Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/mCvcf0Guqi91x9KXm6xC0xdm4Hs.roa
File:                     mCvcf0Guqi91x9KXm6xC0xdm4Hs.roa (raw, json)
Hash identifier:          y7mEMipYCxaRnaRydn4HClUaFgqoq9JR7g2f3TNMu9s=
Subject key identifier:   98:2B:DC:7F:41:AE:AA:2F:75:C7:D2:97:9B:AC:42:D3:17:66:E0:7B
Certificate issuer:       /CN=09633ef6550a82af315146a942cf3559557c1fe2
Certificate serial:       01857015454FBD771F3610DABBA9FEAF258F
Authority key identifier: 09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/mCvcf0Guqi91x9KXm6xC0xdm4Hs.roa
Signing time:             Mon 02 Jan 2023 01:25:20 +0000
ROA not before:           Mon 02 Jan 2023 01:25:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20559
IP address blocks:        193.105.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:15:45:4f:bd:77:1f:36:10:da:bb:a9:fe:af:25:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09633ef6550a82af315146a942cf3559557c1fe2
        Validity
            Not Before: Jan  2 01:25:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=982bdc7f41aeaa2f75c7d2979bac42d31766e07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:fa:25:65:f2:08:35:26:a2:04:73:6a:e8:
                    68:66:84:28:14:fc:72:e6:a7:54:70:d6:e3:d1:d5:
                    c5:d4:11:d3:a7:7d:33:a7:ed:a6:7c:f7:cd:85:ba:
                    1d:85:c5:4c:8d:6e:70:fa:03:34:76:cb:4b:ab:59:
                    e5:f6:d6:1b:49:26:1f:9f:f3:f1:37:38:b6:5d:c5:
                    85:39:8f:ac:f2:f2:fe:dd:35:d6:0a:4a:ff:19:a6:
                    27:91:32:bf:f7:e4:db:06:27:62:45:10:e3:79:03:
                    21:96:52:70:25:2d:4e:6f:72:5c:23:3c:88:94:a8:
                    69:5b:97:2c:37:06:40:34:8c:d6:9e:c4:c4:2a:90:
                    3b:d6:af:2f:4c:8e:e5:94:9b:2e:60:ec:d0:f5:13:
                    03:d8:4b:4b:d3:ab:3a:29:c4:ed:46:25:d1:e5:2f:
                    4d:8d:f1:14:f3:44:5a:61:82:88:11:f4:8b:14:4a:
                    84:89:4d:16:84:08:aa:03:54:86:59:47:8d:38:73:
                    d5:fe:db:26:8b:10:60:08:0e:06:82:71:69:25:be:
                    cf:d2:b8:92:fa:8f:6d:9d:88:1e:0d:3b:f9:6a:7c:
                    02:60:ee:67:1e:33:78:b3:82:0e:4b:ba:77:6c:b1:
                    5e:cf:de:1f:07:a8:14:17:08:cf:29:ee:f1:a1:31:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:DC:7F:41:AE:AA:2F:75:C7:D2:97:9B:AC:42:D3:17:66:E0:7B
            X509v3 Authority Key Identifier:
                keyid:09:63:3E:F6:55:0A:82:AF:31:51:46:A9:42:CF:35:59:55:7C:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWM-9lUKgq8xUUapQs81WVV8H-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/mCvcf0Guqi91x9KXm6xC0xdm4Hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/34d548-e02f-4f82-baeb-bb1df1b3d32d/1/CWM-9lUKgq8xUUapQs81WVV8H-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:20:13:61:3f:27:b4:50:1f:30:1e:5c:02:b3:28:9f:1a:
         2d:48:e9:42:e0:0c:a0:12:7b:b5:b0:dd:43:13:fc:08:70:38:
         84:6c:2f:be:cc:ab:63:a6:05:28:31:db:b7:4b:a3:9b:37:93:
         59:87:e6:76:8a:ce:6b:08:f7:41:fe:cb:a3:b5:40:3f:54:b7:
         35:f6:fa:a2:a9:0a:77:9b:f1:20:4d:96:a7:dd:27:f8:57:b6:
         b8:9e:04:e7:48:4c:4a:1f:c2:6a:ea:51:2d:4b:35:35:96:86:
         b8:34:cf:50:9d:a2:27:49:b8:cf:85:28:f3:39:bc:fd:07:b6:
         02:18:d6:1a:e8:73:65:17:01:bd:0c:4c:92:b5:98:92:c1:5d:
         7e:4b:6f:98:bb:1c:16:66:bc:df:9d:83:30:87:4b:7b:2b:10:
         d3:98:65:fb:ca:9c:40:9e:36:dd:17:7a:15:09:5a:b9:f0:31:
         df:ea:47:2a:0a:57:cb:f0:ea:e1:0c:2a:ec:b3:31:52:fa:5d:
         5a:10:c1:84:e3:14:e5:9b:9c:67:13:d1:fc:66:ec:3b:3b:6c:
         b2:88:c0:7a:12:66:04:1e:8d:74:a9:05:5b:b9:30:f2:86:8a:
         df:88:ae:7c:74:c0:db:1a:0f:e0:43:04:11:9d:9e:be:c6:34:
         6b:fc:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:43 2024 by rpki-client on console-ams.rpki-client.org