Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ZFMnk1q3FTAQVBTuNwMksd_H_Pk.roa
File:                     ZFMnk1q3FTAQVBTuNwMksd_H_Pk.roa (raw, json)
Hash identifier:          E9HG3IDv24hJzy2TdGbQku2Mls+UNT/wXKRIvvTO4Oo=
Subject key identifier:   64:53:27:93:5A:B7:15:30:10:54:14:EE:37:03:24:B1:DF:C7:FC:F9
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       01856CCAD227DE39A6A49A797B7FED8D8D96
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ZFMnk1q3FTAQVBTuNwMksd_H_Pk.roa
Signing time:             Sun 01 Jan 2023 10:05:09 +0000
ROA not before:           Sun 01 Jan 2023 10:05:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207163
IP address blocks:        93.96.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:d2:27:de:39:a6:a4:9a:79:7b:7f:ed:8d:8d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: Jan  1 10:05:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645327935ab71530105414ee370324b1dfc7fcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:52:1a:bd:b3:b2:c7:c3:7c:50:d3:15:4a:
                    89:09:06:91:1e:81:83:87:a4:55:7b:7a:43:a0:7d:
                    50:a2:55:47:37:d9:1f:fe:d1:b7:41:a9:2e:e2:91:
                    c8:90:c8:bb:8a:d1:0f:c3:3d:88:f4:85:9e:57:31:
                    1e:e0:0d:83:a9:ee:56:d3:3e:1b:d8:b3:d3:50:67:
                    0c:b3:d5:a0:73:22:21:4c:a8:d5:bd:ae:7f:e3:57:
                    a6:3a:0a:96:21:fa:51:7e:02:48:33:14:22:e7:e0:
                    a4:eb:c0:34:7d:85:8f:89:16:46:5f:05:36:a5:4c:
                    c1:15:82:27:25:0e:80:32:f7:57:ce:f6:05:2e:7c:
                    dd:f1:3c:77:60:63:da:02:58:ee:8d:06:7c:66:76:
                    07:03:ee:df:45:28:f9:9f:8c:65:09:4a:e9:ce:65:
                    72:3a:64:98:df:a1:1e:8d:ce:1d:78:69:9e:08:96:
                    26:12:47:37:19:3a:38:ee:f9:41:17:71:56:76:b0:
                    de:cb:74:e3:b2:01:b2:b2:75:b7:86:ae:b7:dc:e1:
                    6e:a6:f5:ca:1d:7a:9c:91:85:94:4c:3a:2a:65:b3:
                    dc:2f:a2:ff:ed:3d:83:75:07:58:a1:e0:df:fc:70:
                    d0:3c:28:91:54:bb:59:3b:7c:ec:1d:db:c3:8e:c0:
                    34:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:27:93:5A:B7:15:30:10:54:14:EE:37:03:24:B1:DF:C7:FC:F9
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/ZFMnk1q3FTAQVBTuNwMksd_H_Pk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.96.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:fc:91:7a:6c:79:4c:90:15:95:d2:a4:e8:ab:c9:b7:ff:57:
         b4:5b:47:97:41:29:d9:e3:79:b0:82:08:77:b8:20:b1:d0:80:
         8a:ca:ac:8c:e3:36:cb:d1:7a:ec:96:fe:92:01:93:80:a6:60:
         7f:89:6f:fc:3a:14:41:bb:40:94:2f:8b:3c:ea:7a:3b:08:a8:
         fa:02:ed:07:59:3a:25:c9:9e:5c:4d:23:16:f3:34:98:ce:81:
         6d:6e:43:7a:f3:44:6b:7f:de:71:69:4f:0b:3d:37:3d:6e:67:
         39:e0:aa:c8:01:fe:ff:f7:66:2d:24:06:36:e0:6c:55:76:a8:
         44:c7:db:86:e4:5d:6c:b0:fe:c0:e8:77:fb:ad:c9:89:22:8f:
         e5:91:80:20:f0:55:72:4a:f3:06:18:d0:d4:6b:de:b2:c0:f8:
         8e:3c:96:eb:71:26:f0:3b:5d:0d:08:ec:c4:4f:40:47:23:6b:
         7e:a8:40:b6:87:a2:c6:bb:29:a3:80:f0:8f:94:d4:00:92:15:
         74:47:06:51:78:71:6f:77:69:03:f2:ac:02:ea:96:54:5d:b9:
         4a:d7:63:88:2c:2f:fa:fe:9c:eb:38:eb:fd:90:05:fc:f9:09:
         64:bc:20:90:9b:74:9e:80:7d:5a:e4:a1:ff:b9:2a:5f:f2:bd:
         e6:ad:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org