Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/h1GOD3Gw9tGgkHU-1AuyUkSNs4k.roa
File:                     h1GOD3Gw9tGgkHU-1AuyUkSNs4k.roa (raw, json)
Hash identifier:          PL0I9y/NoEXT4MsMXeMkz5s5HAz0HCVyw+3S/ttrLpQ=
Subject key identifier:   87:51:8E:0F:71:B0:F6:D1:A0:90:75:3E:D4:0B:B2:52:44:8D:B3:89
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       018631222C48BE8E320C1244199B2FD3A667
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/h1GOD3Gw9tGgkHU-1AuyUkSNs4k.roa
Signing time:             Wed 08 Feb 2023 13:06:08 +0000
ROA not before:           Wed 08 Feb 2023 13:06:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400536
IP address blocks:        92.53.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 22 Aug 2023 09:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:31:22:2c:48:be:8e:32:0c:12:44:19:9b:2f:d3:a6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Feb  8 13:06:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87518e0f71b0f6d1a090753ed40bb252448db389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:b5:00:90:41:21:32:31:49:a6:a6:f1:bf:
                    35:ee:ae:32:28:0f:d0:51:60:98:da:6b:83:c1:b0:
                    00:33:e4:59:58:ac:3e:81:f6:72:e2:6c:9b:3d:1f:
                    a8:38:46:0d:17:c0:37:0a:7c:ae:bb:63:f0:74:77:
                    1a:66:c1:89:04:66:21:a1:e3:4e:2d:7b:b7:29:c2:
                    04:1a:3a:8b:3a:38:33:5d:69:57:d5:b2:7f:ec:bb:
                    53:92:75:67:e8:08:7d:b5:5c:ee:fd:33:a9:20:71:
                    07:86:d1:5c:4f:b0:32:83:ab:65:af:7a:03:55:fb:
                    b5:04:9d:1e:4a:0a:6e:15:ea:3d:9d:74:2d:e5:99:
                    9d:98:ef:8b:c6:14:4d:25:b7:fb:79:f1:bd:0b:12:
                    3f:ef:91:b4:82:0c:34:7d:a0:b8:d0:79:a3:34:64:
                    ce:d3:58:df:4e:46:48:2f:b1:1d:d4:13:6e:0e:19:
                    f1:f8:13:dc:9b:75:1f:7f:35:8e:58:a2:75:f7:a2:
                    4c:9f:9a:4d:94:8f:8b:8d:6d:7a:59:7e:95:ce:b2:
                    ac:1d:b9:12:66:9e:5b:19:08:0e:70:d1:13:f0:78:
                    fb:a8:6d:08:ba:14:a1:16:a8:1e:48:9f:89:e0:4b:
                    2c:c6:f2:2e:68:82:4e:f5:a0:6a:bc:02:c2:74:15:
                    36:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:51:8E:0F:71:B0:F6:D1:A0:90:75:3E:D4:0B:B2:52:44:8D:B3:89
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/h1GOD3Gw9tGgkHU-1AuyUkSNs4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a8:38:99:9b:4f:1d:4b:7f:7f:42:ad:63:95:4a:d9:95:a6:
         06:e3:79:cf:23:98:fe:99:e9:33:b6:97:a5:da:8c:08:a1:dd:
         2f:ac:1f:78:61:7c:b4:08:96:df:29:c4:d4:e0:c1:c2:7f:93:
         6a:06:dc:c8:8e:8a:19:f4:68:f6:46:87:22:f0:57:d7:3a:61:
         0b:03:f9:1d:57:9f:3a:b1:d9:12:4f:17:54:03:4f:fc:1c:97:
         41:8d:37:c2:5f:61:07:00:16:76:19:e6:36:5b:4c:b8:b7:6b:
         f2:5b:1b:b7:a2:4f:8d:21:ce:8a:35:cf:98:58:44:2e:63:47:
         03:2e:39:81:11:5f:ca:16:c7:59:10:4f:c9:d2:c2:15:0d:01:
         6d:f2:b5:cb:b8:b2:d8:09:4c:ab:08:d5:10:bf:32:fd:e6:8e:
         03:4c:0b:e5:c0:9e:bb:f0:ef:73:cf:53:a1:b0:d8:84:7d:4e:
         85:7d:7c:7c:75:10:ab:1f:43:38:f0:99:83:d9:01:cf:1f:fc:
         ff:b5:2d:12:58:6c:bd:54:8c:2f:5c:57:9e:7a:3b:83:9e:60:
         a5:30:38:a6:0e:64:1c:37:7f:18:5e:43:11:28:31:fc:64:76:
         fb:10:44:e4:d6:9a:ab:ef:46:10:ff:43:74:20:49:61:3c:4a:
         5e:41:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:13 2024 by rpki-client on console-fra.rpki-client.org