Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iAX__9rdXK2hfe3x4Qn811tuYKI.roa
File:                     iAX__9rdXK2hfe3x4Qn811tuYKI.roa (raw, json)
Hash identifier:          OzQ5Vf3CB9P12K1ftm5SaUy7AEKMDuNi5ovIfe8dKGM=
Subject key identifier:   88:05:FF:FF:DA:DD:5C:AD:A1:7D:ED:F1:E1:09:FC:D7:5B:6E:60:A2
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01914BFEDE605E13A4CD3509E09D5659E2A2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iAX__9rdXK2hfe3x4Qn811tuYKI.roa
Signing time:             Tue 13 Aug 2024 13:47:59 +0000
ROA not before:           Tue 13 Aug 2024 13:47:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        93.123.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 19:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4b:fe:de:60:5e:13:a4:cd:35:09:e0:9d:56:59:e2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Aug 13 13:47:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8805ffffdadd5cada17dedf1e109fcd75b6e60a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:16:73:4b:61:a5:7e:02:2d:3d:6d:fe:1c:
                    5b:52:b6:dd:6d:af:2d:10:85:7e:f3:05:94:2b:0c:
                    e1:a4:56:d8:b0:bd:8c:0a:08:c0:19:bf:36:fb:52:
                    78:ec:64:e1:8b:fb:12:28:f0:61:51:93:f4:07:ca:
                    c2:c8:dd:db:0a:0d:9f:6e:5b:13:f4:2c:b6:17:0f:
                    f8:33:3a:f7:9f:8f:79:53:3b:76:66:c9:d0:85:47:
                    96:75:bf:d9:49:73:ec:a9:c3:74:d4:fb:fd:2c:84:
                    b6:3a:f0:1c:83:3f:ba:39:1c:4c:8a:ef:55:f3:2b:
                    48:61:5d:89:9d:a7:5f:90:5b:52:9c:ea:ae:8c:a6:
                    99:2f:d2:c6:98:d3:72:19:6e:c7:d2:d0:f4:93:2d:
                    d9:cc:55:43:6e:84:92:a1:11:97:9e:c1:90:8f:45:
                    9d:0b:04:cf:52:09:cd:25:12:9e:0a:9c:df:fe:b9:
                    1e:36:60:11:51:66:29:18:04:9e:94:85:54:48:d6:
                    8c:7d:d8:e3:30:d8:e6:a3:a5:8a:d5:cf:f0:1d:a0:
                    cc:5d:1f:54:3f:8b:67:2e:ea:13:aa:80:a2:e5:69:
                    0a:c2:e5:ef:4e:57:a0:6a:11:7c:54:f4:aa:78:3d:
                    48:4b:21:ed:59:41:d0:2b:da:dd:c3:4b:fd:2d:36:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:FF:FF:DA:DD:5C:AD:A1:7D:ED:F1:E1:09:FC:D7:5B:6E:60:A2
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iAX__9rdXK2hfe3x4Qn811tuYKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:20:e7:f9:13:c1:c6:96:46:92:7e:88:4f:c9:1e:70:d7:fb:
         c2:57:0c:37:93:dd:ca:db:b0:53:c2:f8:08:1f:cf:fe:15:e1:
         69:38:62:75:47:19:c4:a2:3d:65:68:a6:e0:79:70:f3:ed:03:
         01:90:49:2b:20:67:78:14:51:42:fc:77:e6:ae:e6:a7:59:1c:
         b1:de:c4:75:8d:64:45:75:81:ab:02:82:27:02:fe:57:b6:97:
         3e:da:cc:fc:c7:25:14:54:25:b4:93:ba:38:6b:b6:e4:3b:98:
         5a:ce:a5:02:5d:47:7a:31:9a:07:9c:bb:cb:9c:9e:de:f5:2a:
         8a:ee:81:7b:ee:92:3f:23:7f:44:a6:b3:9d:41:57:03:27:ab:
         8b:60:2d:3c:f4:c4:75:50:cc:9b:79:7c:ac:78:3c:64:af:27:
         63:39:00:31:d2:f0:bb:bd:68:99:6b:92:99:5a:4f:de:08:05:
         73:63:b7:c2:61:a5:67:f2:35:6a:08:6b:ab:88:bc:a5:4f:32:
         db:ec:47:b9:b7:4d:79:d1:4b:1d:7b:f5:38:62:01:ef:94:0e:
         fb:61:ae:be:d8:fc:e6:4f:15:ad:ca:f0:c6:9e:d9:09:30:57:
         a6:f3:2f:fd:18:35:a5:5c:74:3f:10:71:aa:50:89:a7:5b:a7:
         fa:1d:3c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 20:45:21 2024 by rpki-client on console-fra.rpki-client.org