Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vazn_WO2wrUv5teL6hoPv1SnKvc.roa
File:                     vazn_WO2wrUv5teL6hoPv1SnKvc.roa (raw, json)
Hash identifier:          ElGGyGQUVwOJDBHtZ0k6oVOom413S9yK10wtz/Xjiy4=
Subject key identifier:   BD:AC:E7:FD:63:B6:C2:B5:2F:E6:D7:8B:EA:1A:0F:BF:54:A7:2A:F7
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       018595EA10DB4F00DA667FF6ACE4744FF347
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vazn_WO2wrUv5teL6hoPv1SnKvc.roa
Signing time:             Mon 09 Jan 2023 09:43:42 +0000
ROA not before:           Mon 09 Jan 2023 09:43:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        92.53.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 May 2023 14:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:95:ea:10:db:4f:00:da:66:7f:f6:ac:e4:74:4f:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan  9 09:43:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdace7fd63b6c2b52fe6d78bea1a0fbf54a72af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:26:50:fa:6f:2d:cb:61:20:36:41:af:6b:
                    4c:5f:23:1b:61:11:15:a6:8c:a7:4b:80:2d:c6:fa:
                    23:02:2d:4a:31:52:01:0c:f5:00:6a:b9:d1:be:24:
                    ba:ce:ef:46:34:e7:af:1e:97:30:18:a4:17:25:b6:
                    3c:2a:86:12:15:16:d7:c7:60:db:78:b9:09:b6:fd:
                    1f:79:fb:f0:93:14:3a:ad:80:ac:82:24:c1:08:b0:
                    b6:23:c0:3b:fb:f8:b5:88:59:b9:46:cd:9c:28:fd:
                    cd:be:bf:75:3f:a4:7d:23:bb:e2:66:80:b2:be:a3:
                    93:cc:85:81:25:8c:e3:ac:e7:f2:2c:f8:6e:e9:7d:
                    ac:04:df:2f:ce:3e:48:13:98:92:30:59:fb:1f:3f:
                    ce:01:92:d8:43:31:af:88:c0:ee:4d:61:31:b4:5b:
                    45:98:0f:e7:f3:14:9a:b3:92:fb:9c:99:c1:eb:f9:
                    47:4c:c8:96:db:cc:9c:c4:48:1e:72:e4:8a:30:4e:
                    b5:8a:6b:9e:28:12:cb:2e:57:68:f0:07:f7:5a:c9:
                    94:d9:b8:f3:42:67:06:1d:ca:fb:58:0c:52:97:ab:
                    de:3e:87:5e:8c:54:b6:f2:62:73:49:f6:35:13:48:
                    94:9a:71:95:5c:0e:0d:d3:ab:e9:f7:07:48:c7:7b:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:E7:FD:63:B6:C2:B5:2F:E6:D7:8B:EA:1A:0F:BF:54:A7:2A:F7
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/vazn_WO2wrUv5teL6hoPv1SnKvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:41:c7:1f:b5:a0:a6:a6:5f:c6:be:48:e0:eb:15:58:80:ee:
         2a:29:69:cf:c6:da:83:1b:91:a6:09:ab:ee:e1:e7:b2:41:f7:
         6b:98:06:fb:59:d9:8b:d9:db:10:0a:0e:e5:49:48:9d:97:13:
         a9:e6:c9:6f:1d:98:a3:c6:31:8a:cf:0e:dc:64:3a:e3:1c:02:
         60:7d:2f:7b:93:35:b4:1e:70:39:4d:59:30:8f:35:5d:84:97:
         70:5e:3e:8c:14:b4:57:98:1f:6c:23:f2:64:bf:1f:8d:21:cc:
         ed:51:8e:4f:8b:86:33:1d:2c:cc:c6:a1:ff:17:db:b0:72:f8:
         99:88:02:c2:ed:47:96:56:23:09:cb:26:6c:d1:b5:fe:05:e8:
         f0:69:aa:4f:fc:9e:08:47:78:e3:a4:4d:67:11:22:eb:82:3e:
         fd:c1:9b:05:02:f8:65:2e:b1:7a:31:d8:2b:dc:26:2c:80:1c:
         d1:9d:c8:db:fa:26:68:89:76:d1:0d:94:c7:46:ce:4a:27:ac:
         47:77:42:c4:43:d6:54:70:3c:ba:56:5c:73:dd:8a:d5:3b:14:
         4e:63:74:9d:35:15:da:a2:2e:c2:b1:4b:a7:35:a3:15:28:eb:
         42:6c:c3:fe:45:7c:e8:6f:8e:e9:b7:42:a7:25:22:55:62:28:
         d0:b6:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:05 2024 by rpki-client on console-ams.rpki-client.org