Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/7UHLPk4jTkkTLHwcplONWOg7Lic.roa
File:                     7UHLPk4jTkkTLHwcplONWOg7Lic.roa (raw, json)
Hash identifier:          eBi582e0QqxPKuNn105WJ9LmaUGrpo78qdsszopU2Xw=
Subject key identifier:   ED:41:CB:3E:4E:23:4E:49:13:2C:7C:1C:A6:53:8D:58:E8:3B:2E:27
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       018C5DE8CB36FE106F21C5694FCDD4ED93CB
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/7UHLPk4jTkkTLHwcplONWOg7Lic.roa
Signing time:             Tue 12 Dec 2023 12:03:06 +0000
ROA not before:           Tue 12 Dec 2023 12:03:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215996
IP address blocks:        93.189.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:e8:cb:36:fe:10:6f:21:c5:69:4f:cd:d4:ed:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Dec 12 12:03:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed41cb3e4e234e49132c7c1ca6538d58e83b2e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:6b:22:63:5e:ab:02:ba:56:f8:32:28:f7:
                    9d:91:14:ab:7e:b6:e4:0e:07:e1:3a:84:d6:65:ba:
                    45:85:a7:c5:7f:36:04:be:97:93:26:e4:9f:44:18:
                    a5:dd:b2:64:ac:26:4f:b3:98:e7:c5:09:85:c1:83:
                    01:a9:d7:e2:c1:d3:f4:a3:63:85:f0:a0:9c:be:ca:
                    81:90:22:8f:6b:86:1e:b2:e2:5c:30:d6:cb:9c:59:
                    0d:d1:38:0d:5e:46:32:04:cf:cb:3e:99:97:44:39:
                    34:f7:52:27:57:a2:66:20:30:11:b0:8a:df:8b:78:
                    cc:d0:92:bd:08:0a:01:b4:d4:eb:ef:d7:47:6f:47:
                    14:9b:36:97:f4:67:5a:e6:b2:b0:1e:ea:95:54:74:
                    80:62:e0:75:98:1a:a5:5e:29:b5:cd:42:cf:fb:5e:
                    9c:4f:ac:9d:21:be:2c:8b:61:c6:63:90:43:22:33:
                    ea:ec:9d:66:82:10:15:67:93:92:68:8b:46:e0:a8:
                    cb:54:61:16:de:f5:5a:ce:fe:5e:96:1d:34:74:fb:
                    1f:43:5a:d1:74:ac:38:cf:a0:ca:f7:22:75:3f:07:
                    6b:ba:2b:49:ea:ca:8d:ed:4e:57:9b:fa:bb:e1:d1:
                    19:05:c0:62:36:c1:9a:d0:df:98:2e:d5:df:1e:6c:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:41:CB:3E:4E:23:4E:49:13:2C:7C:1C:A6:53:8D:58:E8:3B:2E:27
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/7UHLPk4jTkkTLHwcplONWOg7Lic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.189.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:67:db:24:74:3b:06:94:6c:e3:c6:ff:c3:db:8f:fc:9f:
         47:a1:b3:88:00:45:2f:7b:a6:cc:fc:95:f9:12:a6:93:d6:4d:
         df:23:19:0f:e8:5a:e5:aa:ac:bd:c7:a3:06:56:7c:7e:dd:f0:
         32:67:c4:7b:cc:9b:79:68:20:f9:83:dc:cc:2c:39:0b:eb:db:
         53:ff:0c:9a:e3:06:23:a9:dc:d4:ea:c5:d0:48:81:aa:a6:b4:
         a2:c2:35:76:00:14:aa:c1:1b:f1:55:f1:45:44:c4:e8:4f:55:
         73:88:9a:25:1f:db:91:1e:6e:dd:b8:0b:af:5c:33:56:d2:33:
         71:54:52:01:b5:10:b0:05:fc:4c:f3:fc:43:03:b7:8f:6c:a4:
         68:d5:7e:d5:56:57:d9:8e:32:f7:0e:55:e2:19:0b:4f:c7:64:
         c2:28:18:86:b9:1a:16:17:48:24:62:ef:c3:b8:84:67:5b:f5:
         9c:d0:20:b9:b1:09:5a:e6:90:c8:ed:c3:07:c5:b3:88:71:96:
         4c:18:37:16:e6:84:32:e1:a1:13:dd:2a:26:1c:99:9c:17:75:
         2c:a0:f5:03:23:fd:08:a4:57:c6:47:d7:d7:28:07:11:ac:17:
         cf:5c:0f:c5:55:f5:ed:52:da:03:af:f7:03:ac:ce:86:ce:da:
         db:78:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org