Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa
File:                     RQXLvNMgPAVEIPA_ejxjW39lEXw.roa (raw, json)
Hash identifier:          YhW18FTdcwZd8wfukEETdfK9mJ/smruw9ImSJxZRj3o=
Subject key identifier:   45:05:CB:BC:D3:20:3C:05:44:20:F0:3F:7A:3C:63:5B:7F:65:11:7C
Certificate issuer:       /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
Certificate serial:       01856C1C94BBC79BAF50BE2AF877685385D3
Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa
Signing time:             Sun 01 Jan 2023 06:54:50 +0000
ROA not before:           Sun 01 Jan 2023 06:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49808
IP address blocks:        92.119.92.0/22 maxlen: 24
                          185.11.84.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 Nov 2023 08:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:1c:94:bb:c7:9b:af:50:be:2a:f8:77:68:53:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f
        Validity
            Not Before: Jan  1 06:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4505cbbcd3203c054420f03f7a3c635b7f65117c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:6e:be:0f:05:46:0c:dc:fd:26:75:14:e1:
                    4a:25:06:8f:6a:a6:38:90:45:dc:13:86:60:5a:bd:
                    12:9c:3a:f4:47:a7:05:f3:a0:09:52:6b:77:c1:27:
                    17:c4:db:8e:8b:1b:fb:75:13:b5:53:bf:bd:00:81:
                    e7:5f:c2:cc:cd:34:52:bf:8c:c3:53:86:dc:cb:4d:
                    e4:ca:c7:9b:04:17:05:64:e1:a4:fc:c0:67:74:e7:
                    0e:f4:d4:fa:de:7f:2f:95:67:7a:b9:e4:e0:f3:be:
                    5c:19:05:67:81:1e:6f:46:36:4a:07:fc:dc:ba:9f:
                    18:65:d8:10:7c:22:20:e4:f6:bd:a5:fc:46:1b:70:
                    cf:c3:d1:63:d9:ee:3c:1e:95:c8:83:98:a4:63:b0:
                    f2:00:ee:25:a8:14:03:e0:4b:fc:ec:89:14:fc:95:
                    04:24:e4:23:38:8e:e6:e7:b4:e1:db:2b:39:5b:91:
                    1f:26:87:98:77:42:b4:f2:63:d0:31:2a:d3:75:b4:
                    09:ae:4c:17:67:dd:01:75:fa:e6:3e:2e:6a:cf:ab:
                    9a:a9:55:c9:74:11:92:06:83:98:c8:60:82:67:0a:
                    5f:26:31:b9:63:88:e4:00:28:ed:c0:b4:d7:f3:9a:
                    99:c1:3c:ba:0e:75:67:bf:5f:9f:31:2c:38:91:b8:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:05:CB:BC:D3:20:3C:05:44:20:F0:3F:7A:3C:63:5B:7F:65:11:7C
            X509v3 Authority Key Identifier:
                keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/RQXLvNMgPAVEIPA_ejxjW39lEXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.92.0/22
                  185.11.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:de:41:74:b3:1a:4d:de:25:ca:78:32:3e:a4:4a:62:1e:
         c3:98:91:0a:e6:51:33:c4:9b:52:67:49:b5:07:66:52:51:0c:
         21:bb:52:c2:83:3a:bb:db:b4:39:28:72:27:02:17:4e:bd:93:
         43:ec:ca:4f:47:9e:3f:6e:45:a3:59:22:39:44:79:f3:9d:9e:
         f4:b7:02:6d:7d:ce:0c:ec:51:36:6c:c6:51:65:e0:00:e5:8e:
         74:4f:dd:e6:9a:e3:61:0f:de:e6:20:09:94:9b:bf:bb:3d:a3:
         d8:0f:d5:7b:c0:65:b3:2f:f7:83:2a:45:45:ba:b6:2f:f9:34:
         a5:17:cf:ff:47:88:61:bd:93:b9:a3:58:87:94:77:07:09:ae:
         7b:1e:e3:af:5d:a5:15:64:8f:2d:a7:c5:2b:2e:44:83:b0:4c:
         78:d4:84:52:4c:32:45:0f:4d:74:98:16:48:0b:75:f3:a6:15:
         70:e2:3b:63:7e:1e:3e:6d:b9:cc:01:4e:54:83:d7:a5:ee:c2:
         69:57:7b:93:49:aa:5c:e0:4f:ba:f8:7c:c1:08:8d:48:06:d6:
         eb:b8:68:c9:74:8a:bb:1a:8e:df:a1:ea:46:99:5d:22:a5:e2:
         7f:c8:8a:6d:b6:de:2b:e8:30:86:4c:44:7a:87:46:bf:1a:90:
         59:a6:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:52 2024 by rpki-client on console-ams.rpki-client.org