Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pcDMXunDcX02Uu8Q8fDiHf6S38U.roa
File:                     pcDMXunDcX02Uu8Q8fDiHf6S38U.roa (raw, json)
Hash identifier:          ufbFxcG40qsJIG22Rl8l4iYsXnXxZ84b4mIF7btzxOM=
Subject key identifier:   A5:C0:CC:5E:E9:C3:71:7D:36:52:EF:10:F1:F0:E2:1D:FE:92:DF:C5
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       018CC56E00C5FCEB0C0EED4C128C3F84F9C5
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pcDMXunDcX02Uu8Q8fDiHf6S38U.roa
Signing time:             Mon 01 Jan 2024 14:29:29 +0000
ROA not before:           Mon 01 Jan 2024 14:29:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     53356
IP address blocks:        193.37.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jan 2024 08:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:00:c5:fc:eb:0c:0e:ed:4c:12:8c:3f:84:f9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jan  1 14:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a5c0cc5ee9c3717d3652ef10f1f0e21dfe92dfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:61:2a:c1:cc:72:c0:d5:5c:5d:09:ea:17:
                    ef:df:61:d7:74:93:47:8d:9c:5f:89:2d:97:cd:92:
                    5a:5a:09:e1:a3:76:87:b0:ec:77:56:cb:b6:49:9c:
                    75:52:09:d5:e0:28:cf:c0:b2:ff:ea:b6:f2:6f:7c:
                    36:62:09:78:c7:05:a6:fc:53:9b:18:7c:89:c5:86:
                    8b:5d:66:22:48:73:f9:14:2b:9d:44:92:37:86:85:
                    f2:79:08:17:13:0e:b5:1a:28:f4:37:be:ac:4c:2b:
                    97:68:fc:3a:1d:bb:85:99:e0:fe:1c:2c:fd:01:c6:
                    be:15:8c:aa:14:95:8f:95:8e:8f:7a:31:fd:32:d0:
                    94:37:dd:91:52:3c:b2:c5:62:41:3d:cd:8e:ce:ef:
                    f5:61:4e:c2:01:c7:76:2d:cf:27:49:35:b6:9b:ed:
                    47:ca:5f:3c:b7:02:c4:c7:4f:d4:08:de:ea:c6:3a:
                    21:69:37:ee:c7:08:41:a3:1d:c5:4b:a0:24:5e:10:
                    9d:e8:63:22:d8:2d:7c:a3:a5:60:71:b8:51:0c:b3:
                    75:64:7c:d1:bf:2d:37:d7:a6:34:43:ec:fe:3f:e1:
                    8b:12:71:07:0b:28:8a:73:22:21:76:82:e0:b4:08:
                    f6:cb:7e:d0:b6:2d:5b:ac:c9:33:06:e4:22:cf:30:
                    90:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:CC:5E:E9:C3:71:7D:36:52:EF:10:F1:F0:E2:1D:FE:92:DF:C5
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/pcDMXunDcX02Uu8Q8fDiHf6S38U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:4a:51:96:d0:b9:41:2c:7c:d8:6a:14:2e:6f:e2:fa:55:
         31:e4:7e:ec:88:78:20:72:31:94:4c:03:5f:db:91:03:d4:82:
         42:84:73:2e:e8:4a:04:d4:85:76:36:59:0a:ab:32:e8:11:4f:
         b4:09:5b:73:83:4f:79:bd:e4:73:78:3f:3e:ee:dc:71:7c:3d:
         b3:ad:e9:84:77:b2:c9:d9:bf:c5:ab:45:51:91:1d:35:22:0f:
         a7:ea:29:fc:5a:bd:a6:6b:f4:4f:ae:f7:77:f4:5b:3a:2b:ce:
         c7:6d:0a:64:b3:ef:2a:2b:1a:e5:b4:88:bc:e5:de:2c:56:42:
         56:93:e2:69:b3:44:9a:3c:a2:fb:97:da:4b:08:9f:32:24:f8:
         7e:0d:46:bf:af:f4:70:f8:dc:04:9f:81:43:d0:01:61:55:3e:
         03:ac:d2:67:4a:6b:8f:ed:91:cb:b0:43:80:3f:37:06:0f:01:
         88:d4:c1:1b:68:de:e8:37:02:9c:9d:8d:11:a8:d6:b1:17:bc:
         e6:41:3b:77:8c:45:df:4f:7c:f5:75:71:b2:0f:e3:e2:0c:4d:
         00:16:d8:68:36:9a:ae:69:b7:4a:98:53:82:09:4b:80:5e:a2:
         ec:d6:74:cb:ed:8c:c1:ae:0a:af:b7:4e:46:57:db:9f:d6:92:
         eb:c8:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org