Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8MhllaFTNn_OX_HVDxIKLveBIkA.roa
File:                     8MhllaFTNn_OX_HVDxIKLveBIkA.roa (raw, json)
Hash identifier:          LU8cAMOnUIRP+MvWboVEAn5byXGEXfc16+DdEIo2PT8=
Subject key identifier:   F0:C8:65:95:A1:53:36:7F:CE:5F:F1:D5:0F:12:0A:2E:F7:81:22:40
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018891F1079B24C367B3FB27AF2821B0D24E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8MhllaFTNn_OX_HVDxIKLveBIkA.roa
Signing time:             Tue 06 Jun 2023 18:21:12 +0000
ROA not before:           Tue 06 Jun 2023 18:21:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58955
IP address blocks:        92.63.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:f1:07:9b:24:c3:67:b3:fb:27:af:28:21:b0:d2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun  6 18:21:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f0c86595a153367fce5ff1d50f120a2ef7812240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:e5:95:7b:41:2c:f7:1f:e0:58:9d:6d:0d:
                    c9:e2:8a:4d:f7:f3:a8:20:d6:1d:8a:c9:b7:6f:f9:
                    c0:8c:c4:f6:09:de:c1:1f:41:c8:d5:98:6e:a8:8a:
                    d6:f1:32:b3:b8:b8:22:02:94:51:cf:08:01:77:0a:
                    23:d3:b9:82:e8:6e:f4:60:11:d7:a6:6c:43:8f:d1:
                    32:a1:f3:03:74:22:07:15:66:55:33:b4:9d:de:2a:
                    7c:02:25:39:b5:f9:79:f9:50:90:98:26:14:37:c9:
                    14:d4:71:85:30:ff:a2:47:b1:08:5d:01:ed:ed:b6:
                    20:25:aa:f3:6b:ec:cd:20:f9:d9:a6:e5:50:16:67:
                    31:b8:15:e0:1d:95:a4:f3:ce:0a:82:cd:92:9d:fe:
                    ec:62:86:53:89:00:88:bb:75:18:b7:ad:fc:e6:39:
                    38:fa:4c:d2:f2:bd:bb:8d:19:2e:fa:0e:38:0a:5a:
                    c5:c6:a4:4c:f3:22:da:67:6c:3c:32:3e:ac:41:79:
                    29:c2:5b:23:9d:ae:75:11:b1:81:0b:35:52:77:02:
                    8b:e9:bb:70:04:84:a4:f9:f2:5a:1d:72:c7:60:1b:
                    98:11:41:80:ae:c7:20:f3:7e:24:36:44:d8:e7:a6:
                    4f:11:f4:22:71:89:06:e6:e2:87:43:57:77:fb:8d:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C8:65:95:A1:53:36:7F:CE:5F:F1:D5:0F:12:0A:2E:F7:81:22:40
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8MhllaFTNn_OX_HVDxIKLveBIkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:5c:7e:82:82:f0:5d:07:cc:1b:eb:0e:f0:e8:c9:0e:57:
         38:5c:24:da:e2:4e:90:fd:cb:ca:ac:e9:69:fa:8d:3c:46:3b:
         36:71:2d:51:78:fd:99:3e:fc:92:cc:54:b1:af:f5:8d:08:d4:
         f8:83:93:4a:32:59:1f:38:35:84:91:08:b8:9e:82:1f:22:dc:
         51:11:e0:ba:e4:e5:da:71:b2:0b:10:c0:cf:68:20:23:db:df:
         fd:9b:25:e3:dd:35:20:46:53:09:05:bd:d8:c4:31:b3:de:77:
         69:63:a8:ba:a6:21:86:79:fb:8a:e3:ac:22:a4:d4:15:8b:db:
         87:5e:ab:51:c8:74:68:48:ea:38:ec:fe:6a:62:64:84:84:73:
         ea:d8:48:f6:78:2d:7a:a4:f5:c9:ff:33:97:8a:5d:42:c5:52:
         08:13:d1:33:3c:b3:c3:39:0f:bf:2c:29:76:a2:5f:b0:be:c1:
         80:3e:e6:ee:a7:c1:f8:aa:39:80:7c:77:94:6c:b5:b5:f0:4d:
         b4:f6:ba:0c:0a:17:69:f6:f2:4c:1f:f4:00:e3:a4:56:5a:a2:
         bd:0f:f7:b3:57:64:8e:40:c1:9c:a8:77:e1:f5:36:a4:23:65:
         a0:e0:40:78:6c:26:93:4a:8e:db:48:5f:2f:2a:d2:fe:53:28:
         6c:a3:fc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org