Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/IFLV8EePFs0XnHujZ8GILI3gqQc.roa
File:                     IFLV8EePFs0XnHujZ8GILI3gqQc.roa (raw, json)
Hash identifier:          5GQu1BvIlK4rVtNRnu12RTV5WV6lzJna4nGKgEDVgkw=
Subject key identifier:   20:52:D5:F0:47:8F:16:CD:17:9C:7B:A3:67:C1:88:2C:8D:E0:A9:07
Certificate issuer:       /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial:       018895C0FA0962111AEFA737F8FE4216C161
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/IFLV8EePFs0XnHujZ8GILI3gqQc.roa
Signing time:             Wed 07 Jun 2023 12:07:12 +0000
ROA not before:           Wed 07 Jun 2023 12:07:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        193.27.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:c0:fa:09:62:11:1a:ef:a7:37:f8:fe:42:16:c1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
        Validity
            Not Before: Jun  7 12:07:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2052d5f0478f16cd179c7ba367c1882c8de0a907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:0e:da:a1:6a:11:a2:6c:ad:43:d8:f5:78:
                    cd:66:97:1c:38:4e:bb:b1:2f:57:88:e8:44:a7:3e:
                    63:75:32:2c:e6:81:25:c4:7d:8d:f4:96:23:8a:c2:
                    95:08:cf:61:88:48:26:ec:03:9e:24:3a:62:33:aa:
                    d8:1e:b1:8c:f9:0f:ee:ac:6a:e9:65:f7:15:aa:7b:
                    aa:d1:6f:32:27:7f:05:ba:35:3a:38:01:d1:44:15:
                    43:bf:eb:9f:6c:66:d2:38:62:df:d9:19:ad:5e:97:
                    77:39:c0:64:e1:fb:6e:c1:2c:07:47:2e:8b:93:e1:
                    77:68:d9:8a:3f:32:71:32:a6:e9:d2:74:b1:22:bc:
                    ce:8a:01:0a:d2:ae:24:81:7c:bd:27:e8:4d:26:4b:
                    ee:b9:f4:82:08:2d:ee:b6:88:ab:24:7f:9b:10:52:
                    a9:bc:9e:c1:a8:23:b9:ca:5a:a3:bb:95:88:ba:81:
                    e2:0a:12:df:be:1d:cc:90:ec:45:58:85:a9:8b:60:
                    cd:e1:10:4a:4e:4e:34:18:8b:05:f8:52:33:50:8f:
                    2f:03:e1:fe:07:dc:76:05:2f:8b:74:04:cf:c0:37:
                    7b:e4:61:9a:55:31:92:11:f4:92:72:14:05:4f:e6:
                    61:66:b1:6d:a0:93:e2:e0:28:fb:80:66:99:81:6a:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:52:D5:F0:47:8F:16:CD:17:9C:7B:A3:67:C1:88:2C:8D:E0:A9:07
            X509v3 Authority Key Identifier:
                keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/IFLV8EePFs0XnHujZ8GILI3gqQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:3d:4a:e6:46:46:c1:64:33:29:e0:18:37:54:f8:fc:48:
         7e:df:06:8b:f4:35:b3:d3:62:5e:c2:e7:fe:a7:16:64:08:bd:
         be:f4:65:bd:f4:d1:08:7a:b8:95:39:c2:bc:52:d0:ee:99:34:
         eb:2a:25:04:23:e8:7c:ce:c7:82:5d:3e:6f:67:30:28:23:33:
         80:25:9f:fd:5c:c6:78:60:75:ae:94:a4:05:c5:0c:e1:80:fe:
         70:dc:ef:c1:29:63:f7:8b:0b:02:7c:d8:96:88:7f:03:4f:6e:
         6d:60:64:61:5a:06:0a:a8:74:ff:f4:9e:a6:aa:71:3f:9a:af:
         cc:db:2c:83:85:37:ab:30:1e:3c:52:ce:e3:9b:8f:80:c7:a3:
         b2:08:57:40:f9:11:1a:53:05:68:c0:d7:62:8c:72:1c:aa:e7:
         92:41:66:5d:a4:4f:9f:86:38:e2:9c:e8:25:71:dc:54:6f:99:
         db:51:91:f7:0d:bb:47:99:cc:c7:81:aa:f3:1f:16:a9:3e:14:
         d1:cb:2b:40:51:91:35:64:83:04:8b:b1:f4:63:ed:2e:36:05:
         26:1d:4f:36:39:4e:4c:5e:6a:80:e6:18:56:36:20:71:e4:cb:
         c5:32:45:51:87:f5:9f:0c:85:f2:50:06:ea:5c:7d:bb:72:1b:
         85:6e:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:56 2024 by rpki-client on console-ams.rpki-client.org