Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vvpm3rdmp6Xuoi_VR4Hzmwurp14.roa
File:                     vvpm3rdmp6Xuoi_VR4Hzmwurp14.roa (raw, json)
Hash identifier:          IjexnYvYu3DsyNR2MMqaFdh0jDdn9PCkraxYfP+SdXM=
Subject key identifier:   BE:FA:66:DE:B7:66:A7:A5:EE:A2:2F:D5:47:81:F3:9B:0B:AB:A7:5E
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018CC3B6C3DB1B9FABFDCCC792C919FE0EF2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vvpm3rdmp6Xuoi_VR4Hzmwurp14.roa
Signing time:             Mon 01 Jan 2024 06:29:43 +0000
ROA not before:           Mon 01 Jan 2024 06:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216326
IP address blocks:        92.52.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 16:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:c3:db:1b:9f:ab:fd:cc:c7:92:c9:19:fe:0e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jan  1 06:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=befa66deb766a7a5eea22fd54781f39b0baba75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:b7:5e:e1:6e:fb:1d:32:3f:c0:c1:ea:f6:
                    f2:5b:40:ad:b8:ae:7a:b3:60:87:25:6e:ac:ce:8e:
                    2c:e1:18:be:1c:51:0e:9d:18:96:fb:d4:50:88:b8:
                    32:9c:21:af:96:a6:fc:f6:98:e4:ba:7e:7c:63:27:
                    9d:6f:8d:ff:8b:61:e4:3d:db:c0:bd:99:93:c8:8d:
                    0c:e6:5a:a1:18:1b:62:6b:f7:34:82:3e:7d:08:8b:
                    fa:6d:7c:09:6c:ae:eb:db:12:b9:6e:83:22:6b:3f:
                    3d:86:b8:ee:78:7a:c1:43:c4:3f:9b:ac:57:eb:4c:
                    b3:ea:e8:c1:55:0f:45:51:8d:2f:16:08:4f:7f:12:
                    98:ae:49:27:fe:f8:65:eb:47:be:eb:77:38:ba:78:
                    69:d5:23:ea:eb:7a:21:84:f4:05:1c:e7:51:72:36:
                    fb:b7:c6:eb:3b:52:9c:84:d2:41:e4:bc:ea:09:da:
                    03:64:3c:24:21:b9:d6:62:31:61:dc:28:81:8a:1b:
                    ca:d0:ba:8f:37:39:1b:a2:63:4a:e2:77:68:67:05:
                    79:88:6e:26:ae:38:df:b7:5f:03:0b:f6:e4:a9:77:
                    58:e1:94:69:0a:80:93:f9:a3:e7:1e:28:6a:7f:51:
                    71:8d:e9:b2:84:e6:b1:0f:b0:be:d7:86:77:02:92:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FA:66:DE:B7:66:A7:A5:EE:A2:2F:D5:47:81:F3:9B:0B:AB:A7:5E
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/vvpm3rdmp6Xuoi_VR4Hzmwurp14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:f9:ef:a2:b0:32:d8:70:fa:1f:d0:a4:2e:63:ed:14:39:
         4e:66:9f:3b:a8:b1:56:b9:66:35:4b:19:00:02:7a:21:55:f5:
         01:6b:91:11:e5:5f:e6:44:90:f0:b4:8f:ba:70:97:7a:4d:8f:
         71:af:ae:90:94:9e:3e:de:31:ac:2b:22:57:a5:b5:39:33:48:
         a2:02:12:76:5d:53:d0:e3:08:51:00:11:b3:e7:cf:6c:65:90:
         5f:f9:5f:07:60:dc:87:e3:6d:71:5b:e0:42:34:bb:f5:ca:d7:
         24:cb:3b:d4:6b:1a:1c:47:d5:bb:df:66:52:dc:ae:90:1e:b4:
         43:8a:d6:0e:03:69:a4:e6:24:bc:d5:24:9d:58:51:bf:0a:48:
         0b:09:b9:39:31:da:b1:71:8f:f7:8a:34:c8:56:2f:ee:df:12:
         5e:28:bd:d4:af:0b:b5:d1:56:15:6c:5a:ec:18:ab:60:b7:0f:
         2c:2f:8f:e1:af:f8:7d:79:a2:44:ee:be:b3:42:41:92:15:8f:
         62:f0:5c:a5:c3:fe:de:cf:ff:36:bb:14:b0:4d:b7:0d:a2:a0:
         de:1e:d4:9d:2d:1c:28:35:51:c4:6c:77:bd:d0:4f:14:9a:a6:
         1e:26:c7:48:41:0b:0b:45:6b:4c:d0:8f:69:e5:d0:f6:c1:19:
         19:14:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:57 2024 by rpki-client on console-ams.rpki-client.org