Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YCLzOde7oMKGaL-dIhdAfEDKia8.roa
File:                     YCLzOde7oMKGaL-dIhdAfEDKia8.roa (raw, json)
Hash identifier:          wd1WKfNHUge4uYWXkYSZpbMevwI+vwCpZxoF2uMggX8=
Subject key identifier:   60:22:F3:39:D7:BB:A0:C2:86:68:BF:9D:22:17:40:7C:40:CA:89:AF
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0185710C19B86359C5678562A2470B32C87F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YCLzOde7oMKGaL-dIhdAfEDKia8.roa
Signing time:             Mon 02 Jan 2023 05:54:56 +0000
ROA not before:           Mon 02 Jan 2023 05:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24875
IP address blocks:        185.106.92.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:19:b8:63:59:c5:67:85:62:a2:47:0b:32:c8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  2 05:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6022f339d7bba0c28668bf9d2217407c40ca89af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:f5:4e:5c:b4:b4:30:9e:1d:ea:50:28:41:
                    e8:71:44:cf:e3:1a:9a:33:48:e5:04:14:b5:e2:08:
                    06:ca:88:99:45:0c:85:52:15:d9:5f:32:b8:d7:17:
                    e2:87:49:50:8f:ea:53:74:d5:1c:1a:14:ec:69:ab:
                    81:05:af:88:d4:20:15:ee:30:cb:b9:dc:24:9d:8d:
                    f8:7b:81:84:c0:c9:8b:7f:fe:84:14:28:75:71:51:
                    3b:85:70:cd:bf:b7:7b:18:59:1f:ce:5a:d8:e1:ea:
                    aa:fe:a6:86:37:1b:f7:ac:fb:22:5b:2e:8b:2f:ad:
                    f3:9c:2e:60:9b:a4:c7:24:8e:cb:a8:50:cc:f9:e9:
                    8b:43:91:61:06:4d:5c:f3:26:a6:be:cf:1c:5e:9b:
                    e0:4f:30:a9:63:17:60:ea:62:25:27:1f:40:46:41:
                    78:82:f8:1d:6e:75:41:cf:80:73:a6:3d:af:73:45:
                    7c:1f:9e:6d:80:0e:71:5b:0b:bb:9e:c4:8f:1d:a8:
                    cf:73:f2:0f:21:9f:00:83:0f:87:c7:3d:88:cc:4d:
                    bd:09:79:84:a9:d9:a9:e6:9f:16:bc:96:88:d8:68:
                    42:e1:f8:97:36:07:62:33:6f:07:0e:9b:7e:d4:a8:
                    cd:70:e3:e7:cd:97:fa:9b:6e:df:57:bc:14:31:6a:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:F3:39:D7:BB:A0:C2:86:68:BF:9D:22:17:40:7C:40:CA:89:AF
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YCLzOde7oMKGaL-dIhdAfEDKia8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:2e:a3:4e:44:b7:c4:af:bd:74:2f:8c:59:05:ef:e5:2e:
         f3:f8:53:9d:4e:cb:85:8b:cd:d6:27:db:ab:9d:40:06:dd:c0:
         e5:86:5f:33:74:f8:56:b2:71:ae:21:f1:97:5f:f1:26:28:cf:
         f1:90:0f:85:9d:d9:d8:3f:66:41:07:ea:c1:eb:9d:ba:20:6f:
         a8:87:e0:21:86:0d:9d:c5:bc:c6:6b:7a:cf:0f:f0:02:db:32:
         c6:e4:e2:4a:01:2a:8a:d0:e8:b1:7b:d7:73:b3:11:d7:d7:9e:
         38:b1:34:2a:2c:3e:eb:49:73:ac:33:51:38:cb:6a:09:50:5c:
         de:5d:16:f3:8a:ac:47:6d:fe:36:ae:99:d1:60:fc:59:63:64:
         92:7e:c5:ed:a4:44:8d:d5:99:13:ff:56:4e:1e:cc:2a:54:1d:
         6a:52:cb:20:96:92:d6:39:3d:31:1e:8b:8a:2c:52:c9:b9:23:
         51:df:58:d8:dd:c1:b4:06:f5:a7:81:f1:1a:ce:80:66:b0:cc:
         aa:44:39:4d:e0:54:2e:c2:93:ec:de:67:7c:ed:ec:f9:48:eb:
         23:13:7f:42:58:01:59:df:26:f0:a7:a0:87:5e:8f:cd:25:30:
         3d:f6:e9:d5:59:4e:66:d8:6e:16:42:c6:fc:4b:fc:67:9a:c9:
         40:71:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org