Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/g6deK1fgSmndfykBMD9vgJdSK0Y.roa
File:                     g6deK1fgSmndfykBMD9vgJdSK0Y.roa (raw, json)
Hash identifier:          q0TqVeZqPWSWArNfq+NzHFfFel3guwjEVvjhakLSjTE=
Subject key identifier:   83:A7:5E:2B:57:E0:4A:69:DD:7F:29:01:30:3F:6F:80:97:52:2B:46
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       018572FA90E9C28F366FF1747647F781612C
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/g6deK1fgSmndfykBMD9vgJdSK0Y.roa
Signing time:             Mon 02 Jan 2023 14:55:01 +0000
ROA not before:           Mon 02 Jan 2023 14:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25540
IP address blocks:        193.22.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:fa:90:e9:c2:8f:36:6f:f1:74:76:47:f7:81:61:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Jan  2 14:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=83a75e2b57e04a69dd7f2901303f6f8097522b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7c:99:30:b1:80:13:ca:05:40:74:0e:a4:36:
                    ed:ee:fc:b3:00:5e:13:6c:fd:34:68:52:57:6f:f2:
                    51:b9:72:3e:de:cc:18:bb:80:48:ac:6e:67:20:53:
                    48:33:bb:97:90:d4:1f:da:b3:eb:f3:f0:e0:e7:84:
                    f7:43:55:e4:d8:d2:e6:6f:5d:fa:e3:f7:98:a7:58:
                    b1:87:07:8c:03:8f:d3:6e:73:85:6b:6c:a8:57:5b:
                    08:5b:5d:98:38:cd:30:33:48:85:ff:09:d5:46:56:
                    4e:e9:cf:b0:70:32:9c:47:ff:7c:fe:be:2f:a9:61:
                    27:38:e4:38:f3:25:5d:5b:1a:7e:11:bd:5a:e5:38:
                    2e:de:9e:8c:98:fe:b6:bc:49:bc:13:4b:fb:e5:55:
                    fb:08:0a:20:91:f2:2d:26:78:86:74:73:6f:ae:03:
                    64:2c:a7:c7:2a:c7:5d:68:2c:56:84:52:55:06:c3:
                    0e:87:a4:2a:b9:57:15:67:d7:e8:27:ad:15:e1:4d:
                    68:ef:4c:3e:7a:1e:bb:22:e7:c4:df:38:79:d8:31:
                    68:f8:4e:91:59:60:3d:ff:26:fb:d8:91:18:0a:e8:
                    76:76:58:01:70:8d:02:3c:32:75:1c:f2:10:fc:c1:
                    63:4c:5c:c5:ce:f6:8b:35:ab:80:65:a5:cd:95:fe:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:5E:2B:57:E0:4A:69:DD:7F:29:01:30:3F:6F:80:97:52:2B:46
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/g6deK1fgSmndfykBMD9vgJdSK0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:aa:d1:bf:88:83:fa:54:9d:53:6d:4b:16:e3:cf:8d:1d:58:
         4a:41:d9:a4:d2:e1:c4:36:b3:1c:33:8f:9b:42:b3:54:c1:38:
         46:ab:1c:b5:81:73:21:86:a9:8b:93:44:56:6a:3a:1b:04:b4:
         fa:0c:f7:0e:4a:9e:6f:90:e7:74:d1:37:62:a8:cc:7a:2b:ad:
         7f:af:5b:92:a0:67:a7:09:9b:b3:38:45:b9:42:a1:d2:d3:77:
         f9:f4:88:5b:a5:fe:9c:20:01:dc:eb:53:e0:20:b9:4b:e4:9a:
         cf:db:aa:de:67:d8:61:f8:49:ac:a5:c3:df:88:be:41:a8:b3:
         69:46:0c:7a:fd:7e:0b:63:99:1f:a1:05:ea:55:13:9c:7d:0b:
         38:70:17:32:36:54:ab:b3:0f:46:29:89:c8:27:60:94:59:d3:
         27:91:62:8e:e8:48:53:c3:f5:5b:2b:d2:f2:17:d9:5d:0d:c5:
         53:81:43:11:e2:70:6f:87:f1:f8:5b:1f:ea:5b:be:88:40:7a:
         ae:76:52:8f:6e:64:5c:90:23:61:54:91:d8:a6:a8:73:53:84:
         e2:85:db:a3:0b:53:76:e5:89:59:a4:90:d0:71:e3:ce:c4:3f:
         b2:39:df:08:ea:57:54:f0:a7:5d:74:22:83:78:8d:cd:d1:fb:
         86:dc:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org