Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa
File:                     RiuqieJv_GBxnl-D7p4Z9UANwzM.roa (raw, json)
Hash identifier:          vkCDwGmdmDLE1CDNpN18lm2NV79j2asfT503q5LAPdE=
Subject key identifier:   46:2B:AA:89:E2:6F:FC:60:71:9E:5F:83:EE:9E:19:F5:40:0D:C3:33
Certificate issuer:       /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial:       018A2719D7A9A29278F969169E4D0F796710
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa
Signing time:             Thu 24 Aug 2023 10:31:59 +0000
ROA not before:           Thu 24 Aug 2023 10:31:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209880
IP address blocks:        193.220.161.0/24 maxlen: 24
                          193.220.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Sep 2023 06:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:27:19:d7:a9:a2:92:78:f9:69:16:9e:4d:0f:79:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
        Validity
            Not Before: Aug 24 10:31:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=462baa89e26ffc60719e5f83ee9e19f5400dc333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:6a:6c:c2:aa:da:0e:90:52:a6:1a:71:47:
                    32:ad:52:38:69:e0:e9:16:2d:37:52:a4:6b:a7:79:
                    23:22:d9:5c:f3:5a:7e:c2:18:f3:49:ce:30:c9:a8:
                    35:c0:ab:07:15:85:2b:ab:cc:f8:cd:09:57:8b:bf:
                    8f:0c:1b:1a:ce:1e:a5:52:7f:de:d6:b3:b2:ff:c7:
                    70:8d:db:d2:c3:a8:a3:ca:74:85:de:98:fe:97:4e:
                    b2:ce:95:3c:32:51:74:88:b5:12:58:7c:0d:66:ba:
                    d3:4a:3b:8e:60:2d:15:9c:2b:6a:6c:49:ef:a6:ac:
                    5f:fe:1e:3f:38:c4:e5:ff:f1:cd:a8:ae:6b:2f:b6:
                    58:cc:0e:64:ee:6b:00:d8:ac:b3:cb:76:82:49:94:
                    73:38:08:1c:1b:65:86:f3:9b:48:dc:d5:13:a0:9b:
                    a2:8e:cf:9e:c6:bb:36:1a:e0:8a:8b:24:1b:09:cd:
                    5d:65:9b:b6:01:6d:9d:53:94:07:e8:d0:53:67:59:
                    98:c2:f3:be:8c:f6:9d:d2:8c:55:6c:3b:ab:9b:f8:
                    1d:67:49:e0:1b:b7:1e:4f:a8:9b:fd:7c:fb:7e:04:
                    f0:e2:67:20:25:97:22:8c:67:28:e7:cf:f2:96:16:
                    22:a3:14:7b:5a:ac:48:72:35:bb:37:b4:f3:00:88:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:AA:89:E2:6F:FC:60:71:9E:5F:83:EE:9E:19:F5:40:0D:C3:33
            X509v3 Authority Key Identifier:
                keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/RiuqieJv_GBxnl-D7p4Z9UANwzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.220.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:fc:35:b7:16:e7:b1:82:be:63:11:a8:c3:d2:50:de:d5:
         51:3d:67:29:e8:c8:10:94:f9:a0:c8:98:2a:90:dd:f4:6c:7d:
         c8:12:e7:a4:e5:9b:50:de:b7:32:a4:d7:e4:c0:c0:5f:6e:b7:
         27:7c:e0:75:85:f9:81:26:7a:97:48:02:19:51:49:f4:7a:4c:
         0c:c0:6a:6e:a1:23:37:10:6a:26:32:eb:97:8f:3a:9c:1d:40:
         91:bc:eb:db:aa:76:39:27:05:09:b0:eb:de:00:5b:9f:46:96:
         b7:5b:2a:3d:2d:b0:fa:60:76:38:16:8d:99:96:63:4a:72:3e:
         f4:cb:30:34:7a:12:43:9c:b0:7e:92:95:21:19:26:be:aa:12:
         ee:3d:f8:f3:7e:be:6b:e8:b3:a9:6e:21:a8:b7:20:01:c4:2e:
         02:35:39:4b:ac:07:c1:6a:ae:c6:42:2c:eb:ad:f3:87:2a:26:
         33:c4:4d:41:45:7d:9e:c5:a7:0f:d3:6e:06:69:35:25:2a:bb:
         3d:17:bb:cb:ee:4a:cc:c9:9f:de:90:e6:93:1c:4c:cb:60:94:
         5d:28:1e:a3:96:52:3d:b4:0f:86:04:cc:31:28:dc:a7:f4:e5:
         06:3c:b7:ae:4d:8b:c8:8e:bb:df:03:e5:a5:ea:c6:cf:58:a9:
         0a:9f:1f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:53 2024 by rpki-client on console-fra.rpki-client.org