Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa
File:                     oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa (raw, json)
Hash identifier:          1Qxou7QNVhjtV/e/5El9ebW6JPhCE+DvYDogUcKycf0=
Subject key identifier:   A0:41:D0:30:56:CA:C0:A1:A4:19:46:2E:BA:13:89:5C:58:09:CC:60
Certificate issuer:       /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial:       01856D0AD059171DF9B656752C1330A84C56
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa
Signing time:             Sun 01 Jan 2023 11:15:03 +0000
ROA not before:           Sun 01 Jan 2023 11:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198199
IP address blocks:        193.38.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:d0:59:17:1d:f9:b6:56:75:2c:13:30:a8:4c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
        Validity
            Not Before: Jan  1 11:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a041d03056cac0a1a419462eba13895c5809cc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:ec:54:02:f1:78:14:de:38:ed:5b:cf:ab:
                    9e:62:e0:4a:7d:43:eb:5f:c3:e0:67:fc:ab:1f:ba:
                    db:c8:b0:fa:2c:03:62:49:bb:70:4c:46:b0:1d:1c:
                    7f:b1:98:f3:70:3a:ee:ac:95:f6:e2:5c:71:75:e8:
                    5e:bb:eb:b5:2b:a7:3f:4e:af:8b:07:4d:52:d8:4c:
                    3c:70:ef:67:ce:2b:cc:67:fc:5f:ab:10:c0:48:c9:
                    dc:df:76:de:0c:00:59:08:5c:24:20:18:ed:f5:93:
                    47:19:29:33:72:4f:47:15:c8:4f:95:f5:be:f1:14:
                    27:c3:a8:de:89:d4:2e:68:67:21:88:0c:98:46:2d:
                    43:34:b6:cc:4c:aa:7d:16:02:8a:9c:70:a2:e6:fb:
                    31:44:f0:97:01:c1:aa:1d:3c:58:07:fe:f7:29:d7:
                    a6:a2:a6:3f:27:c8:bb:44:1d:30:87:f6:5c:3b:6b:
                    e5:1b:a0:09:71:14:26:ad:1f:9e:45:b9:33:66:75:
                    d8:d2:f2:bd:20:92:b1:4f:32:c9:4c:41:5c:46:16:
                    d6:d3:68:a2:34:c5:0f:fb:7f:08:ec:70:7e:0a:ec:
                    40:c9:35:5f:d3:17:b3:47:e0:f9:a9:2d:01:08:ba:
                    03:95:5f:3b:71:31:87:a7:8c:cd:1b:70:0f:9b:59:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:D0:30:56:CA:C0:A1:A4:19:46:2E:BA:13:89:5C:58:09:CC:60
            X509v3 Authority Key Identifier:
                keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/oEHQMFbKwKGkGUYuuhOJXFgJzGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:88:b4:20:34:3d:1a:c3:43:b7:da:88:55:67:b9:07:f6:
         62:e1:d8:37:28:e2:f5:22:6e:76:13:53:dd:a1:b9:df:9b:28:
         cb:e0:b1:9b:7b:97:80:e2:30:c5:22:e2:c8:e4:d9:d8:09:c5:
         c1:20:15:01:40:66:18:10:5d:79:8d:28:57:8d:4c:f8:95:1a:
         c1:db:e3:af:e4:37:19:cc:47:6d:37:73:60:44:50:10:e5:f4:
         9c:51:46:e7:90:69:22:e8:36:b8:2f:cd:38:78:8d:98:37:c5:
         42:39:68:47:90:13:1f:9b:70:68:f3:42:a4:5a:85:3c:6c:36:
         69:d4:d8:4e:23:8e:ab:88:d7:fe:7d:35:34:13:4b:42:be:3b:
         48:5b:c5:e4:20:0b:fb:58:dc:56:c5:61:9c:18:2c:19:10:be:
         8d:c0:ac:85:fe:51:2a:7d:cd:13:39:e6:14:93:f8:cc:25:6b:
         06:d5:03:c6:34:04:eb:52:fe:7e:6a:f3:30:e4:3f:bf:63:8a:
         cf:88:44:ec:54:56:66:04:74:ee:7e:79:90:c2:53:37:a3:88:
         ee:d6:9e:da:0a:db:c8:69:84:03:65:cc:e8:f7:3a:13:09:da:
         76:98:54:7d:a0:7f:29:c9:81:e8:d4:a3:45:4c:89:1f:d7:a1:
         f2:ca:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:35 2024 by rpki-client on console-ams.rpki-client.org