Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/asvLRA17SJj_YrYNZNUTLSFBEJA.roa
File:                     asvLRA17SJj_YrYNZNUTLSFBEJA.roa (raw, json)
Hash identifier:          JViEz71skKQX8zqASNIBQzT4ykQSDuXSaToLM0T3RTo=
Subject key identifier:   6A:CB:CB:44:0D:7B:48:98:FF:62:B6:0D:64:D5:13:2D:21:41:10:90
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       018B55CE28EAED8E49DAB55D8866A5BFB31E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/asvLRA17SJj_YrYNZNUTLSFBEJA.roa
Signing time:             Sun 22 Oct 2023 05:14:16 +0000
ROA not before:           Sun 22 Oct 2023 05:14:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216127
IP address blocks:        195.19.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:55:ce:28:ea:ed:8e:49:da:b5:5d:88:66:a5:bf:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Oct 22 05:14:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6acbcb440d7b4898ff62b60d64d5132d21411090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:11:05:8a:df:38:0b:13:7b:0a:31:6f:1e:
                    d4:b3:de:57:41:8e:09:d1:ed:6e:55:88:59:67:fe:
                    60:35:e2:89:c0:f2:6f:de:b6:6b:03:33:b2:dc:81:
                    f5:43:df:d3:72:1a:a9:53:76:cd:7d:51:cb:62:49:
                    bd:8f:37:88:b0:4a:8d:aa:33:18:87:ed:85:56:38:
                    d7:d5:be:44:9d:8b:99:8a:c2:bb:d6:4e:4d:24:ed:
                    f9:8f:71:93:e3:7a:53:e6:63:c8:80:a0:71:be:3d:
                    85:bc:3f:b0:cf:db:04:2d:21:4d:96:60:9b:44:30:
                    f6:91:95:e7:96:b1:0e:a6:80:44:74:27:11:1a:a6:
                    66:1b:d5:31:2b:4d:2a:38:52:11:3e:aa:4d:5e:29:
                    ec:cc:d6:34:11:1a:97:29:53:a9:dc:2a:04:21:4e:
                    04:a9:92:65:af:83:51:10:d3:40:2f:11:0f:6c:22:
                    50:da:53:29:1b:98:97:fc:d7:00:c5:42:25:42:a9:
                    02:54:a0:7f:99:07:ce:45:d8:7d:5d:cf:ec:33:52:
                    cc:e5:a8:e5:ff:ed:c7:dd:06:61:c3:b4:a3:c6:79:
                    51:08:fb:5e:ab:37:9c:2a:0b:af:f3:69:15:50:f2:
                    59:f8:13:29:4c:b6:0d:03:75:22:29:21:c0:bf:7a:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:CB:44:0D:7B:48:98:FF:62:B6:0D:64:D5:13:2D:21:41:10:90
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/asvLRA17SJj_YrYNZNUTLSFBEJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:af:c1:91:1c:dd:6c:f7:68:19:84:f9:18:47:0c:a7:19:e1:
         16:af:52:69:5a:17:4a:91:c8:ac:45:ac:5e:36:d9:64:d5:b0:
         b6:f6:5b:5e:9b:f5:95:12:9a:99:4c:d2:0a:f7:4d:e8:0a:1a:
         36:7b:2d:64:05:db:13:91:ad:24:0d:f1:07:00:72:0e:e1:21:
         12:ec:16:55:6c:df:90:6a:44:f6:1c:0c:df:76:a5:ff:e7:5b:
         69:bd:4a:59:fa:16:e1:e2:20:15:c2:bf:77:1a:da:67:77:28:
         09:98:7d:23:8f:9e:b1:6f:8c:d4:ae:32:22:74:cf:e4:87:96:
         e2:60:1c:66:79:38:c9:ae:c1:3c:e6:bf:9b:11:a4:c6:42:2e:
         7b:d0:e2:c1:ff:bc:fa:e6:1a:3b:f0:24:e4:87:39:7e:e6:5d:
         ed:b8:47:48:51:ba:12:6a:2b:7e:3c:9c:76:74:03:27:69:37:
         95:b5:dd:4a:e6:ac:89:2e:d5:99:11:45:32:ec:ea:91:4d:bb:
         87:ec:a4:70:f2:83:a0:94:49:10:01:00:fe:10:e6:71:d6:0e:
         06:a3:f6:ca:f8:d5:7a:6c:dc:1a:54:e4:81:49:b3:67:cf:24:
         39:73:e7:e6:e8:15:15:1e:e6:df:01:3e:61:e5:3a:8a:49:de:
         4e:fa:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org