Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/q-z_myMoMLRWmhs_EwSO6Ae6ALM.roa
File:                     q-z_myMoMLRWmhs_EwSO6Ae6ALM.roa (raw, json)
Hash identifier:          vbJj3fKWAwvj1U/F5VJYs9wjpAyw5yks6vdeFbsvX3k=
Subject key identifier:   AB:EC:FF:9B:23:28:30:B4:56:9A:1B:3F:13:04:8E:E8:07:BA:00:B3
Certificate issuer:       /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial:       018CC8DCC92C68690B69604788918EEFEFD4
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/q-z_myMoMLRWmhs_EwSO6Ae6ALM.roa
Signing time:             Tue 02 Jan 2024 06:29:21 +0000
ROA not before:           Tue 02 Jan 2024 06:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203229
IP address blocks:        193.162.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 08:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dc:c9:2c:68:69:0b:69:60:47:88:91:8e:ef:ef:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
        Validity
            Not Before: Jan  2 06:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=abecff9b232830b4569a1b3f13048ee807ba00b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:4b:b1:ce:d3:3e:4f:e1:07:5f:32:37:a1:
                    6c:ad:1b:06:d2:e0:ec:10:25:a2:28:6d:eb:45:dd:
                    e2:4f:1d:04:ee:3b:c8:1f:e1:40:89:8b:20:ba:d1:
                    d9:c4:18:3d:58:c0:3d:59:44:97:f0:70:39:c3:8a:
                    01:39:3e:86:d3:8f:21:43:54:69:91:58:d7:05:76:
                    0e:62:2e:71:55:c0:6c:8e:c8:0d:2f:67:e6:75:62:
                    a1:01:e7:0a:79:3b:78:c6:98:d4:4f:66:bd:65:a4:
                    5d:ca:45:d3:e0:66:04:0a:7e:f5:85:9a:9b:52:22:
                    3a:2d:a1:0f:61:16:f7:8a:89:66:fd:44:1c:ad:2a:
                    e3:18:a1:25:36:ea:7c:ab:a4:eb:f5:3a:14:30:66:
                    01:5c:f4:90:f9:a1:72:c0:28:a0:df:a5:34:2f:97:
                    51:cf:45:ec:6e:c6:ae:d9:72:a4:0f:81:50:1b:e7:
                    a9:aa:0c:3a:4c:45:e3:d2:62:65:5c:a4:1e:fc:55:
                    3f:30:09:09:d6:75:27:5e:d2:e4:42:4b:93:34:ad:
                    c6:ad:79:1b:92:67:1e:2f:97:35:58:3e:a5:3a:8b:
                    b5:29:5c:ff:c1:29:cf:da:b2:d3:6d:13:b6:c2:d7:
                    71:2e:50:30:08:62:fa:16:d9:ed:5d:17:a6:2d:3a:
                    e4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:FF:9B:23:28:30:B4:56:9A:1B:3F:13:04:8E:E8:07:BA:00:B3
            X509v3 Authority Key Identifier:
                keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/q-z_myMoMLRWmhs_EwSO6Ae6ALM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:62:4e:72:91:41:09:bc:e2:89:0b:11:97:a4:e3:a6:a6:
         d3:93:3a:bf:2c:8c:0c:7a:74:05:a8:58:d9:05:5d:b7:84:a7:
         c0:07:6a:06:b4:ab:37:33:55:b5:7f:e2:8a:bd:fd:7e:25:49:
         d3:37:81:b3:b6:0e:fb:76:cd:44:bd:4f:43:f1:20:e1:71:47:
         4f:44:a7:a1:89:18:93:3d:a6:03:74:74:5f:78:92:0c:6e:16:
         61:5c:9a:96:74:00:b5:fc:ef:5e:3e:88:97:e7:d5:1e:3f:de:
         cf:3b:14:60:e3:cb:85:80:34:89:72:5d:f8:54:8d:cc:14:b4:
         58:7e:12:ce:8a:ca:74:7f:a8:5c:48:b7:6d:f8:a0:5d:28:a5:
         40:f3:1a:5b:88:51:0e:08:b5:a5:9d:be:ab:c3:80:06:9e:ef:
         74:d7:c1:34:10:34:4f:4c:1d:1f:4d:64:4b:ca:04:0e:2c:40:
         47:8b:5f:d0:ef:1b:e0:22:c8:20:2e:21:c0:c7:5b:39:7c:fd:
         48:ab:7f:0a:be:f4:c7:64:67:e9:c7:67:18:17:64:0f:2b:28:
         8f:45:86:ed:ba:59:be:eb:0f:12:f1:30:02:c1:98:1f:db:72:
         a9:7d:5a:24:71:18:96:60:47:7c:04:04:45:7a:04:a1:9e:19:
         25:64:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-fra.rpki-client.org