Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/injGQSwHlyKizeF0rms8nFpufHs.roa
File:                     injGQSwHlyKizeF0rms8nFpufHs.roa (raw, json)
Hash identifier:          UfDw9DVS97Ly7sdKL6kryqVIOSTIESzH8QMD50T99xI=
Subject key identifier:   8A:78:C6:41:2C:07:97:22:A2:CD:E1:74:AE:6B:3C:9C:5A:6E:7C:7B
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       018CEA2FF64B0A9514F1A859F5DBFB3ECD16
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/injGQSwHlyKizeF0rms8nFpufHs.roa
Signing time:             Mon 08 Jan 2024 17:47:40 +0000
ROA not before:           Mon 08 Jan 2024 17:47:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208287
IP address blocks:        193.37.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Feb 2024 14:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ea:2f:f6:4b:0a:95:14:f1:a8:59:f5:db:fb:3e:cd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jan  8 17:47:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8a78c6412c079722a2cde174ae6b3c9c5a6e7c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:71:9c:59:0c:6f:47:a7:f2:26:3e:0a:3d:
                    85:ad:17:a5:53:fd:fc:39:e6:ee:9d:7c:3e:60:00:
                    ce:f6:ad:98:17:90:bc:91:15:48:84:bd:74:30:cc:
                    23:df:d6:a3:8d:0a:7b:d2:bb:de:2c:70:69:de:68:
                    ed:4e:74:02:5f:65:2e:ec:b9:fa:36:a6:fb:b3:86:
                    91:d9:8d:f9:65:3f:43:ea:43:92:53:d2:36:28:84:
                    9c:fa:2c:34:2d:71:a1:b9:f4:1d:5d:0e:16:68:40:
                    3e:70:17:3f:fb:10:98:00:ef:62:75:c8:73:49:dc:
                    be:bf:8d:86:1a:5a:64:bb:bd:c0:b9:6c:1f:9f:70:
                    41:d1:73:e2:bc:91:d0:c1:3d:44:d0:1d:9b:0c:da:
                    bd:b3:f9:a1:61:b9:4b:e2:a6:0f:56:c0:47:0f:3c:
                    29:a4:cf:b7:1f:fe:a8:14:5f:81:3c:86:ed:7f:fa:
                    ea:6d:6b:a0:ed:49:eb:33:2e:5d:e6:c0:ad:ff:e1:
                    8f:db:95:b7:87:d5:e7:3d:a0:ab:d9:3f:90:eb:e7:
                    99:9a:73:55:02:53:be:ef:9e:84:fc:1c:1f:be:30:
                    6d:fb:55:1a:d1:c5:59:ae:74:c6:4b:1b:d0:f7:cc:
                    fc:69:52:24:86:51:35:d0:49:7c:d5:c4:70:92:c9:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:78:C6:41:2C:07:97:22:A2:CD:E1:74:AE:6B:3C:9C:5A:6E:7C:7B
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/injGQSwHlyKizeF0rms8nFpufHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d0:f9:7e:a7:71:15:50:89:5d:dd:0c:7b:3a:0a:c9:bc:66:
         62:3d:9e:7b:f3:88:6f:b2:b7:e5:1e:e5:d8:99:68:e3:c5:12:
         b2:41:58:18:d9:e4:76:9e:42:71:09:fd:71:29:df:a1:3c:a1:
         eb:ae:b8:05:b0:36:c7:0d:3c:80:20:04:05:96:97:d2:3b:49:
         08:4a:24:6b:14:bc:70:f5:32:df:84:f9:a2:fb:80:80:64:db:
         fc:22:51:c5:21:01:60:62:4c:05:a6:a1:6c:65:25:be:ac:5d:
         f4:8e:47:d5:b4:3c:7c:df:4e:34:d5:4f:9b:14:90:73:47:4a:
         d0:3c:f1:14:04:b6:63:9b:d2:f8:77:df:5b:4d:a8:1e:6d:21:
         6a:62:b2:f8:e0:31:cf:34:09:87:03:a6:2e:58:4b:26:a4:1d:
         c5:d8:5e:27:41:eb:41:19:cd:8e:21:c2:ad:f4:76:60:ec:56:
         af:5d:28:76:c7:13:47:09:e5:6d:8f:d4:a9:cf:e4:29:de:06:
         96:01:c7:c0:5e:b4:b1:ba:b4:71:c9:0e:50:f7:a9:28:c7:2b:
         34:99:3b:77:b2:a7:e5:14:0f:53:09:98:ab:43:3a:24:d8:24:
         ea:3e:c3:9f:19:e5:98:86:e6:40:78:6c:9f:bd:79:51:93:8c:
         23:e8:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org