Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u0TYA_nBaKaps9Dy38YbGuG5As8.roa
File:                     u0TYA_nBaKaps9Dy38YbGuG5As8.roa (raw, json)
Hash identifier:          TGGtA3Oqn8V62D7Q/7XB3b5Vi4aJNUc1KPYAfooPvEI=
Subject key identifier:   BB:44:D8:03:F9:C1:68:A6:A9:B3:D0:F2:DF:C6:1B:1A:E1:B9:02:CF
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0186DA36853AB2BF6FDEC1B3BEB68156E81F
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u0TYA_nBaKaps9Dy38YbGuG5As8.roa
Signing time:             Mon 13 Mar 2023 09:04:11 +0000
ROA not before:           Mon 13 Mar 2023 09:04:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62036
IP address blocks:        92.63.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:da:36:85:3a:b2:bf:6f:de:c1:b3:be:b6:81:56:e8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar 13 09:04:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb44d803f9c168a6a9b3d0f2dfc61b1ae1b902cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:05:b7:5b:f6:d7:39:f3:d5:ce:f8:c2:2f:
                    9c:fc:97:4e:90:f6:95:8d:87:f6:81:c7:6b:f8:54:
                    4b:8b:16:64:ab:03:92:e3:b5:47:4f:88:91:55:ed:
                    38:29:01:32:ba:3b:22:1a:05:50:c8:11:eb:27:53:
                    61:42:98:9b:51:b8:86:45:36:21:49:9f:e5:7f:0a:
                    a2:15:0b:76:d7:1a:ca:d9:60:a8:eb:58:b4:c0:7e:
                    e6:f0:c9:a5:b4:52:a5:23:96:bd:5e:71:99:06:72:
                    07:b6:39:41:96:9d:22:08:a5:bb:21:57:19:07:2c:
                    ce:d3:8c:50:c0:39:e6:da:97:61:c6:db:64:da:5d:
                    96:58:bf:88:67:f7:24:73:91:93:15:56:d7:3d:ac:
                    f3:a3:94:84:71:40:4f:95:5d:65:2c:ef:7a:64:23:
                    32:60:d8:a5:e8:c0:e4:b4:ed:97:42:5a:f4:c5:d4:
                    91:f5:2e:fb:96:1b:7c:86:a8:ae:c9:84:27:64:23:
                    3e:17:68:2e:7a:98:4a:f0:d1:c5:07:3d:51:c2:da:
                    0e:85:94:ab:7a:39:6a:7c:f2:a9:31:fd:7b:72:b3:
                    28:21:a6:de:d1:cc:ca:7a:cc:2a:25:f8:d9:15:eb:
                    52:ba:b2:93:e7:6f:da:c3:33:07:1a:e8:58:89:6a:
                    f5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:44:D8:03:F9:C1:68:A6:A9:B3:D0:F2:DF:C6:1B:1A:E1:B9:02:CF
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u0TYA_nBaKaps9Dy38YbGuG5As8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:8d:4d:a4:f1:96:be:fb:fe:70:5f:5b:47:fb:a7:d3:3d:
         92:8b:32:b6:f1:bf:b5:2f:28:96:24:dc:03:18:60:49:99:b1:
         24:e6:8e:43:4d:66:9f:b3:05:13:81:8d:46:75:3b:5d:7a:19:
         56:c1:26:38:bb:90:fd:e3:5b:98:31:be:22:a7:1c:10:51:e9:
         20:a3:c4:c2:31:b2:81:b3:bb:8e:0f:6a:af:60:4d:9d:8d:bc:
         cb:73:b5:d7:ca:e5:1e:f2:0d:74:e6:bf:e2:48:4f:00:71:70:
         55:fa:20:44:9f:52:9c:99:5b:fb:d2:2b:58:fa:2a:a6:65:f1:
         9d:7e:7f:3f:99:29:a4:6a:3d:8c:17:65:49:6a:ed:75:84:7f:
         fd:23:0f:56:b9:2d:94:cd:4b:b9:45:d3:02:f8:de:e8:1c:a5:
         07:28:55:5d:28:b7:b3:2a:ba:95:bc:f4:35:df:bd:51:a0:c3:
         df:a4:05:08:6f:0e:6e:aa:3c:1d:53:9f:be:2e:69:b6:61:22:
         b3:a1:d9:34:86:f5:56:91:d7:b5:fe:ee:62:ec:c4:8b:63:08:
         7b:9c:4d:c6:b3:f6:4d:8d:d7:65:8d:1f:b3:bc:b0:bd:72:7c:
         b0:d0:b4:39:40:b6:ad:eb:08:b4:7c:87:39:bb:55:9f:29:d9:
         84:09:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org