Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/R7B6AQ1HiXYyExuk6JS_Y-gLQwA.roa
File:                     R7B6AQ1HiXYyExuk6JS_Y-gLQwA.roa (raw, json)
Hash identifier:          hN8kTLb/hhXtrjwKixFc6HmFyg1jEoYPO/9sFkKgCfk=
Subject key identifier:   47:B0:7A:01:0D:47:89:76:32:13:1B:A4:E8:94:BF:63:E8:0B:43:00
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       018844D931BE89089AD5EEBDAF56878CCD76
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/R7B6AQ1HiXYyExuk6JS_Y-gLQwA.roa
Signing time:             Mon 22 May 2023 19:04:24 +0000
ROA not before:           Mon 22 May 2023 19:04:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60812
IP address blocks:        193.57.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:44:d9:31:be:89:08:9a:d5:ee:bd:af:56:87:8c:cd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: May 22 19:04:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47b07a010d47897632131ba4e894bf63e80b4300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:5e:92:13:49:1b:5a:a1:09:b6:5f:46:1c:
                    ab:79:e7:1d:63:11:44:e3:36:dd:f3:e9:c4:99:1b:
                    c7:d4:e9:22:cd:7e:e3:5e:ea:02:f3:61:4a:d8:85:
                    57:0d:17:1b:b6:ae:78:65:bb:8f:96:7b:10:5c:3d:
                    03:87:f2:3d:dd:9b:93:d9:24:1a:61:48:ba:7c:6b:
                    0e:2d:8c:7d:39:c2:8a:c7:9c:25:0f:e1:4e:6b:f6:
                    1d:8d:e5:45:44:ae:b1:74:64:d0:d0:dc:b2:58:0a:
                    27:4a:19:cc:22:f9:fd:9e:e4:88:9d:37:ef:2b:8c:
                    bd:08:54:c7:f4:eb:e5:b1:e9:bd:4c:3c:ac:a4:5b:
                    08:eb:7f:60:f6:6c:e6:61:eb:5d:cc:02:bd:76:c4:
                    20:c1:80:25:52:6a:42:74:8a:32:79:b4:24:a3:b9:
                    8c:80:18:42:24:94:a8:1e:1f:46:f8:3b:d1:df:74:
                    56:30:b4:ad:14:d8:30:eb:f1:34:b7:7a:d8:be:47:
                    87:ed:89:fd:6b:af:c7:64:7b:52:07:24:47:33:eb:
                    ed:0c:8e:86:60:88:43:1d:7e:04:d5:c0:e6:55:3f:
                    d0:64:d5:1f:18:6a:17:63:b2:2d:1a:99:59:90:0e:
                    45:94:b1:a0:0b:07:39:f5:9e:38:27:69:c8:82:ed:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:7A:01:0D:47:89:76:32:13:1B:A4:E8:94:BF:63:E8:0B:43:00
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/R7B6AQ1HiXYyExuk6JS_Y-gLQwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:09:7c:b0:48:81:09:a9:45:16:d8:6a:c4:14:2b:15:13:
         57:4e:df:89:f9:3a:54:35:8d:84:d4:2e:39:b3:9d:f0:fe:2c:
         af:78:4f:07:69:95:de:40:71:8a:7b:10:b4:33:e2:8a:fd:48:
         1e:a7:53:f4:4b:8e:96:9d:8f:60:11:42:90:87:10:c7:c8:ea:
         58:e3:d7:6a:f8:5c:78:cc:6d:c2:4f:ce:4d:3a:ac:f4:c7:61:
         0b:b9:49:1a:c0:13:ce:65:9d:4b:99:65:a4:ed:c9:91:14:8c:
         e2:83:e6:53:c2:ac:c7:e1:6b:2b:6a:18:b2:5b:77:3e:7b:4d:
         a3:28:51:ea:4b:81:6b:23:2f:0a:af:6a:17:84:41:23:4f:61:
         eb:ac:13:0a:5a:a5:45:40:78:81:11:87:a4:46:7b:cf:fc:b8:
         c6:65:f3:03:33:cc:d9:47:75:3d:a4:83:a0:8b:1f:37:cf:08:
         c4:85:e0:38:9e:b6:dc:e1:6b:42:3f:4d:ea:ad:aa:ac:44:7a:
         97:85:ca:bf:e4:61:b2:59:c5:96:30:78:a8:7c:36:e8:d5:0a:
         78:69:8f:07:60:9d:15:22:8c:af:07:1e:d3:39:1e:3d:fe:4b:
         c4:81:3c:22:7e:2e:aa:f1:c3:05:ed:17:ea:8f:05:d4:e8:e7:
         65:4c:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:27 2024 by rpki-client on console-ams.rpki-client.org