Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/W6G3ad91ftNWZyd-asc-Evvc81A.roa
File:                     W6G3ad91ftNWZyd-asc-Evvc81A.roa (raw, json)
Hash identifier:          Si4HuM80hxnkrh08qrN9f2oV2uHZkWOsk//ccThDAO0=
Subject key identifier:   5B:A1:B7:69:DF:75:7E:D3:56:67:27:7E:6A:C7:3E:12:FB:DC:F3:50
Certificate issuer:       /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial:       01859676FF014AED86629C00DB4983ADE8DF
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/W6G3ad91ftNWZyd-asc-Evvc81A.roa
Signing time:             Mon 09 Jan 2023 12:17:38 +0000
ROA not before:           Mon 09 Jan 2023 12:17:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200252
IP address blocks:        193.107.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:96:76:ff:01:4a:ed:86:62:9c:00:db:49:83:ad:e8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
        Validity
            Not Before: Jan  9 12:17:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ba1b769df757ed35667277e6ac73e12fbdcf350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:f1:5a:35:7c:9c:0b:bb:fe:94:22:63:c7:
                    a6:f2:a0:6d:fa:b2:88:91:31:65:d0:cf:93:2f:d4:
                    7e:fe:2e:a7:b0:5e:4c:e2:2b:59:9b:26:bc:7b:c5:
                    c4:90:f0:f2:7f:39:95:f8:59:b4:0c:fd:a3:77:0b:
                    02:35:38:2c:95:be:1f:7e:c9:95:05:c2:79:04:f3:
                    a2:09:86:63:bc:5c:3e:6b:28:95:aa:ee:44:3f:58:
                    8e:85:b6:c4:b4:3b:23:93:c7:b7:ee:37:81:60:d3:
                    d7:f7:b4:4d:1d:49:86:49:27:55:1a:4f:9c:37:55:
                    8a:67:2f:b8:96:05:be:19:4e:2b:55:b5:39:0f:6c:
                    a1:ff:22:bd:2e:37:6c:7c:b8:36:3f:08:29:8a:33:
                    05:e7:9c:ba:41:55:e5:13:63:e2:3d:2d:40:85:b3:
                    93:2c:c4:b3:df:a1:04:31:71:97:01:1b:ef:f6:6a:
                    20:46:c0:da:bd:cb:56:7e:f5:f0:b4:42:12:fa:e1:
                    1d:55:40:48:19:55:bd:dc:28:60:8c:f2:c8:98:26:
                    1d:e1:dc:bf:eb:21:fa:86:27:15:a9:6a:d3:2b:24:
                    1b:0f:aa:99:ec:df:68:ad:79:59:92:d0:33:84:c0:
                    04:28:3a:40:b2:eb:f0:ff:5d:cf:05:41:bf:8a:b2:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A1:B7:69:DF:75:7E:D3:56:67:27:7E:6A:C7:3E:12:FB:DC:F3:50
            X509v3 Authority Key Identifier:
                keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/W6G3ad91ftNWZyd-asc-Evvc81A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:50:14:33:bc:59:d2:88:d9:cf:69:f6:19:4e:27:1f:83:
         a7:c7:da:2f:60:f2:b5:d4:18:ab:2a:00:b2:e2:47:c0:3b:8f:
         6b:ac:22:15:9b:8f:c1:3c:06:95:fe:e0:ba:d4:92:8e:56:00:
         1c:bf:d4:fd:3e:d0:69:90:dd:b1:24:2d:60:b0:bf:e7:89:9f:
         6c:ed:cd:da:62:55:c4:08:e6:42:ff:0a:68:57:a7:ca:77:39:
         cf:f1:54:42:ab:da:33:3b:14:11:8e:60:12:aa:68:63:ed:3a:
         6a:98:fb:60:85:72:61:1b:7c:98:79:ce:7a:f2:02:80:1b:66:
         ef:50:45:6c:00:17:a1:0a:66:28:01:44:4a:42:67:58:49:25:
         77:99:2d:1a:02:bd:34:60:41:13:13:3c:a8:01:36:92:87:a9:
         5c:ac:1b:ad:df:58:3a:b3:70:c8:33:d0:fe:fe:7d:d9:93:d6:
         03:b1:39:53:76:93:1e:03:97:e4:97:ea:93:ce:1b:87:d7:ea:
         47:ae:94:7a:58:83:f3:3f:c3:6c:f2:26:9d:c1:a5:6f:23:19:
         bc:1e:1b:96:73:99:05:dc:54:87:23:ac:e5:b7:dd:d2:57:24:
         d8:eb:d8:e5:c7:f7:77:31:8f:03:e6:96:1a:bb:a7:a7:36:a0:
         87:19:68:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:57 2024 by rpki-client on console-ams.rpki-client.org