b0:b0:74:c2:ad:96:3b:f1:97:
                    b5:cf:23:ed:5d:94:dc:fd:20:0d:c8:01:2a:42:e0:
                    c5:33:59:9a:b6:6d:23:be:a3:49:41:78:cd:bd:5f:
                    e5:ae:c2:3f:26:7d:d0:b2:0b:62:81:88:82:35:6a:
                    f5:2d:64:9c:6b:d9:5b:38:ed:de:19:62:82:f3:01:
                    4f:85:7d:3e:3c:f4:1a:30:89:6c:0b:06:3f:bd:58:
                    26:f7:9d:68:25:af:9c:fc:ba:ee:47:9d:df:d2:3c:
                    34:0f:ef:4e:6c:40:7f:c8:c9:74:50:1e:37:a8:fc:
                    a8:c9:9b:e0:23:2a:de:ec:6d:b9:b3:bb:12:84:bd:
                    53:f4:15:4e:9f:1d:0a:93:4b:9c:ba:95:dd:53:b7:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:FA:3A:D2:BA:3F:34:02:4E:62:79:2D:E5:F7:0B:4F:76:03:06
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/DVv6OtK6PzQCTmJ5LeX3C092AwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:3e:df:18:d2:ad:de:38:ef:45:b9:97:97:a2:1b:2b:bb:8f:
         11:30:c9:11:3f:62:5f:d4:6d:43:11:7d:4c:cb:37:6e:c5:4a:
         ef:0d:f7:87:6d:ed:c6:c7:cf:bb:28:9f:17:45:ed:66:fd:d6:
         ea:ba:2d:d8:85:27:b8:d0:ba:54:a6:c9:b1:1f:7b:39:cd:37:
         e6:a3:65:31:80:c4:23:fd:72:83:d0:1f:d0:ac:53:14:bb:5d:
         16:2c:ce:e2:90:9c:43:41:6b:10:1b:9a:a6:8c:21:e8:31:5d:
         4c:62:09:52:44:88:39:eb:42:2d:93:35:ef:30:2a:d4:e9:d4:
         a6:9e:51:60:08:ae:2d:7e:8d:5b:49:7e:65:87:0d:04:b7:44:
         a4:98:90:65:93:f9:00:a8:da:c8:e4:a8:8b:d0:11:39:ea:38:
         17:f3:22:12:d8:d3:9e:3d:78:6e:5d:c9:fd:f0:72:9f:0b:cb:
         dd:54:e9:95:31:25:02:e1:b4:59:a9:d2:a2:bb:c3:86:ab:49:
         77:9a:cf:ff:0a:39:87:dc:5e:38:c1:bd:cd:17:bf:38:73:e9:
         69:45:63:e0:e7:53:23:21:10:80:a8:15:43:e6:14:d2:fc:50:
         d2:a8:f3:3f:2b:a0:6e:ae:54:8c:b9:fd:5e:7c:f0:01:ac:cd:
         b8:c3:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org