Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/NV8V6e2x6Jg3NUvK_sVdMPMywFY.roa
File:                     NV8V6e2x6Jg3NUvK_sVdMPMywFY.roa (raw, json)
Hash identifier:          MU3EpETNFuekGTvinSgMonDp54HHr2yR4NX5QdnC1E4=
Subject key identifier:   35:5F:15:E9:ED:B1:E8:98:37:35:4B:CA:FE:C5:5D:30:F3:32:C0:56
Certificate issuer:       /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial:       01856F022310096A7D76F54D3DAEB3CD54CD
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/NV8V6e2x6Jg3NUvK_sVdMPMywFY.roa
Signing time:             Sun 01 Jan 2023 20:24:48 +0000
ROA not before:           Sun 01 Jan 2023 20:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        92.119.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 May 2023 14:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:23:10:09:6a:7d:76:f5:4d:3d:ae:b3:cd:54:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
        Validity
            Not Before: Jan  1 20:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=355f15e9edb1e89837354bcafec55d30f332c056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:ae:e0:41:d5:f8:eb:3e:90:64:34:fe:c3:
                    46:99:92:c5:2c:76:91:17:87:71:88:3e:f7:a5:c2:
                    2b:c6:01:a5:e7:92:f6:ad:27:46:9e:86:f5:23:3e:
                    81:26:81:cc:b2:8b:35:a2:af:ae:f1:2b:67:fa:a3:
                    60:43:19:67:2a:e2:35:b3:c7:e8:24:5d:9e:a3:ae:
                    c9:7e:60:61:31:85:72:b7:25:c6:9b:b9:22:df:25:
                    1f:1a:ab:15:bb:3b:0f:80:49:b5:d3:0b:d3:51:68:
                    e4:d0:83:90:d4:6a:31:64:6f:55:38:05:73:27:8a:
                    92:85:e6:ad:50:c5:dc:ff:e3:19:40:c6:4b:e4:36:
                    56:12:8d:36:66:d9:cc:86:0a:1a:9b:d5:38:0e:d3:
                    2f:e2:28:17:c4:47:94:92:a8:71:ad:29:f8:82:e8:
                    75:73:0c:ce:29:3e:71:be:65:1c:49:cc:63:c4:41:
                    60:b3:56:88:97:70:44:eb:c7:ad:01:b8:2f:29:ec:
                    72:7f:62:b4:87:29:ef:12:22:fe:a9:3f:90:e4:a4:
                    6a:3c:2f:a5:90:50:5c:e7:e4:c9:86:97:df:f9:10:
                    7a:a0:11:cf:f4:69:e7:41:b9:c6:48:1e:88:49:9f:
                    b7:04:42:39:1d:b8:db:9f:39:3d:f5:93:4c:e3:f9:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5F:15:E9:ED:B1:E8:98:37:35:4B:CA:FE:C5:5D:30:F3:32:C0:56
            X509v3 Authority Key Identifier:
                keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/NV8V6e2x6Jg3NUvK_sVdMPMywFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:b3:ca:a8:8c:a0:44:db:53:3e:e1:05:e3:63:5a:44:cb:
         f8:11:c4:4a:3c:f5:6a:18:24:fd:a8:c3:ee:10:cd:cd:79:e9:
         f2:73:b9:1a:62:de:4b:f6:80:76:ac:c5:92:73:2c:5a:2e:1d:
         65:34:a0:45:d0:2e:5e:bd:ad:08:2e:b3:da:a8:3b:a3:53:c0:
         98:cc:c2:62:85:4c:ae:46:ff:01:d1:45:48:b7:ac:f3:85:f2:
         da:03:49:76:e2:2a:d6:7c:c4:43:8a:df:6f:4b:f9:21:b5:de:
         70:0b:f7:4e:8d:56:51:6a:47:25:79:98:55:b8:f1:03:2b:d0:
         b8:fe:9c:92:26:f7:86:5b:62:7d:3c:2d:84:d1:23:0c:6b:6c:
         0f:ed:4b:78:c9:81:9c:71:72:e0:98:bc:84:cd:1d:ff:a3:5f:
         b7:a7:25:9b:5a:c8:a6:d2:6b:95:3e:42:50:36:b0:97:d3:0f:
         5c:14:c3:f2:c2:df:5e:6b:2f:c7:44:0e:be:37:ef:b0:e3:0d:
         04:52:e7:6f:f1:0e:0b:b8:97:7a:19:fc:d2:70:f7:e8:06:2c:
         fa:17:9f:ac:c5:3a:e9:8b:92:01:d2:7f:a5:8a:5c:ea:77:2c:
         90:14:0d:7b:1e:d1:af:11:5d:43:1a:ca:3e:75:0f:84:da:45:
         e9:4f:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:04 2024 by rpki-client on console-fra.rpki-client.org