Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WoynCWSn6wPPVxEL9Q0-LlPcbM.roa
File:                     0WoynCWSn6wPPVxEL9Q0-LlPcbM.roa (raw, json)
Hash identifier:          9+nv2mQVh2kRgjaA4oAHXEDsmfd9cHI0TPys/MhcDJE=
Subject key identifier:   D1:6A:32:9C:25:92:9F:AC:0F:3D:5C:44:2F:D4:34:F8:B9:4F:71:B3
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01874FD5F43BC095BBAD1572FDA5DF2D06B2
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WoynCWSn6wPPVxEL9Q0-LlPcbM.roa
Signing time:             Wed 05 Apr 2023 05:13:54 +0000
ROA not before:           Wed 05 Apr 2023 05:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46562
IP address blocks:        193.37.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4f:d5:f4:3b:c0:95:bb:ad:15:72:fd:a5:df:2d:06:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Apr  5 05:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d16a329c25929fac0f3d5c442fd434f8b94f71b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:bb:b5:8e:c7:63:86:98:4e:cb:8a:0e:8b:
                    04:fd:51:91:4f:e5:19:75:87:50:19:3a:a0:00:e1:
                    af:2c:e7:3a:16:08:6a:86:86:3e:7c:e4:29:d8:27:
                    e6:e9:d1:3d:02:fb:17:a1:65:dc:c7:4e:3c:cc:fc:
                    ce:5a:a6:67:da:e4:93:a1:d9:3d:ca:c3:09:f2:a7:
                    e8:a2:d7:d8:94:7a:10:60:d0:da:4d:85:5f:11:ad:
                    b6:de:43:c2:ba:c6:02:e7:87:dd:0e:d6:6d:f5:35:
                    3a:76:2d:46:35:4d:02:b5:d2:f2:dd:cc:9b:27:fa:
                    ab:d2:bc:10:ba:71:de:70:1a:62:31:54:8d:e9:22:
                    b5:f4:e5:86:a1:01:a3:81:3e:b1:5c:22:22:5b:f8:
                    8a:de:fc:e7:2d:cd:02:ed:09:0b:a9:5f:b3:0c:38:
                    f7:01:4a:98:b2:32:f7:e0:61:0a:76:c7:cd:20:99:
                    82:c9:45:16:c4:3c:2b:56:33:4d:dd:de:33:c5:80:
                    71:67:fa:6d:07:7f:5c:82:8a:c2:32:88:4b:2d:eb:
                    6b:7a:98:e3:de:ab:36:c5:06:8f:2f:8f:c0:52:dc:
                    e7:10:df:e2:d2:73:b4:16:94:6b:20:ca:8d:b1:b9:
                    81:9b:35:bb:23:ab:81:73:e2:83:0c:92:44:e7:03:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:6A:32:9C:25:92:9F:AC:0F:3D:5C:44:2F:D4:34:F8:B9:4F:71:B3
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/0WoynCWSn6wPPVxEL9Q0-LlPcbM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:31:6a:bc:16:67:9e:77:c8:5e:bd:61:53:3f:b6:17:d0:90:
         80:e2:85:af:33:c9:18:0a:f1:4e:22:f8:af:cc:91:1e:f8:58:
         f7:ee:0f:1b:a7:30:6e:29:d1:c3:69:19:e6:b1:31:fa:a7:a6:
         7e:6e:ac:59:a9:be:0e:e4:0c:7d:71:5e:eb:4a:47:82:f6:4c:
         38:bb:eb:88:eb:14:45:ea:72:87:66:40:ff:63:ed:a7:b7:7c:
         e9:4e:58:c7:5c:72:b2:11:b8:00:43:4e:4f:0e:7d:8d:99:ef:
         a5:18:74:69:41:07:dc:11:4a:ef:1d:e4:6b:34:8c:59:97:68:
         b9:66:33:0d:c5:be:fc:ef:d1:8d:c3:45:77:35:b3:9f:3d:15:
         9c:23:68:97:62:3c:20:72:e6:66:27:5f:a6:ed:03:c4:12:4a:
         e7:cb:ee:70:f3:2f:26:20:93:a0:22:ff:05:12:bf:92:3a:9d:
         c2:e7:12:88:26:b3:55:0b:a4:07:cf:fb:93:af:40:8d:26:df:
         84:5c:c8:a8:14:4c:15:c3:52:24:55:06:40:7b:bd:bc:f2:29:
         a1:ba:7c:8f:a4:d0:55:32:45:8b:97:31:14:41:12:4d:c0:44:
         fa:67:03:4f:cc:55:d0:40:43:33:2b:fb:b1:66:9f:62:a7:e2:
         59:80:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org