Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tv_gGUrhk65I7AuuaVbGcVhC52k.roa
File:                     tv_gGUrhk65I7AuuaVbGcVhC52k.roa (raw, json)
Hash identifier:          1sfn2q2Q+IbAafIMagbk6LJplvMpPU1LxavKoqR8aSU=
Subject key identifier:   B6:FF:E0:19:4A:E1:93:AE:48:EC:0B:AE:69:56:C6:71:58:42:E7:69
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018D226B447C19D5F8CC13CCC164E4890EF7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tv_gGUrhk65I7AuuaVbGcVhC52k.roa
Signing time:             Fri 19 Jan 2024 15:51:11 +0000
ROA not before:           Fri 19 Jan 2024 15:51:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216326
IP address blocks:        92.52.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 28 Feb 2024 13:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:22:6b:44:7c:19:d5:f8:cc:13:cc:c1:64:e4:89:0e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jan 19 15:51:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b6ffe0194ae193ae48ec0bae6956c6715842e769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:e9:3a:26:78:62:c3:e3:81:0d:a5:d6:a3:
                    08:68:6d:3f:b4:73:79:e9:02:eb:51:08:dc:89:46:
                    ce:14:cc:72:52:44:ac:cb:a8:5c:40:4c:87:86:bb:
                    2d:24:29:3d:03:be:76:68:ce:c8:35:e3:13:63:6a:
                    eb:0f:65:14:11:27:c8:8d:38:7b:d4:1c:d1:8b:f4:
                    d9:30:10:fd:c5:38:09:12:24:b0:7a:b4:2e:60:d6:
                    c2:4e:e7:d1:72:2e:d1:0b:06:c5:d5:b0:31:c6:c5:
                    35:b8:5e:37:a1:bf:9f:8a:cf:1d:cc:c4:4b:c6:75:
                    88:59:8d:57:d9:db:ce:ce:35:59:84:72:a1:03:af:
                    19:87:d6:b8:3e:58:8b:58:ca:55:49:ed:04:09:90:
                    de:5e:dc:08:de:49:53:06:d9:d9:b0:10:5c:12:51:
                    a6:e9:1e:b1:d8:8a:cb:2c:6b:a5:17:98:0f:73:5d:
                    09:bc:2e:28:1f:88:34:82:2f:5f:d2:95:82:33:5d:
                    f3:66:1b:1a:2e:2f:46:ac:82:89:c8:72:91:52:bd:
                    9a:c1:94:4b:7d:76:03:44:0d:0a:7b:da:c4:11:88:
                    23:67:39:4c:2a:4c:ec:55:ed:1e:2e:d3:71:34:44:
                    c2:ad:e7:3e:62:a8:06:f0:28:8a:ff:1c:6b:76:1f:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:E0:19:4A:E1:93:AE:48:EC:0B:AE:69:56:C6:71:58:42:E7:69
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/tv_gGUrhk65I7AuuaVbGcVhC52k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:e9:d4:e6:c3:18:b5:bb:cb:c6:70:aa:88:aa:96:55:ea:
         c5:cd:12:f8:39:c9:ff:ef:b9:84:6e:5a:df:6b:b1:6f:11:6a:
         34:89:51:80:1b:00:7d:7d:71:40:6e:52:48:b0:29:01:aa:27:
         da:b3:5f:62:41:73:35:a8:12:eb:d2:0f:00:78:22:ea:ff:93:
         46:31:2d:4b:74:7a:67:8d:d8:bb:a6:2f:97:ac:82:d1:32:c7:
         27:b3:19:a8:8c:0c:a8:93:73:e6:2a:1c:45:ee:77:48:d7:07:
         a8:2d:77:1f:ee:f7:5d:a1:12:51:dc:98:65:94:e6:b4:57:b1:
         0d:b5:a6:da:cf:5e:65:dc:db:59:f2:cf:73:bd:3b:62:9d:9a:
         19:83:b7:62:da:14:67:45:c2:cf:65:69:66:1f:cf:ef:08:e2:
         f6:54:f0:05:b2:29:f5:84:ed:5d:9d:87:50:65:9e:81:f3:90:
         f2:59:9e:36:f5:c7:00:38:45:43:07:0b:0e:64:5c:5c:a6:88:
         65:05:b8:96:6d:33:9a:a2:3c:7e:e6:e9:82:d6:88:a8:70:56:
         b1:b8:ad:7d:67:ea:4d:52:76:14:72:42:dd:61:43:80:88:ec:
         81:0b:19:5d:e8:cb:aa:b5:b0:d6:e3:22:10:6c:55:15:5a:a2:
         1d:40:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 17:20:17 2024 by rpki-client on console-ams.rpki-client.org