Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/adbZbx1oqA5q_mLH3kMWakHzl6Q.roa
File:                     adbZbx1oqA5q_mLH3kMWakHzl6Q.roa (raw, json)
Hash identifier:          0qB3gYWtxDaOYdgM/hkDRluSOLbhstDSLFHX2dSiLKs=
Subject key identifier:   69:D6:D9:6F:1D:68:A8:0E:6A:FE:62:C7:DE:43:16:6A:41:F3:97:A4
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       018C1AF918DC572B33A41164A140D50C52EE
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/adbZbx1oqA5q_mLH3kMWakHzl6Q.roa
Signing time:             Wed 29 Nov 2023 12:06:21 +0000
ROA not before:           Wed 29 Nov 2023 12:06:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     53356
IP address blocks:        193.37.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1a:f9:18:dc:57:2b:33:a4:11:64:a1:40:d5:0c:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Nov 29 12:06:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69d6d96f1d68a80e6afe62c7de43166a41f397a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f8:e5:85:3b:7b:f8:5a:5f:c2:9f:36:e9:7b:
                    a5:e4:b1:ad:84:d5:e6:79:93:32:4c:58:02:89:88:
                    7c:f9:85:3c:44:3c:a7:ba:05:6c:03:7c:7b:a0:a0:
                    7b:75:63:b5:0d:67:66:29:c5:e2:23:ec:13:0f:f2:
                    fa:c5:c8:b4:d5:e1:01:d6:21:c2:72:54:11:d6:d7:
                    1b:cf:e7:2d:f7:76:20:db:c6:41:da:22:21:e6:9b:
                    4c:4b:f9:9a:e8:90:a0:4d:6a:a5:f0:49:a2:ca:ee:
                    95:3b:00:97:6b:ed:ee:2e:89:c5:a2:25:98:bb:69:
                    c0:cc:68:ae:c5:02:c1:12:4b:cc:47:99:2b:58:c7:
                    9b:ab:5d:c3:99:ad:98:e9:40:d0:6f:ee:1d:13:2c:
                    cb:dd:ce:98:0b:05:a4:e8:63:8e:c5:df:a4:a6:54:
                    19:e4:0e:ca:43:91:26:8e:28:b8:f8:cc:6f:10:b3:
                    93:33:90:2b:b6:3c:69:bd:4f:20:86:1a:0d:3e:9c:
                    f7:75:d8:20:53:ed:a8:be:ec:1f:5c:a8:ae:57:fb:
                    29:60:d7:b8:70:04:73:6e:80:22:a2:27:83:ea:a9:
                    00:5a:a4:18:d2:a5:69:d4:3a:e6:10:6e:ba:88:5e:
                    33:86:49:c1:ba:b3:6e:ff:eb:6a:b2:7e:18:6f:81:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:D9:6F:1D:68:A8:0E:6A:FE:62:C7:DE:43:16:6A:41:F3:97:A4
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/adbZbx1oqA5q_mLH3kMWakHzl6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:83:ba:7f:f7:b7:44:fa:eb:e2:7d:4c:1f:a4:52:89:09:
         c4:ab:6d:66:75:ac:31:14:c8:54:99:34:ab:b6:26:33:8c:ac:
         53:33:d8:08:f9:4c:79:0a:d6:48:b6:9e:e1:13:ee:59:d2:7b:
         4f:18:08:02:69:30:cf:d3:b2:bf:8b:51:e1:42:8d:1c:06:b2:
         d3:fc:63:e0:95:56:98:17:9f:e2:bb:b1:58:d9:21:ab:a2:35:
         02:c3:55:1c:05:1d:f8:e1:a8:8d:af:a3:49:b9:f9:ff:75:5a:
         98:a7:1b:c6:be:19:06:d7:95:1f:36:6f:27:05:5d:1c:e1:dc:
         1c:3d:56:5b:45:7e:c8:94:c9:30:8b:c0:9b:68:f0:f2:86:f5:
         e0:48:20:03:0e:df:c8:9a:3f:8c:6b:b8:ca:62:26:b3:5b:6c:
         8d:04:44:49:bf:9b:87:7f:6b:2b:52:73:e1:8b:a9:96:26:a4:
         c0:ba:72:02:37:8e:d1:2a:29:16:46:c4:b8:e5:5e:01:54:ec:
         54:c2:b1:7d:55:37:80:75:c4:b0:d0:6e:45:bf:0e:a3:32:16:
         f8:16:64:be:73:4a:04:f1:03:39:a6:96:a1:0a:8c:cc:0a:b2:
         9f:27:e0:0c:61:c2:b6:4e:6f:39:4b:91:d7:c2:95:2b:fe:d7:
         00:4c:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org