Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XNRypbdHhoAlooVd8UUOT4h2upg.roa
File:                     XNRypbdHhoAlooVd8UUOT4h2upg.roa (raw, json)
Hash identifier:          f5LwUuLlcgVIyttq2hHQaELjwfC/EIkKTYsU3UFOkZc=
Subject key identifier:   5C:D4:72:A5:B7:47:86:80:25:A2:85:5D:F1:45:0E:4F:88:76:BA:98
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01889BBD9137C19929885E680314CEBD020F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XNRypbdHhoAlooVd8UUOT4h2upg.roa
Signing time:             Thu 08 Jun 2023 16:01:11 +0000
ROA not before:           Thu 08 Jun 2023 16:01:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        92.63.183.0/24 maxlen: 24
                          92.63.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 16:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:bd:91:37:c1:99:29:88:5e:68:03:14:ce:bd:02:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun  8 16:01:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5cd472a5b747868025a2855df1450e4f8876ba98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:aa:c8:6b:54:2f:40:80:bb:89:68:80:7a:
                    ff:7e:5d:2c:de:8f:93:d8:2c:e5:09:b6:e2:aa:cf:
                    a2:f0:48:61:8b:d6:e4:90:ab:f5:0c:62:57:d6:f8:
                    79:1a:85:15:d3:82:8d:e9:94:c4:ce:3c:00:14:91:
                    09:90:cc:51:16:41:00:96:22:54:8c:af:1c:92:bf:
                    45:26:e6:13:a3:a6:8f:48:64:54:99:2e:ce:e7:9b:
                    a6:79:c0:9d:4c:36:f1:a3:d9:d5:fa:7a:4a:2c:bf:
                    c7:d6:77:6a:ed:cc:91:8d:f1:fb:f7:64:15:b7:89:
                    61:a1:95:35:bd:47:03:a8:e2:7b:12:1a:19:c7:ea:
                    e5:53:10:07:8c:8f:4f:93:cc:5d:b9:35:96:4b:06:
                    7c:ca:05:cd:a2:32:97:95:d5:58:68:4a:06:8a:0e:
                    5d:ac:8a:c1:62:25:0c:cc:0c:0c:d3:73:02:c3:61:
                    32:9b:e8:bd:13:72:f6:21:7f:77:62:46:2c:ef:b2:
                    c2:e3:bd:e8:32:85:1c:6d:e3:89:07:ee:02:15:57:
                    69:e1:01:b4:1e:da:9c:cc:95:3d:cc:fc:31:28:f9:
                    c8:a2:fd:32:44:c9:e4:ca:7e:03:94:6f:4b:1a:4f:
                    db:0b:5a:85:bd:75:7c:2b:b7:fa:4f:0e:9f:24:32:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:72:A5:B7:47:86:80:25:A2:85:5D:F1:45:0E:4F:88:76:BA:98
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XNRypbdHhoAlooVd8UUOT4h2upg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:9f:d6:ac:33:23:7a:d4:44:53:2b:88:f8:b3:5e:ed:25:
         96:6e:57:9c:dd:61:2d:f4:ba:2b:94:aa:0f:78:7b:43:39:5c:
         ce:8c:c8:87:81:0b:89:04:0e:32:0b:5e:b2:28:70:bf:21:af:
         d6:4d:2d:22:b0:0f:c1:9b:ab:f8:78:6c:ae:74:b9:3a:2d:50:
         ed:ab:c3:9a:14:74:3c:13:d2:9f:f0:f9:2f:73:d7:cf:a5:bc:
         b0:ff:da:b9:6c:dd:17:e8:26:20:09:ca:cd:7d:3f:51:e6:04:
         f4:b2:5b:40:34:d3:ce:09:34:ae:98:38:75:51:6f:b9:08:be:
         af:ed:9c:15:02:19:2b:95:8e:39:34:7a:88:9a:47:7c:23:c1:
         7e:1e:9b:82:9c:84:99:07:85:7b:72:e3:45:17:75:b7:69:b2:
         ac:56:c3:23:46:a5:a9:6e:fc:3b:c0:97:64:9e:34:cc:e4:bb:
         da:7a:a7:d0:e0:1d:7b:72:c2:4f:b9:a4:9c:90:04:42:4b:ca:
         89:21:ed:c7:12:46:7e:72:7b:57:e8:c2:e1:2a:63:01:c0:6f:
         de:dd:ff:a3:07:81:53:f3:f3:6a:ac:96:e5:c9:a8:4c:ae:9a:
         1c:6a:6a:b1:5e:fb:ba:94:a8:5b:80:dd:cc:e1:65:72:9f:70:
         c3:35:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org