Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JE1_QvIZ_Op9C7ax6eBbWNQQpqg.roa
File:                     JE1_QvIZ_Op9C7ax6eBbWNQQpqg.roa (raw, json)
Hash identifier:          ZACt6yx/hq0kZ6DUOloIyZAW7Atj2wFD8vc3tk1DaMk=
Subject key identifier:   24:4D:7F:42:F2:19:FC:EA:7D:0B:B6:B1:E9:E0:5B:58:D4:10:A6:A8
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01863A8AAB4C813EABCCA18549E06F584844
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JE1_QvIZ_Op9C7ax6eBbWNQQpqg.roa
Signing time:             Fri 10 Feb 2023 08:56:51 +0000
ROA not before:           Fri 10 Feb 2023 08:56:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150752
IP address blocks:        193.37.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 10:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:3a:8a:ab:4c:81:3e:ab:cc:a1:85:49:e0:6f:58:48:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Feb 10 08:56:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=244d7f42f219fcea7d0bb6b1e9e05b58d410a6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:54:35:12:77:48:98:9f:0a:2a:b9:ef:45:
                    7b:da:af:0e:5f:d2:18:bd:95:89:eb:cb:e6:32:59:
                    a5:3f:a8:80:5e:e6:80:23:22:65:28:9e:09:6c:83:
                    63:00:97:5c:55:e0:8a:8f:15:de:27:a7:4c:6a:50:
                    40:33:58:12:f3:5c:a0:8f:25:ab:f6:6f:c1:c9:01:
                    40:ab:e6:2c:b1:a1:ac:a5:29:cd:6b:90:99:b2:4f:
                    32:05:3a:64:ff:2b:a7:f3:74:61:e5:32:a2:c9:15:
                    b6:0d:5f:1e:e9:8f:f0:30:64:3c:ed:88:56:66:46:
                    8d:64:a9:93:0a:37:2f:a6:0e:ae:33:4f:73:51:5f:
                    b7:dd:a8:2b:43:6a:2f:47:ad:d1:c2:39:07:06:0d:
                    a8:66:19:26:83:d5:47:61:20:06:80:23:2e:07:38:
                    44:44:bb:73:8a:14:7d:16:ec:76:f5:ea:78:70:8e:
                    f2:1b:bb:60:0e:96:01:75:88:63:39:59:e0:02:39:
                    6e:1a:e7:c9:7c:c1:26:5a:58:fc:4d:3d:22:f7:e3:
                    a1:2a:65:c3:10:41:ae:71:be:75:70:e3:54:2a:bd:
                    42:7d:37:5f:b5:12:5a:d7:81:98:11:0d:a6:c8:3a:
                    e5:ba:0e:30:ab:d9:15:6e:b8:3b:ef:b7:6f:55:74:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4D:7F:42:F2:19:FC:EA:7D:0B:B6:B1:E9:E0:5B:58:D4:10:A6:A8
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/JE1_QvIZ_Op9C7ax6eBbWNQQpqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:b3:37:c0:d4:94:7c:35:eb:6c:41:0c:d6:48:0b:fc:b8:
         07:3e:4a:1f:9d:ce:fc:b6:6e:5b:1a:1a:49:f2:46:cb:16:01:
         d9:41:1b:74:f5:43:9f:8f:cc:45:74:b9:9a:17:4a:ba:81:9f:
         9a:41:ff:a7:fe:17:6e:34:a1:00:8c:e8:a8:82:68:79:77:b0:
         d0:f2:a7:35:95:a3:e4:f3:bb:39:75:ba:b1:50:68:73:9a:76:
         3e:3d:d6:d0:8b:8e:1d:b0:6c:c7:26:6b:f4:bb:49:36:4a:db:
         27:b7:13:57:7b:39:fa:c4:e5:2b:8e:b9:36:e3:44:31:a8:5c:
         35:56:f8:fa:60:34:c3:40:db:26:f9:53:f8:90:78:1a:2a:8e:
         02:93:d1:0f:0a:97:b5:56:60:03:88:b8:95:cd:12:9c:41:9a:
         c5:41:b0:36:0f:11:4c:0d:64:47:89:46:09:c5:ee:e0:96:8c:
         24:00:07:53:16:b6:a9:4a:55:a2:9e:72:6d:6d:01:92:41:1e:
         dc:c2:d0:d8:58:43:af:d5:54:51:a0:0f:0a:68:6c:23:2b:e0:
         0c:3f:8b:a7:22:2d:4a:bc:17:06:85:79:35:6b:59:4a:83:08:
         f7:61:bf:98:57:be:b0:30:03:4c:48:c4:02:30:51:b5:9c:8d:
         0b:87:27:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org