Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7QUB1MfyPPEOATSMunjhF76BDzg.roa
File:                     7QUB1MfyPPEOATSMunjhF76BDzg.roa (raw, json)
Hash identifier:          3FkkrZImn05cqf9ttLNbbct/JmbdX1iB5OHXO4IQb94=
Subject key identifier:   ED:05:01:D4:C7:F2:3C:F1:0E:01:34:8C:BA:78:E1:17:BE:81:0F:38
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       01856ED4EBD16722D485FF4EF34916A80B2F
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7QUB1MfyPPEOATSMunjhF76BDzg.roa
Signing time:             Sun 01 Jan 2023 19:35:25 +0000
ROA not before:           Sun 01 Jan 2023 19:35:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44915
IP address blocks:        188.164.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:eb:d1:67:22:d4:85:ff:4e:f3:49:16:a8:0b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 19:35:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed0501d4c7f23cf10e01348cba78e117be810f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:98:6a:f1:9c:37:e0:5a:1e:90:6e:d2:3c:
                    3b:f3:26:7b:e9:eb:e6:14:c4:d5:a7:50:b2:2c:fa:
                    bf:21:57:64:49:02:16:87:6d:f0:9c:d2:ae:9a:12:
                    b4:ce:e0:24:bf:53:07:0d:42:af:68:bf:c9:f4:1f:
                    4f:09:01:1c:95:d8:43:ab:a8:1e:63:33:c3:0a:f2:
                    15:5c:49:49:fc:71:dd:19:d2:2e:d2:d1:c4:74:6c:
                    29:d1:64:03:fe:4c:a0:f3:af:9b:3c:8e:71:c1:3a:
                    e7:e9:4b:7f:f2:58:21:58:0e:4a:ee:89:59:07:cb:
                    40:07:15:e8:d8:15:9e:c0:87:bf:ca:78:1e:ca:4e:
                    0b:0a:a7:cb:a4:e8:a6:71:bf:78:d3:cb:ef:fd:ad:
                    05:11:13:73:6f:98:69:0f:aa:62:c0:41:8c:25:f4:
                    5a:5c:57:a8:6a:d4:c2:0c:36:ac:f4:9b:a9:37:86:
                    ca:83:be:f1:44:0d:a7:d9:c9:0f:e3:c5:f3:1a:5d:
                    ad:f0:b3:fb:c8:2e:17:bf:2c:91:1e:ec:50:8a:b7:
                    3a:1b:62:a1:cc:31:bb:22:d8:be:ca:16:11:3c:5b:
                    cb:e7:a9:fb:a7:96:30:15:fe:73:f8:8f:93:9e:5f:
                    f5:01:64:5d:bb:05:8c:7d:c2:b7:4d:44:dd:51:23:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:05:01:D4:C7:F2:3C:F1:0E:01:34:8C:BA:78:E1:17:BE:81:0F:38
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7QUB1MfyPPEOATSMunjhF76BDzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.164.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:d7:a1:43:12:1e:c0:92:dd:f7:51:9a:66:fc:4e:bb:8b:
         07:69:24:f8:83:00:68:67:be:22:a7:b6:8d:0f:ef:01:6c:74:
         5f:eb:21:34:84:ee:4a:24:a9:6d:01:83:ef:13:5d:89:5b:0d:
         1c:b9:05:29:c3:1f:cf:98:7c:b7:15:c7:24:30:7e:da:03:dd:
         c6:20:c6:b9:70:36:fa:14:24:d3:f3:02:21:14:4d:02:3b:f7:
         e9:4d:9d:a3:62:a7:0c:9c:68:d3:16:66:f4:ed:75:80:4b:18:
         37:97:90:b8:25:80:32:cf:fc:f3:7d:c7:21:89:fb:73:d4:10:
         e0:b8:45:80:fe:57:06:6f:eb:c9:45:5a:ac:dc:86:a7:c1:f4:
         e0:85:9f:f6:a5:9a:e3:71:1e:c2:67:df:1d:28:e6:11:09:60:
         da:58:29:06:e2:fe:7d:88:4c:9e:1d:f3:b2:d1:2a:01:7c:24:
         36:af:ab:bb:c9:a2:14:81:0b:4a:b4:45:cc:c2:bd:27:c6:8d:
         da:01:df:5b:b6:4e:de:0c:8e:5f:64:b6:76:07:3e:8e:d4:d0:
         e2:db:1f:bc:77:40:df:9f:40:f1:45:ef:9c:08:22:42:f4:23:
         a6:d4:af:a2:11:91:51:ba:6e:23:f4:18:fe:75:95:8a:7c:a5:
         de:be:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org