Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa
File:                     8DBBytEPCJCY3NooUxW3HLU69_4.roa (raw, json)
Hash identifier:          UsX2uEGCeYP8wwRg47zt2oxFrJNIZelBjNU9bo0WJLI=
Subject key identifier:   F0:30:41:CA:D1:0F:08:90:98:DC:DA:28:53:15:B7:1C:B5:3A:F7:FE
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       018C82CD5E049FCCFDDA9032B4F7D5B6C22D
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa
Signing time:             Tue 19 Dec 2023 15:59:06 +0000
ROA not before:           Tue 19 Dec 2023 15:59:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50263
IP address blocks:        193.57.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:82:cd:5e:04:9f:cc:fd:da:90:32:b4:f7:d5:b6:c2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Dec 19 15:59:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f03041cad10f089098dcda285315b71cb53af7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:7b:60:d0:02:87:71:88:66:d9:09:0a:0c:
                    22:f2:a9:1f:97:eb:b4:2b:ea:81:ca:e6:63:fc:f8:
                    72:23:ee:c6:c9:e7:3a:59:8d:d7:ec:c6:dc:62:81:
                    e2:24:9e:8e:06:d4:eb:c8:5e:cb:88:e5:63:03:57:
                    04:e7:59:d0:97:f8:b7:eb:6c:52:09:b4:48:89:d8:
                    a3:62:c0:ef:e5:ef:fb:06:c2:22:7c:f2:0e:83:cf:
                    1d:1e:f6:09:38:40:30:c3:c5:a5:02:ab:7d:ef:55:
                    53:44:db:43:58:d6:f7:dd:3f:fe:20:18:76:5f:2b:
                    8c:74:c5:6e:bf:8f:25:35:5f:ca:62:b6:ab:f6:9b:
                    65:34:72:3e:99:4f:5e:41:5c:da:f2:38:a5:e9:35:
                    80:90:b9:79:e4:3f:f4:0e:f9:aa:3b:3e:d2:3c:85:
                    6d:fe:3a:c2:18:0e:f0:44:9b:e1:88:de:d0:3b:b0:
                    05:42:ef:92:10:c7:67:60:cc:fc:81:b7:fe:f9:0c:
                    ca:33:3e:2a:04:e9:15:70:f5:c9:44:64:7a:0e:27:
                    18:a9:2b:d1:d5:dd:40:bf:f4:e3:fc:e2:df:54:c7:
                    76:ee:93:f9:8b:3c:a5:15:1b:14:3e:fb:19:4f:19:
                    a5:4b:aa:a0:45:cf:9e:3b:e8:41:f1:cc:87:5a:49:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:41:CA:D1:0F:08:90:98:DC:DA:28:53:15:B7:1C:B5:3A:F7:FE
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/8DBBytEPCJCY3NooUxW3HLU69_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:e6:de:f2:98:4e:71:11:53:82:9e:3c:89:e3:55:6f:7c:
         1d:54:1b:8b:2b:23:a1:a1:e8:7a:5a:0b:bc:1b:92:84:5b:1f:
         5c:b9:b8:c0:f3:3a:57:f9:19:c8:2a:ba:f9:ab:16:fc:7a:ff:
         02:0b:4b:e9:ff:fb:b3:5c:6b:0f:e0:3a:2b:7f:fb:dd:3c:ef:
         60:1a:e4:b8:32:cd:2b:fb:5e:9f:98:ad:e2:8e:ef:cf:7f:2d:
         0c:a3:24:37:55:ca:dd:55:37:ca:59:98:63:2c:e2:10:c5:6c:
         0b:50:e3:32:e1:3d:01:58:2b:cf:8f:f8:55:fd:64:74:98:dc:
         4e:40:72:29:04:15:58:c2:db:60:07:c1:d6:67:09:d1:91:9c:
         ca:73:2c:0c:cf:5c:e6:e3:45:dc:4e:33:77:56:fc:fb:23:a3:
         01:6c:7d:da:18:37:bd:98:0f:75:2c:d2:46:9c:10:bb:42:60:
         2b:1b:32:35:a3:ca:03:1a:19:ca:c3:02:c0:3e:02:9f:53:5c:
         31:1a:91:4e:bf:7c:92:33:5e:35:96:61:c4:cc:b9:a9:2d:c9:
         83:21:5a:13:45:98:f0:d3:68:15:01:d6:b8:fc:72:1f:17:f5:
         01:4f:b9:28:c3:76:23:f9:d5:ae:52:53:84:da:f6:5a:03:27:
         90:29:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org