Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7i0YceZu0PPbV-KIk2NETPEmHcM.roa
File:                     7i0YceZu0PPbV-KIk2NETPEmHcM.roa (raw, json)
Hash identifier:          Ye1rw+uakDgCzYXLXM+HS//VL82+McLVIn6c7f0Qhks=
Subject key identifier:   EE:2D:18:71:E6:6E:D0:F3:DB:57:E2:88:93:63:44:4C:F1:26:1D:C3
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       0189928D159F0E350A25B87FE289CC1989AE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7i0YceZu0PPbV-KIk2NETPEmHcM.roa
Signing time:             Wed 26 Jul 2023 14:14:26 +0000
ROA not before:           Wed 26 Jul 2023 14:14:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42831
IP address blocks:        185.92.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Dec 2023 06:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:92:8d:15:9f:0e:35:0a:25:b8:7f:e2:89:cc:19:89:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jul 26 14:14:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee2d1871e66ed0f3db57e2889363444cf1261dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:eb:a9:5f:2d:f0:87:a1:2f:bb:3a:bb:cc:
                    e3:11:00:81:8f:56:6b:2e:2c:cf:54:15:a8:46:62:
                    9f:98:48:15:15:cd:a9:a3:ba:24:d1:33:3b:ea:2b:
                    36:85:de:5d:1c:ab:3c:73:64:4d:30:79:34:dd:f1:
                    f8:e7:56:c8:7d:ce:16:e5:b1:c0:7a:fc:58:19:4f:
                    bc:d4:6b:03:4c:ab:2c:1f:d1:22:3d:63:17:2f:7c:
                    21:6a:cd:79:5b:d6:f9:cd:9c:27:d6:dd:76:64:80:
                    4f:1e:61:20:74:a7:fe:14:95:4c:60:c7:d7:6c:12:
                    43:54:5f:67:f1:6b:0c:01:18:ef:2b:eb:c8:66:c5:
                    b3:14:bc:b4:0c:74:a4:d7:68:9d:97:6c:6c:d3:c0:
                    c2:53:63:53:78:c6:50:8d:9b:fb:6a:0e:4a:94:98:
                    fe:d2:0f:1c:18:06:56:0d:51:ba:78:9f:f4:b9:96:
                    d3:a6:fd:cd:a2:a5:25:79:bd:c6:ac:20:bd:9b:23:
                    78:7d:c1:f1:5e:01:3b:b9:b8:6d:bd:ff:ad:f2:70:
                    3b:9a:58:65:0d:c5:30:3c:40:4b:1c:95:48:00:23:
                    28:e8:8f:9f:32:56:d5:22:01:b2:e2:dc:0d:c7:26:
                    d8:e1:63:d5:bb:49:ed:8c:91:5e:fc:f6:dd:3c:2a:
                    c8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2D:18:71:E6:6E:D0:F3:DB:57:E2:88:93:63:44:4C:F1:26:1D:C3
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7i0YceZu0PPbV-KIk2NETPEmHcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:84:0f:9a:5e:91:48:83:1c:9f:9d:5d:32:a2:41:88:08:
         0f:0f:c4:71:60:75:0a:8d:54:59:82:95:78:f3:72:e7:51:76:
         52:12:0e:30:09:7f:5a:0b:10:25:8f:cb:05:87:f4:e7:9c:54:
         ed:48:8b:43:88:4d:c0:28:a5:37:2a:c9:9d:8b:d8:67:08:7c:
         64:99:ff:7c:78:01:84:f7:d9:c3:8b:f0:27:ae:8f:e4:a4:6f:
         45:1e:01:e6:4a:96:56:70:84:9b:8d:e3:aa:78:8c:5e:6f:f3:
         31:2a:da:af:cd:90:89:e7:7f:07:d5:f7:54:bd:bd:4e:82:cb:
         0d:43:d0:4e:3f:19:fc:d2:52:10:30:73:47:cc:02:4a:a5:f3:
         e5:6c:29:a3:ce:71:d9:86:a3:6f:5e:da:2c:7d:b5:c3:e7:36:
         a4:74:0c:78:10:88:23:b7:f0:06:20:47:09:9e:33:d9:c8:3e:
         f7:a5:9a:fd:a7:4f:8a:24:5d:93:0d:12:66:02:89:ef:64:c3:
         c4:f5:d1:44:2e:fd:65:84:56:e5:08:6f:fb:e0:41:04:7e:08:
         49:8d:20:5c:25:f4:06:53:62:06:19:4b:a9:48:a7:66:f8:18:
         f0:bb:63:a2:40:03:77:4a:d4:fc:de:be:83:fe:2a:ee:c9:8a:
         15:7f:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:05 2024 by rpki-client on console-ams.rpki-client.org