Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa
File:                     Vp6ENt2XmZ14xeV7IooyWDnES8g.roa (raw, json)
Hash identifier:          sQ/YPyF+O9eYlhM8pCA+tAqduHKe/QMN8yzbMgbPlyw=
Subject key identifier:   56:9E:84:36:DD:97:99:9D:78:C5:E5:7B:22:8A:32:58:39:C4:4B:C8
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018CC8DD00589B9266879689A4A691A346C0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa
Signing time:             Tue 02 Jan 2024 06:29:35 +0000
ROA not before:           Tue 02 Jan 2024 06:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201409
IP address blocks:        93.123.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Aug 2024 09:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dd:00:58:9b:92:66:87:96:89:a4:a6:91:a3:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  2 06:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=569e8436dd97999d78c5e57b228a325839c44bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:e3:c0:60:1d:70:3c:72:3b:36:da:1c:ab:
                    07:62:06:50:a8:2d:09:79:9b:0b:e6:73:37:b5:57:
                    35:b8:a2:ce:e7:3a:0b:65:14:e3:18:dc:30:be:db:
                    da:44:d4:6c:cb:25:51:fc:82:b5:9e:7e:e9:af:33:
                    47:3f:21:a9:5f:92:0f:3e:eb:4f:49:d5:98:f6:70:
                    3b:12:dd:9a:56:95:98:b6:f5:c1:08:c6:a1:90:a0:
                    f7:2d:d5:bc:f2:0d:95:68:30:a8:e4:e1:2c:25:9c:
                    63:54:e1:51:6c:20:6a:a3:89:be:7b:2a:d8:12:cb:
                    f6:72:df:16:d1:54:86:8b:db:70:4e:3d:0a:1a:d9:
                    06:74:51:50:c1:45:56:29:e7:60:dc:09:cc:bc:21:
                    9e:32:b9:e9:13:2d:9d:36:1b:f2:8f:0d:30:8d:3e:
                    65:d7:d9:95:7c:0a:73:86:b6:fb:b5:35:42:a7:cf:
                    88:8c:8a:2d:7d:81:18:b7:a2:d3:f6:0d:28:d9:77:
                    d4:b5:af:27:36:7f:0f:4e:a7:05:de:d3:be:4b:6d:
                    14:06:12:6d:a7:6e:9a:dd:f8:29:cf:08:cd:f5:0f:
                    44:1d:ba:ab:be:2c:e2:ff:d4:16:57:3f:bd:07:d5:
                    ed:38:cc:03:0f:aa:1f:6e:23:0b:54:53:e5:29:e4:
                    38:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9E:84:36:DD:97:99:9D:78:C5:E5:7B:22:8A:32:58:39:C4:4B:C8
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vp6ENt2XmZ14xeV7IooyWDnES8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:91:d4:36:b0:84:80:7b:34:1c:d4:f5:e3:e5:65:2e:12:
         6a:0e:e7:f8:a6:81:71:d4:69:7e:e4:12:48:06:90:c7:1d:05:
         c0:50:56:46:65:50:0c:2c:48:5a:6c:71:3a:a2:5c:2e:d5:b8:
         0e:bb:71:0c:b1:34:d7:6c:4a:87:96:13:86:97:49:cb:fa:0d:
         fa:ac:6a:37:0d:4c:ff:7e:13:c1:47:9c:51:14:fa:93:96:46:
         e6:10:0c:6b:09:8b:e0:9a:4e:e4:be:ed:4c:ce:c3:56:9d:dc:
         76:b9:c6:01:e7:eb:24:2e:1b:84:78:ac:06:85:6e:41:0e:bd:
         d1:1a:48:a2:6b:dd:0f:59:a8:3d:d7:9b:7e:5c:66:e8:30:49:
         a3:8b:e0:47:89:53:ea:87:ff:61:1a:0f:a8:e8:0b:70:3c:4b:
         d4:cb:f8:26:5d:c1:8c:a7:d9:a4:91:3c:d9:45:6b:35:d0:2b:
         9d:3b:35:bd:4c:33:05:ef:0e:f5:46:7b:33:0d:a8:ee:b3:21:
         8d:e4:83:d1:cb:9c:bc:5d:95:8c:9c:a4:8d:14:3d:3b:49:a5:
         b7:34:d7:58:e9:84:a3:b1:f6:cc:3b:02:f5:47:8e:c1:70:00:
         16:75:2b:8f:0f:c3:89:2f:a9:d1:63:24:30:b8:17:d6:5b:7a:
         5a:9a:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 12:38:34 2024 by rpki-client on console-ams.rpki-client.org