Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/5Kjs24yZvV-HWKMq02gvBp3cGeI.roa
File:                     5Kjs24yZvV-HWKMq02gvBp3cGeI.roa (raw, json)
Hash identifier:          m/P4/iM0mWw2T8F3peuMf2wGzSWLAwxva43BOdq9dEQ=
Subject key identifier:   E4:A8:EC:DB:8C:99:BD:5F:87:58:A3:2A:D3:68:2F:06:9D:DC:19:E2
Certificate issuer:       /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial:       0189BBBF85701C52759328226BCEBA2D7690
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/5Kjs24yZvV-HWKMq02gvBp3cGeI.roa
Signing time:             Thu 03 Aug 2023 14:13:58 +0000
ROA not before:           Thu 03 Aug 2023 14:13:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197644
IP address blocks:        193.26.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 07:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:bb:bf:85:70:1c:52:75:93:28:22:6b:ce:ba:2d:76:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
        Validity
            Not Before: Aug  3 14:13:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4a8ecdb8c99bd5f8758a32ad3682f069ddc19e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:78:d4:ca:6e:21:27:1e:8c:ef:ee:2c:fb:
                    30:cb:93:43:e5:6d:a8:43:78:34:14:65:51:3f:b4:
                    3c:65:e3:37:0a:08:ed:ad:0e:1a:64:d8:58:e8:8b:
                    78:64:ef:71:74:41:5f:31:35:05:3c:ce:b9:3c:0d:
                    f9:87:f5:53:6e:64:cf:0e:91:a3:d0:97:28:f4:21:
                    f3:9b:6f:a4:08:fd:12:44:e8:19:1b:25:b7:64:2f:
                    4f:2e:be:0d:c4:b6:cf:0d:0a:c1:fe:26:b9:0b:2e:
                    da:20:04:31:75:18:19:d5:45:32:ce:90:72:71:38:
                    bc:92:3e:11:76:d8:de:a2:66:ab:e5:3f:ab:0f:aa:
                    fb:b9:ef:40:37:f7:be:49:d6:76:f7:e3:75:6d:dd:
                    8c:ac:35:d0:3e:01:f2:84:e7:fa:73:0c:a3:af:9f:
                    de:a5:35:37:ba:5b:35:6c:cd:70:06:b6:8b:63:88:
                    61:69:5b:3d:5b:82:b3:0b:9d:73:6c:96:06:3d:5f:
                    f2:08:c7:30:8a:5d:88:a0:0e:b6:7e:9d:f5:1e:94:
                    61:cc:f9:3f:70:52:d5:eb:56:81:16:39:b6:bd:14:
                    0a:74:8f:7b:c1:ad:5d:d7:69:b2:e0:af:8e:ad:da:
                    45:93:66:a4:18:36:22:13:66:4c:dd:90:0f:a6:6e:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:EC:DB:8C:99:BD:5F:87:58:A3:2A:D3:68:2F:06:9D:DC:19:E2
            X509v3 Authority Key Identifier:
                keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/5Kjs24yZvV-HWKMq02gvBp3cGeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a4:95:6a:52:61:da:2e:17:f5:ae:9e:d3:06:36:0b:f3:9c:
         0f:ad:ba:a0:1e:71:b6:e9:7b:1a:0e:6d:17:dd:cb:e1:5b:c2:
         ca:b4:9b:09:ff:a7:6b:11:58:ee:01:4b:e9:de:f5:18:f4:cb:
         c5:85:48:52:14:a7:ca:70:1a:4d:d6:fa:07:78:a9:d3:71:7a:
         88:b4:b2:fd:cf:80:64:93:72:77:ad:5b:09:97:b4:62:58:82:
         bb:c3:44:75:4a:67:c5:5d:c9:c7:0f:04:d6:e7:5e:c6:df:9d:
         e2:a1:e7:aa:77:dc:35:84:8c:6c:d6:33:83:34:8e:60:ca:2c:
         c5:7d:d1:fe:b9:c7:e5:e6:7b:60:61:52:59:49:9f:56:43:aa:
         2f:e9:4d:27:6f:6b:9a:47:ef:b6:ea:8d:a3:07:6c:ad:81:b1:
         02:ff:03:5e:f4:12:80:db:1c:4c:8b:f1:47:33:d4:0a:ed:11:
         cf:15:c5:53:12:21:ae:ed:09:23:4c:8f:1e:ed:c7:ac:c5:20:
         23:1d:df:58:31:f6:a3:5a:06:96:48:6c:e1:f3:bc:f1:af:7e:
         8c:50:76:39:80:4a:37:be:08:02:9b:7b:8f:76:b0:71:7e:eb:
         fc:1c:71:b5:a8:34:ed:f8:8f:8b:1e:50:0a:c9:8f:90:37:7e:
         5b:11:ed:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:55 2024 by rpki-client on console-fra.rpki-client.org