Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/1-ptUsHA_5CPetb5qcKYUsf7RY_A.roa
File:                     1-ptUsHA_5CPetb5qcKYUsf7RY_A.roa (raw, json)
Hash identifier:          Efmgcf5RYqwOcwZhiHduN1qb3hgs5kWHKWR5Qb10L8g=
Subject key identifier:   FA:9B:54:B0:70:3F:E4:23:DE:B5:BE:6A:70:A6:14:B1:FE:D1:63:F0
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       01856E14538D233B0293D496AB95859E6A1D
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/1-ptUsHA_5CPetb5qcKYUsf7RY_A.roa
Signing time:             Sun 01 Jan 2023 16:05:03 +0000
ROA not before:           Sun 01 Jan 2023 16:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208856
IP address blocks:        193.32.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:14:53:8d:23:3b:02:93:d4:96:ab:95:85:9e:6a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Jan  1 16:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa9b54b0703fe423deb5be6a70a614b1fed163f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:d4:23:02:7d:eb:d2:ed:45:41:2c:e9:b6:
                    e2:82:b7:42:97:c4:b8:dc:f5:c1:38:ca:22:a8:52:
                    36:71:8b:fc:4d:c4:8b:cb:69:4f:ca:19:aa:0b:94:
                    23:3c:20:a6:bc:c9:bf:37:17:20:d0:9d:7b:b4:d2:
                    0f:8a:1c:b4:60:d2:2b:92:3a:b1:2f:b1:e6:43:f2:
                    0a:1e:74:b1:be:f7:a0:c3:f3:ee:fc:fa:d0:0e:c1:
                    08:f5:bb:cb:ba:b9:24:bd:b7:9e:9c:55:ef:8a:c5:
                    5f:bf:38:ca:e8:f0:0d:82:cb:ad:6a:50:28:ee:4d:
                    2c:b7:71:b6:93:ef:28:e8:4d:f2:47:65:75:b1:13:
                    f2:15:22:59:1e:33:4f:2a:1d:26:c6:f9:7f:d4:79:
                    d4:df:2f:bd:a7:6f:37:3b:62:47:ca:3c:95:87:95:
                    fb:47:10:5b:30:27:73:18:4a:9b:32:c3:41:da:57:
                    a6:90:6f:80:bf:8c:15:01:74:62:83:81:3c:e2:00:
                    6d:2f:7c:a1:60:cd:2f:f8:96:60:a5:8a:c8:d6:a0:
                    60:bb:18:5c:04:79:35:f4:e9:d2:e4:bf:7a:5b:73:
                    9a:5f:04:72:3f:ad:47:6c:83:0b:14:e1:6a:79:33:
                    54:fa:bc:3b:1f:67:85:56:72:d6:f3:6e:9f:99:30:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:54:B0:70:3F:E4:23:DE:B5:BE:6A:70:A6:14:B1:FE:D1:63:F0
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/1-ptUsHA_5CPetb5qcKYUsf7RY_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:11:dc:b7:cf:5d:44:33:54:83:e0:fb:a7:04:47:4b:3b:b8:
         ac:88:8a:24:6f:52:57:b2:13:6d:05:f1:a8:73:1b:b0:77:fc:
         81:5b:df:42:ba:95:db:8c:4a:03:6d:56:f6:28:0d:64:b2:e1:
         b5:96:01:36:8f:f4:2f:7d:cc:4f:61:4f:cb:62:7a:ba:6b:f3:
         a1:e5:dc:41:ed:07:ab:ff:29:26:80:e0:44:7e:82:3a:36:b1:
         2d:8d:ea:f1:4a:76:36:9c:d8:ab:9f:fd:ec:79:23:23:95:5e:
         cf:5a:09:44:49:ac:e0:ab:f0:5c:6a:32:99:18:1c:a6:d7:66:
         43:43:74:68:11:5c:05:7f:bd:d1:5d:3b:93:c4:02:c7:41:8a:
         f4:b6:ba:6d:d5:9a:f7:93:0c:71:03:d6:07:66:12:21:3c:d0:
         cb:48:d8:91:9c:77:b6:86:72:61:55:e7:0d:d0:7a:9b:49:80:
         b6:3a:16:eb:39:b6:9b:bc:2e:11:c2:a5:45:8a:b3:0e:c3:4d:
         05:0e:7d:8e:78:ef:61:45:d6:3e:06:d9:09:9d:7a:94:dd:bb:
         bb:81:64:c2:ad:bb:f5:b1:52:cf:28:22:f8:4b:75:7f:95:d6:
         5c:f3:83:fd:4f:8a:35:e6:ab:bf:45:4c:4e:1d:59:81:72:f5:
         d9:c6:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:04 2024 by rpki-client on console-ams.rpki-client.org