Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/0vfQRnoYmJJNJgUa9I31dutRAHo.roa
File:                     0vfQRnoYmJJNJgUa9I31dutRAHo.roa (raw, json)
Hash identifier:          d10CLib6+Eekhs7SxqwEydIhvlyAi2mPRxX7ddUkXdQ=
Subject key identifier:   D2:F7:D0:46:7A:18:98:92:4D:26:05:1A:F4:8D:F5:76:EB:51:00:7A
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       01857169A64AEE498ECAABDB934A99E15F5F
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/0vfQRnoYmJJNJgUa9I31dutRAHo.roa
Signing time:             Mon 02 Jan 2023 07:37:07 +0000
ROA not before:           Mon 02 Jan 2023 07:37:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207114
IP address blocks:        193.22.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:a6:4a:ee:49:8e:ca:ab:db:93:4a:99:e1:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Jan  2 07:37:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d2f7d0467a1898924d26051af48df576eb51007a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:12:56:a1:0d:3d:b5:68:23:87:87:29:aa:
                    c1:09:d0:9a:15:e9:a2:32:77:e3:47:81:90:e3:94:
                    46:a5:86:93:72:81:c6:30:48:a7:6c:c5:a5:d0:15:
                    3a:b1:e1:80:d8:f3:58:9b:01:5a:3c:15:d3:92:4f:
                    d6:8a:e2:db:33:29:dc:c0:2c:2d:a6:ae:d3:cc:b6:
                    68:80:b3:20:56:44:d4:71:70:61:00:ab:ef:f5:f4:
                    4c:40:f0:e8:08:14:02:ff:ee:6a:f6:96:3d:41:61:
                    1f:05:e7:bf:77:f2:68:5d:b1:a9:cf:91:94:5a:89:
                    fd:ca:50:f2:f3:39:46:03:9f:c2:8a:8f:b8:52:dc:
                    22:57:fa:a0:03:be:7e:97:2b:dd:9a:67:4d:8f:4e:
                    4f:a5:95:5c:55:03:9c:08:b2:df:0f:3e:ea:9a:33:
                    21:d2:58:b9:d6:03:8a:a2:6d:e1:26:8e:eb:c4:09:
                    f7:99:ff:1f:37:e1:85:b0:f5:d1:7d:55:b7:74:85:
                    88:63:d5:20:f1:5b:28:c7:4c:1d:df:96:97:0d:23:
                    a8:5b:59:9e:e9:70:5b:dd:f7:96:ca:d3:c9:3c:84:
                    54:29:ff:6e:f1:c8:f3:b8:bd:93:f2:a4:98:cd:56:
                    53:09:3c:07:90:50:05:83:be:b5:a7:7a:df:6d:03:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F7:D0:46:7A:18:98:92:4D:26:05:1A:F4:8D:F5:76:EB:51:00:7A
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/0vfQRnoYmJJNJgUa9I31dutRAHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:59:47:76:21:43:3a:69:df:52:18:ca:5c:10:4d:85:af:ab:
         5e:b0:c6:0a:ef:cb:52:7b:26:28:35:c4:c2:64:30:93:97:d8:
         8c:c0:33:4c:a2:2e:f3:a2:2a:60:f6:d0:28:b4:52:4a:4d:b2:
         20:7c:1d:b0:a4:3b:19:50:30:3f:c7:f8:b9:5f:c7:26:73:55:
         cd:ca:54:86:c0:d5:e2:4f:c4:66:30:b1:f4:a2:2d:23:22:a6:
         59:39:16:08:ac:0a:f6:de:9e:31:d3:f1:32:26:00:69:08:43:
         ee:f9:2c:ee:53:a5:f0:e0:65:2b:14:06:8c:23:35:d6:69:e8:
         03:01:00:c0:15:0a:d9:8b:71:40:02:72:41:bb:3b:fb:eb:d3:
         d7:37:bd:b7:4b:72:77:a9:74:8b:af:62:43:55:13:e6:df:37:
         19:78:e3:86:5f:49:ab:01:81:1c:26:25:65:e2:b7:44:49:80:
         b5:ed:96:3f:0b:9b:98:e8:38:c3:00:4b:1f:75:01:d9:eb:59:
         09:85:59:55:14:5b:6c:46:10:6e:d1:9a:16:53:eb:af:50:15:
         8b:ca:76:99:79:e9:a2:b9:d6:91:35:55:80:b3:6a:87:63:89:
         0e:b3:d8:e6:84:94:38:78:f3:c5:1d:97:e0:49:6c:94:48:e2:
         e5:85:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org