Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/pBjrhAEc_Wy26sSiFHPI-Vs59bA.roa
File:                     pBjrhAEc_Wy26sSiFHPI-Vs59bA.roa (raw, json)
Hash identifier:          L3Op1Ifso8ZnuDmMTMLXed26qFdx6/C4+gzZHGnftYY=
Subject key identifier:   A4:18:EB:84:01:1C:FD:6C:B6:EA:C4:A2:14:73:C8:F9:5B:39:F5:B0
Certificate issuer:       /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial:       01856C13711A8EDF503837D4A3AD7A7359AB
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/pBjrhAEc_Wy26sSiFHPI-Vs59bA.roa
Signing time:             Sun 01 Jan 2023 06:44:51 +0000
ROA not before:           Sun 01 Jan 2023 06:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203735
IP address blocks:        193.219.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 May 2023 12:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:71:1a:8e:df:50:38:37:d4:a3:ad:7a:73:59:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
        Validity
            Not Before: Jan  1 06:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a418eb84011cfd6cb6eac4a21473c8f95b39f5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:e3:e1:5d:00:e4:9f:7a:b5:10:2a:24:78:
                    9e:82:77:9d:31:d8:66:11:ac:89:ab:b5:e6:7e:01:
                    07:91:20:eb:b4:84:1d:23:98:94:4b:aa:3b:19:fe:
                    71:87:09:09:cc:b8:f5:77:c7:eb:77:c7:c5:b9:d9:
                    61:13:d0:9d:7d:90:ca:92:fe:42:ae:b3:86:c4:54:
                    5a:30:28:de:3f:1e:94:8d:f9:91:97:0f:1b:06:69:
                    cf:47:40:23:21:c5:63:22:f5:8f:9c:ce:53:9f:89:
                    8c:35:20:8f:36:2d:81:1d:14:87:5f:81:52:6c:60:
                    a0:82:1c:95:35:31:b8:04:6c:ed:ff:c5:ff:f2:d9:
                    89:68:d4:ab:28:3d:2c:44:f4:48:c2:28:d0:e9:0a:
                    6f:23:8a:59:2b:2e:b4:85:a2:f2:73:f6:fe:5d:95:
                    88:48:ce:1c:8d:9f:ce:6b:5b:31:a9:c8:bb:ec:de:
                    f4:65:54:03:e4:d3:c2:a9:bd:4d:f2:8a:57:1c:f1:
                    e3:fb:18:5d:b5:2c:f7:8e:1d:36:f4:60:1e:8c:60:
                    02:07:63:0e:21:dc:f4:1c:b0:c2:80:08:e0:a2:b9:
                    89:9a:9e:1d:24:23:3c:be:ae:3a:44:e6:2e:fb:9f:
                    68:bb:91:2e:56:1b:03:e8:49:72:f9:ff:51:e6:19:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:EB:84:01:1C:FD:6C:B6:EA:C4:A2:14:73:C8:F9:5B:39:F5:B0
            X509v3 Authority Key Identifier:
                keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/pBjrhAEc_Wy26sSiFHPI-Vs59bA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:8a:cd:f5:45:eb:b0:05:23:06:39:4f:df:98:1b:34:06:
         8c:5d:be:af:38:53:e5:d9:a8:07:2d:a7:be:07:a0:cf:a4:26:
         e2:ae:90:d0:de:5b:4b:3d:5e:98:c2:26:f0:30:90:49:7b:86:
         aa:61:93:4f:a6:2e:b6:24:e1:97:1f:c9:47:f6:b9:8d:0e:23:
         ec:4e:7a:39:4b:63:ed:28:97:df:39:3d:5a:a5:d8:1f:49:6f:
         e3:6d:2e:9d:34:2b:bc:03:9a:a0:ae:c9:20:40:54:55:5a:40:
         de:09:80:0b:0e:c6:43:65:d7:67:9b:ff:0a:78:8d:47:50:93:
         48:0a:c4:55:e4:8a:bb:d4:4b:5c:dc:db:3c:f1:a1:88:3b:93:
         5d:09:5d:f3:69:e1:b0:92:7e:bc:3a:0c:79:6b:cd:20:9a:79:
         dc:50:07:80:f3:73:11:35:6c:da:97:b1:dd:dd:c6:b7:8b:34:
         06:8e:19:87:98:8b:ad:03:48:d9:c4:7e:02:11:6f:04:66:46:
         04:5e:67:93:6f:25:c6:89:cd:e9:23:22:55:8c:8c:19:0f:c8:
         69:0d:7f:63:d0:82:fa:2d:f0:7a:ea:01:03:ca:a2:7d:af:17:
         12:84:72:21:38:ce:89:ef:33:90:a9:94:b4:bf:cf:93:85:e9:
         b3:15:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:47 2024 by rpki-client on console-ams.rpki-client.org