Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/dunOxjOv9rhQwwS3eORtloO8jm0.roa
File:                     dunOxjOv9rhQwwS3eORtloO8jm0.roa (raw, json)
Hash identifier:          0lHtXfPp2kAZyfQR9sd+umVTb2FB8K7PA33LhksigP0=
Subject key identifier:   76:E9:CE:C6:33:AF:F6:B8:50:C3:04:B7:78:E4:6D:96:83:BC:8E:6D
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       0190161022B6CBC155B7DA948B7FB5ACF884
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/dunOxjOv9rhQwwS3eORtloO8jm0.roa
Signing time:             Fri 14 Jun 2024 09:24:34 +0000
ROA not before:           Fri 14 Jun 2024 09:24:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        92.53.160.0/20 maxlen: 24
                          92.53.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 29 Jun 2024 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:16:10:22:b6:cb:c1:55:b7:da:94:8b:7f:b5:ac:f8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jun 14 09:24:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=76e9cec633aff6b850c304b778e46d9683bc8e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:cf:e9:0b:5c:57:d4:0a:0d:03:e8:7e:1a:
                    46:f2:5a:0c:a6:dd:f0:0a:c8:08:68:36:e0:0b:7b:
                    11:61:86:4d:df:f6:03:a8:11:23:c9:2c:17:f1:79:
                    59:94:8d:58:55:90:62:d1:e5:32:a9:f3:5f:47:d3:
                    90:a1:09:ac:f8:78:29:b5:e9:40:d8:44:75:52:4d:
                    5f:d2:9f:34:32:ad:4b:96:13:4b:75:68:c8:4b:10:
                    06:07:9b:4f:85:dc:a8:ad:d3:6e:92:ae:52:64:21:
                    6a:f3:dd:82:0f:64:09:1b:df:b1:ef:35:1d:9f:9e:
                    cb:12:f8:44:af:01:31:d3:bf:f9:b3:52:bb:f1:b0:
                    ae:f5:22:e5:b0:30:af:cf:53:a5:e6:72:62:2f:c0:
                    00:a2:26:36:21:90:46:0d:ce:25:a2:0b:22:5f:e2:
                    8d:6d:78:5e:a2:13:18:d1:46:4b:1a:ab:83:36:c7:
                    c1:20:1c:3a:9c:a8:2c:90:65:fd:eb:d8:b4:62:3e:
                    84:13:a0:37:cb:f9:b7:d0:b1:65:08:d2:41:c9:1c:
                    17:5a:17:eb:33:bd:8c:22:38:4f:0f:5d:bb:05:91:
                    45:76:fc:70:7d:da:c9:09:16:10:c7:a2:db:d3:a0:
                    8a:a0:07:f0:05:0e:3f:7d:75:50:9c:f4:dd:2a:28:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E9:CE:C6:33:AF:F6:B8:50:C3:04:B7:78:E4:6D:96:83:BC:8E:6D
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/dunOxjOv9rhQwwS3eORtloO8jm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.160.0/20
                  92.53.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:b1:86:50:f5:ab:14:d7:b3:d8:bb:2d:9c:9e:db:2e:97:
         a0:af:bd:d1:5e:18:fe:ae:f7:77:31:d8:9c:6e:fd:6d:ca:ab:
         ca:9f:30:1e:13:8e:df:d9:59:67:67:00:39:f5:58:f4:ca:fd:
         b9:38:24:09:5b:e9:e8:9b:20:29:58:33:f0:62:ac:e5:51:60:
         21:8e:19:2d:7b:c4:ff:8d:ef:86:dc:b4:a9:71:8e:2d:30:de:
         1b:9a:55:ae:b5:02:5e:5a:13:94:54:9a:94:09:45:b3:18:fc:
         3a:85:bb:a5:a0:f9:92:2c:7c:8e:eb:ee:83:c0:f7:d3:53:d1:
         e5:f3:90:6f:53:a5:79:60:47:62:d6:49:7c:9b:90:78:04:c3:
         1f:e0:39:a5:34:68:19:48:ce:4c:9e:b0:bb:14:8e:1a:dd:5c:
         c5:e2:2a:23:31:05:21:35:51:2a:36:65:1e:bd:4e:a4:d6:d4:
         43:af:ff:c0:2e:7a:4c:2b:a0:62:01:19:3e:b8:54:01:6f:28:
         b5:9e:cb:80:97:96:89:2f:8c:3e:ff:1c:92:05:b5:06:1d:01:
         df:89:ea:ad:49:5c:2e:44:15:36:d1:8f:28:c6:66:36:8a:77:
         53:30:06:9a:7f:7d:1e:c0:51:1c:6e:34:3a:c6:d5:47:90:89:
         4f:6a:1a:48
-----BEGIN CERTIFICATE-----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Generated at Sat Jun 29 22:21:45 2024 by rpki-client on console-fra.rpki-client.org