Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/DAXkbN2LuT1OyLCjUii3KJNgH_A.roa
File:                     DAXkbN2LuT1OyLCjUii3KJNgH_A.roa (raw, json)
Hash identifier:          h6VkvIUJ7JzrLVNmOZ5V8liRR385Id6mGSZakxpngis=
Subject key identifier:   0C:05:E4:6C:DD:8B:B9:3D:4E:C8:B0:A3:52:28:B7:28:93:60:1F:F0
Certificate issuer:       /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial:       018B618DAB57311FC259FB46B38B95A3D474
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/DAXkbN2LuT1OyLCjUii3KJNgH_A.roa
Signing time:             Tue 24 Oct 2023 11:59:15 +0000
ROA not before:           Tue 24 Oct 2023 11:59:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     196901
IP address blocks:        193.106.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:61:8d:ab:57:31:1f:c2:59:fb:46:b3:8b:95:a3:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
        Validity
            Not Before: Oct 24 11:59:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0c05e46cdd8bb93d4ec8b0a35228b72893601ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:bb:ad:6d:b9:a2:b4:19:cc:84:c5:6a:ca:
                    18:10:55:ca:ef:c2:96:8c:5e:68:20:fb:9c:dd:89:
                    26:d1:d0:0c:0d:d9:68:10:5d:15:0f:11:ad:57:a5:
                    d1:e8:e6:2f:18:68:91:5f:b7:0c:a8:40:46:0c:35:
                    40:33:e1:34:a5:08:5e:a1:8f:7d:d6:c2:b3:db:61:
                    59:e0:a0:bd:bf:a9:24:fe:85:4c:8b:9b:71:99:29:
                    af:8b:2a:36:a0:7c:6f:99:db:c8:d3:cd:97:d4:07:
                    9d:da:f0:5a:a2:d4:d5:20:33:07:54:cd:01:53:73:
                    18:4a:6c:26:16:48:04:d0:2e:70:ba:8b:b3:db:3f:
                    e8:d8:f1:23:64:e9:ee:7c:b7:3b:0a:3f:52:25:a8:
                    5f:8f:b6:cc:80:f8:6b:1a:85:00:0e:1e:28:7d:9a:
                    11:8b:92:05:55:6e:2f:3e:5d:98:53:ee:9c:18:e7:
                    68:25:2b:3b:c4:a6:be:93:8b:c1:c2:48:f7:fc:e1:
                    48:ff:71:a5:8f:8e:94:48:b0:a6:c5:ba:b1:d1:f5:
                    80:ed:b5:ef:20:78:b4:c0:07:f5:0e:4d:7e:a4:fc:
                    d0:48:30:39:16:d9:b1:cd:9c:26:b5:80:61:82:c0:
                    21:c9:e5:37:ec:ea:36:9a:85:7a:70:f1:31:8b:98:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:E4:6C:DD:8B:B9:3D:4E:C8:B0:A3:52:28:B7:28:93:60:1F:F0
            X509v3 Authority Key Identifier:
                keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/DAXkbN2LuT1OyLCjUii3KJNgH_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:b9:3b:e5:2a:26:2a:18:06:91:4d:41:14:79:6c:3e:c3:
         d3:56:d2:04:39:df:71:4b:b2:57:f0:ca:b7:a6:cc:da:5a:da:
         80:b6:c0:23:b1:ab:5e:b5:ef:00:99:94:5e:85:64:21:60:8f:
         09:e4:0d:17:b5:df:6c:fd:cc:71:64:85:3a:d1:96:06:f1:9f:
         d4:5e:c2:57:87:1e:2a:7a:06:6c:cd:46:a0:70:da:b1:94:9c:
         a1:bd:6f:61:f8:d1:77:bc:eb:a9:22:a8:9e:eb:2c:ae:fb:76:
         1c:e3:81:2a:b0:35:31:12:66:13:c5:22:ea:29:29:4e:36:67:
         16:44:17:fd:7f:2f:ef:ff:96:c6:b3:4f:96:7b:c6:6d:f9:6d:
         dd:a7:a5:34:ad:68:1c:13:a0:79:db:8c:00:d7:65:ca:cb:d9:
         20:13:f8:93:1f:2c:ee:7e:a9:dd:49:7d:e3:72:a2:f9:57:17:
         47:43:c8:eb:bd:88:49:79:c3:29:45:61:c8:b9:79:e3:49:59:
         c6:46:64:d1:73:b4:24:53:54:0a:9e:c9:60:e1:c8:e1:92:a8:
         5d:bc:2d:01:75:88:3f:16:1f:2f:d0:63:26:a5:41:ff:68:c8:
         2c:c3:6d:62:b2:d9:4e:22:ee:7b:c5:57:55:a1:7c:26:ac:1b:
         80:97:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:33 2024 by rpki-client on console-fra.rpki-client.org