Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/NpwSQ8-y-L4iG7GXBAQLBWVVuZw.roa
File:                     NpwSQ8-y-L4iG7GXBAQLBWVVuZw.roa (raw, json)
Hash identifier:          J4yEcS3HmxGMsQnUdrbJGZzbxvdk6MwrZ9g1cqsajt8=
Subject key identifier:   36:9C:12:43:CF:B2:F8:BE:22:1B:B1:97:04:04:0B:05:65:55:B9:9C
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       01856FE71A7D091452F2B9225C9B93DC6E31
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/NpwSQ8-y-L4iG7GXBAQLBWVVuZw.roa
Signing time:             Mon 02 Jan 2023 00:34:54 +0000
ROA not before:           Mon 02 Jan 2023 00:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6453
IP address blocks:        193.103.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:e7:1a:7d:09:14:52:f2:b9:22:5c:9b:93:dc:6e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Jan  2 00:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=369c1243cfb2f8be221bb19704040b056555b99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:85:d2:af:ee:43:0b:2a:51:6b:22:8d:89:
                    aa:b4:0c:f7:ea:ec:15:fc:25:7f:91:48:e7:14:df:
                    c3:7f:49:cd:f9:51:7b:29:15:c8:c9:d8:1a:fb:8f:
                    33:b3:93:b0:76:9f:7e:45:5a:43:1d:90:c6:60:dc:
                    d7:1d:e7:31:74:18:c4:e3:d4:84:16:7b:ab:9d:7a:
                    f0:f2:6e:bc:ae:ee:d9:19:86:74:9a:b0:5f:8c:cb:
                    d7:d0:dc:50:ca:c6:b7:00:02:05:a0:6f:34:eb:e4:
                    ad:f9:a8:9f:dd:0b:b1:51:70:b7:65:f5:96:22:6d:
                    83:bf:f1:bd:3b:86:6e:d3:69:0f:98:4b:29:71:74:
                    03:af:8a:50:c7:5d:1d:4d:81:20:9d:15:c4:a1:76:
                    0c:a5:29:5c:18:8a:6e:8b:58:51:b9:28:67:5a:50:
                    b1:7c:d6:83:01:ce:11:73:1e:de:e9:b3:a1:77:3f:
                    ae:9a:30:0a:28:6c:28:b3:8b:08:a8:15:b6:da:89:
                    37:16:9b:d8:2b:41:5c:a4:4b:ef:90:81:e2:33:a2:
                    11:15:d4:44:06:31:95:4b:51:ee:87:66:4b:97:60:
                    ca:0c:47:e7:aa:0d:ad:62:3c:f8:12:7c:4f:e8:d7:
                    7c:4f:d8:f3:47:1c:22:b0:ae:4f:ca:05:a7:c6:36:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9C:12:43:CF:B2:F8:BE:22:1B:B1:97:04:04:0B:05:65:55:B9:9C
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/NpwSQ8-y-L4iG7GXBAQLBWVVuZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.103.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a9:63:10:1f:c5:0c:37:f8:2e:2e:31:9b:1d:99:24:8c:bc:
         5f:33:67:4f:4f:4f:97:d9:a5:1d:6b:a7:e0:ef:92:da:1e:62:
         0a:fd:80:42:fa:8e:af:2a:78:c0:fc:06:b1:63:f6:a5:a0:c5:
         f1:f0:42:ea:70:8c:c7:74:ee:5c:76:a5:e0:36:93:cb:6d:cc:
         6b:fe:dd:37:31:a2:1e:6e:2c:4b:e6:ac:a7:bc:87:ed:76:50:
         7d:81:a6:01:5c:7a:8a:5c:6a:2d:1f:1e:ca:84:83:0c:7d:14:
         6d:87:05:10:df:76:8d:85:ba:25:8f:70:09:fd:5b:f1:6f:ed:
         27:2e:03:00:77:a9:db:68:1c:6c:c8:8e:23:18:f1:31:9f:4a:
         9f:93:1c:5d:cf:9d:1d:fa:62:f8:02:55:b9:f3:af:13:a2:d3:
         10:f8:06:0b:8b:ce:29:78:1c:bd:c1:58:5a:c4:2f:01:d6:22:
         94:92:4d:7e:bd:94:cc:95:8c:58:b5:79:18:55:67:d7:30:1c:
         25:4a:de:ce:6e:87:21:00:f2:51:be:cc:bd:64:b3:75:41:72:
         f6:6c:ab:af:16:e0:16:71:f9:35:fb:a4:2c:81:f0:28:ac:a3:
         37:71:5b:c3:5e:8b:9c:61:bd:fd:e1:e2:17:79:6f:d4:1a:3e:
         1e:90:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org