Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7HRqOl5FrqR7agzC_ForwGcU5eQ.roa
File:                     7HRqOl5FrqR7agzC_ForwGcU5eQ.roa (raw, json)
Hash identifier:          X330hOIRqzmE7yXLsqk0VKHcuxQ4ZFhKOPbmMQhgwZ8=
Subject key identifier:   EC:74:6A:3A:5E:45:AE:A4:7B:6A:0C:C2:FC:5A:2B:C0:67:14:E5:E4
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018CC79525EF6B69D6159A770EEFEFF13C36
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7HRqOl5FrqR7agzC_ForwGcU5eQ.roa
Signing time:             Tue 02 Jan 2024 00:31:29 +0000
ROA not before:           Tue 02 Jan 2024 00:31:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60692
IP address blocks:        92.63.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 12:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:25:ef:6b:69:d6:15:9a:77:0e:ef:ef:f1:3c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 00:31:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec746a3a5e45aea47b6a0cc2fc5a2bc06714e5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:66:db:ad:6f:9d:7d:f3:18:9b:96:19:ea:
                    41:c8:31:08:38:58:3d:3c:7d:3c:8a:5a:70:86:41:
                    d5:9f:67:b5:77:4e:d4:6e:21:6d:4d:99:9f:c4:72:
                    c2:4c:69:e7:39:4a:6c:e1:48:23:c8:23:c6:28:be:
                    5d:4a:22:00:12:55:62:ac:be:0e:df:92:6c:ca:72:
                    c8:49:41:1a:4c:71:32:29:de:9f:08:25:dc:78:09:
                    85:24:58:27:44:c4:0c:57:50:35:99:55:27:d8:2a:
                    ae:f8:46:e7:a0:97:db:dc:c3:9c:42:62:dd:30:fb:
                    8b:64:55:18:b9:27:b9:53:8f:4d:61:e1:0d:2d:ae:
                    fa:ac:10:5b:fc:86:76:45:f6:68:c1:dc:8d:0a:e0:
                    5c:56:b8:52:7e:81:f4:b5:30:4d:a3:73:a4:7a:bf:
                    03:b8:f3:09:de:34:78:bf:82:4f:77:e4:11:78:e8:
                    ff:fd:10:dd:65:fb:c0:e8:8a:02:e8:51:73:86:f0:
                    ab:77:f6:b8:5d:89:e5:77:2c:80:e1:d2:c3:94:cb:
                    67:80:9a:0b:61:38:5a:25:39:f6:c5:bf:d1:31:32:
                    35:28:81:cf:05:ee:6d:ab:9c:05:ea:f0:de:20:48:
                    bb:78:e5:84:67:ba:be:9d:55:d9:14:5e:f0:b2:b3:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:74:6A:3A:5E:45:AE:A4:7B:6A:0C:C2:FC:5A:2B:C0:67:14:E5:E4
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7HRqOl5FrqR7agzC_ForwGcU5eQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a5:a3:ae:8f:34:d4:49:85:c5:53:bf:86:e9:56:28:f0:d4:
         52:57:46:54:6b:4e:7a:54:75:01:77:06:a7:4d:20:87:a2:74:
         d2:1e:f6:d0:51:48:cd:3d:90:aa:ed:9b:62:fe:e7:cc:2e:e5:
         87:df:08:f5:a3:01:a0:84:96:ea:88:78:3e:f8:2d:0e:dc:cb:
         43:70:43:d5:fc:58:6e:c8:76:88:d7:5a:c0:01:aa:66:0b:41:
         4b:e5:a3:d4:39:99:71:18:1b:61:10:63:a0:58:01:d7:b6:ff:
         22:87:45:29:28:c7:da:bd:9b:8e:01:50:e5:67:b2:20:38:c2:
         ab:f7:e6:c0:f3:bd:aa:33:bf:27:e5:5b:1c:0c:91:35:0f:8f:
         c6:e6:3f:84:fa:79:cc:9c:45:a5:2a:63:96:d6:9e:43:55:c6:
         cf:64:01:75:f6:c5:38:88:67:3c:95:2c:d2:f4:23:64:79:5f:
         93:ab:62:90:d2:19:b9:f4:94:6f:7f:0f:7e:93:94:19:5b:78:
         64:e2:33:76:bd:84:19:e5:25:36:3d:62:b2:ea:ee:e6:f3:08:
         45:ac:8c:3d:0a:cf:07:08:44:00:17:ba:2d:e6:9f:cc:76:2f:
         4e:3d:76:f4:b8:b9:26:a0:9a:0b:86:4c:f9:b5:1a:48:68:e0:
         54:eb:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 18:17:03 2024 by rpki-client on console-ams.rpki-client.org