Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/f75G4j_mD6SdNlvLDkkbfg20Oxk.roa
File:                     f75G4j_mD6SdNlvLDkkbfg20Oxk.roa (raw, json)
Hash identifier:          Euanb7pHRU2Ks1jeUMIeTIIEAIzp0oKmYtB1D4kD6ys=
Subject key identifier:   7F:BE:46:E2:3F:E6:0F:A4:9D:36:5B:CB:0E:49:1B:7E:0D:B4:3B:19
Certificate issuer:       /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial:       01856C6F0EC4FE1B173F57F13A659F0482FD
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/f75G4j_mD6SdNlvLDkkbfg20Oxk.roa
Signing time:             Sun 01 Jan 2023 08:24:55 +0000
ROA not before:           Sun 01 Jan 2023 08:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43910
IP address blocks:        193.186.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6f:0e:c4:fe:1b:17:3f:57:f1:3a:65:9f:04:82:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
        Validity
            Not Before: Jan  1 08:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7fbe46e23fe60fa49d365bcb0e491b7e0db43b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:39:07:ea:45:75:39:88:fd:67:5f:1a:da:
                    10:4d:98:de:68:c0:8b:96:37:81:fd:81:e1:bb:e5:
                    18:88:90:f0:b9:40:53:c2:09:65:8a:54:51:6e:46:
                    51:d3:2b:17:22:48:5e:49:d6:0f:93:a6:88:5b:c7:
                    9d:f6:e6:dd:72:e1:60:32:da:32:68:ec:00:4a:f1:
                    a0:b1:ae:f5:b9:aa:da:81:bd:54:63:86:f2:3d:30:
                    a7:18:09:0e:82:83:57:4f:d8:f6:d5:f4:4f:e9:25:
                    00:d0:3d:10:16:20:b3:d8:c8:d1:08:9b:84:62:4f:
                    61:d6:c1:e7:f3:16:2a:b3:fc:79:6c:d5:91:f3:0c:
                    87:d2:f6:22:5e:d0:5d:7e:d3:40:c2:3e:1d:83:60:
                    cc:bc:00:a8:46:3a:3e:60:ca:82:be:f4:02:c5:a4:
                    ab:a9:60:65:10:a1:9e:31:7e:46:1b:7b:32:a7:6f:
                    b6:3c:77:f7:97:07:fd:04:42:ba:39:ba:b6:a0:dc:
                    9d:a0:40:cf:50:56:1d:e6:ae:c2:a9:3f:9e:6b:f5:
                    56:63:83:89:f0:f9:32:77:14:e0:1c:11:1f:8b:9b:
                    21:c8:71:64:6c:3a:b5:9c:60:80:ef:97:95:fc:62:
                    1e:cb:cd:54:53:2a:15:4c:8c:bf:28:f9:70:31:91:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:46:E2:3F:E6:0F:A4:9D:36:5B:CB:0E:49:1B:7E:0D:B4:3B:19
            X509v3 Authority Key Identifier:
                keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/f75G4j_mD6SdNlvLDkkbfg20Oxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:9e:cb:e4:3c:b2:55:45:69:be:11:bd:01:c1:cb:8b:09:
         68:12:5e:70:2d:51:69:b1:c3:b3:d8:36:31:91:1a:1c:8d:bf:
         47:8a:1b:ca:5c:50:08:db:40:43:ca:df:af:c7:f9:d3:9f:20:
         f9:34:d9:f3:d6:84:73:5e:53:3d:5b:5b:17:ae:28:2a:4b:53:
         2f:a9:0a:db:ad:de:c8:e3:00:ed:bc:69:ac:c8:36:94:09:55:
         72:00:f9:7d:23:dd:e5:90:c5:fc:33:bd:d1:95:38:a3:b6:cc:
         4c:ee:84:00:44:e0:18:5e:bb:83:11:69:56:3f:1f:06:b8:c6:
         1f:5c:6e:10:50:6c:40:13:6b:44:cf:6a:e0:63:8b:ae:46:c8:
         76:ef:46:df:69:0a:6b:51:47:a1:a0:d6:3d:b0:72:48:4f:13:
         1f:7b:e4:70:68:70:97:d0:70:63:a5:39:86:0a:47:71:d6:22:
         00:d1:f6:63:1d:bb:9e:a5:d0:4f:91:fa:59:f9:cf:89:ea:40:
         ae:16:c2:2a:95:3f:2b:bd:88:e1:54:55:04:0d:b5:84:6b:2c:
         f7:1d:d7:15:c8:80:0c:67:e4:71:1d:9d:1f:bc:71:3c:2e:47:
         10:dd:6a:fa:72:55:0f:ce:72:37:3c:00:fb:3f:b3:ec:4b:1b:
         27:ab:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:35 2024 by rpki-client on console-ams.rpki-client.org