Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ewZvf_Gy-dA5fT5faFXhUZoLG6o.roa
File:                     ewZvf_Gy-dA5fT5faFXhUZoLG6o.roa (raw, json)
Hash identifier:          o2fbw6+Q6sdeEUDjOG4GFgh9ZBLM1zBaqQljUGIGQfc=
Subject key identifier:   7B:06:6F:7F:F1:B2:F9:D0:39:7D:3E:5F:68:55:E1:51:9A:0B:1B:AA
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       01890FF763DAD8DE6B0A48ED7183979E2588
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ewZvf_Gy-dA5fT5faFXhUZoLG6o.roa
Signing time:             Sat 01 Jul 2023 05:40:18 +0000
ROA not before:           Sat 01 Jul 2023 05:40:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.37.196.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Oct 2023 11:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0f:f7:63:da:d8:de:6b:0a:48:ed:71:83:97:9e:25:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jul  1 05:40:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b066f7ff1b2f9d0397d3e5f6855e1519a0b1baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d8:4b:46:27:fe:7d:4f:8b:36:54:41:00:3a:
                    bc:0a:65:e6:83:96:8c:86:86:be:b3:34:d9:d3:ae:
                    83:dd:33:df:fd:13:e5:b4:62:ea:46:62:c4:ae:c6:
                    49:e0:50:6f:07:ee:66:8a:e2:ea:88:68:a0:fc:c5:
                    3c:71:21:8d:b1:da:b0:9e:9d:6a:31:33:a9:55:ac:
                    30:8d:eb:b3:8e:c3:07:ee:48:fe:72:7b:0e:96:2c:
                    0c:8d:ab:62:c2:3a:d3:99:09:86:fa:49:9f:be:23:
                    f0:ea:79:89:59:d0:f9:34:61:96:ab:59:21:3e:e4:
                    95:5f:d0:77:5e:43:c3:af:07:c2:0d:d6:db:dd:1e:
                    e3:4a:9c:f2:79:90:a9:3b:5a:ba:a1:b0:9d:fa:2e:
                    77:b5:26:f7:65:6e:6b:07:6a:70:75:92:cb:77:81:
                    ee:50:5d:ef:6f:c8:67:76:80:66:b3:eb:9a:64:ff:
                    ba:aa:db:d5:b9:de:bb:80:2b:7e:a7:82:59:61:99:
                    78:20:d3:ea:bd:6c:d9:e0:f9:85:0c:90:b0:75:6f:
                    e7:eb:8c:d7:e9:64:ef:0c:ea:c7:7f:8a:a8:58:46:
                    88:b3:3b:39:22:45:84:a2:2c:8c:9f:de:3f:a0:13:
                    1e:77:59:1d:ca:6a:05:7a:5e:2e:68:da:30:89:bd:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:06:6F:7F:F1:B2:F9:D0:39:7D:3E:5F:68:55:E1:51:9A:0B:1B:AA
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/ewZvf_Gy-dA5fT5faFXhUZoLG6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:42:9e:6a:88:bd:0a:18:fa:56:3a:6f:51:1d:f7:f1:d2:
         12:7d:ae:89:f7:dd:ac:63:11:18:82:97:85:5f:ce:ba:9c:80:
         90:57:74:59:72:51:e7:9a:8d:f7:81:05:21:ca:9d:74:8a:f1:
         f0:a5:80:af:8c:9c:44:eb:3d:b1:8b:7c:b5:b7:5a:22:66:ca:
         43:bf:f6:04:ab:05:c2:2d:a9:23:7b:2e:59:dc:e1:7c:57:55:
         8a:cb:37:59:08:46:1d:9b:93:55:53:6e:7c:a9:ce:27:75:df:
         81:3d:22:64:3e:6f:79:84:95:83:96:53:85:50:87:42:45:02:
         1e:9a:4d:80:7e:b9:3d:40:d2:cc:94:bc:6c:89:d8:ed:39:1b:
         1a:35:bc:0e:d3:66:aa:66:8f:d0:69:9e:3a:6d:06:8e:7f:b2:
         38:c8:e0:7a:9c:fb:70:39:be:5b:b3:e0:74:90:41:6b:b2:e6:
         3e:bf:32:9b:aa:73:63:9a:32:11:cb:3b:35:cb:b6:5d:c9:9a:
         4e:47:2b:27:ef:82:59:2e:e7:36:5b:89:6f:db:a0:a1:c4:46:
         c5:bc:2a:8e:c6:64:0e:ef:22:e5:fb:bc:44:a0:04:5a:11:2f:
         5b:76:e6:bc:a2:2f:67:5e:dc:ae:c3:77:c8:ce:5f:28:5f:3f:
         64:a4:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org