Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sxL_W7xjT3UKr1ewA5Yf2l-zpTs.roa
File:                     sxL_W7xjT3UKr1ewA5Yf2l-zpTs.roa (raw, json)
Hash identifier:          wHWvIx8FpURezMR6/y5HJHzYmzvweGFsyYegCTaLzGw=
Subject key identifier:   B3:12:FF:5B:BC:63:4F:75:0A:AF:57:B0:03:96:1F:DA:5F:B3:A5:3B
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0188E90E1BB4B7C6B81CCB7FF4C54FA1A672
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sxL_W7xjT3UKr1ewA5Yf2l-zpTs.roa
Signing time:             Fri 23 Jun 2023 16:19:55 +0000
ROA not before:           Fri 23 Jun 2023 16:19:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6079
IP address blocks:        93.123.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e9:0e:1b:b4:b7:c6:b8:1c:cb:7f:f4:c5:4f:a1:a6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jun 23 16:19:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b312ff5bbc634f750aaf57b003961fda5fb3a53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:d9:6f:9f:0e:21:5d:92:33:10:96:93:9d:
                    6a:5a:fe:09:16:e3:8a:e6:48:f5:37:73:f4:53:54:
                    5e:f6:61:ae:b9:7c:2d:7d:9c:54:ea:e5:02:e2:36:
                    b4:95:14:7b:bc:27:00:9e:14:ca:e2:1a:b8:7b:a1:
                    cd:fe:74:e2:57:41:4f:98:20:b9:dd:3d:d0:53:71:
                    bd:6d:04:b8:c6:1c:7c:f2:2d:87:cd:89:67:ab:cd:
                    5b:df:ca:52:d6:82:01:c0:47:d7:46:ec:64:b3:2e:
                    2b:ea:82:9d:85:8c:e5:cc:1e:95:29:32:37:fc:73:
                    f6:bb:6c:a1:cd:4c:ac:04:e9:54:20:1c:47:93:54:
                    86:a3:e1:03:a0:be:51:20:1a:f2:95:b7:32:23:8c:
                    ce:e0:60:8b:53:f8:fb:dc:da:e0:51:d7:e8:0f:07:
                    47:83:01:6b:b4:30:63:cf:88:b1:71:a8:4b:0c:70:
                    2c:b4:65:11:24:2c:3c:78:e5:bd:a8:ed:ec:ff:5d:
                    50:d2:49:e4:21:21:ae:08:cc:70:0d:34:2b:06:ec:
                    29:ab:ba:d7:a4:c9:00:f1:a4:31:4f:7f:cd:17:4d:
                    7f:59:bb:b6:22:fe:6b:20:34:fe:30:bf:5b:45:9f:
                    f3:d7:96:b7:27:d0:c9:d2:5c:44:23:c5:db:8f:84:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:FF:5B:BC:63:4F:75:0A:AF:57:B0:03:96:1F:DA:5F:B3:A5:3B
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sxL_W7xjT3UKr1ewA5Yf2l-zpTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:a5:bf:c1:77:ee:6d:bf:c2:32:ca:17:16:0a:82:6b:a1:
         27:76:9b:c6:10:a2:ab:8e:d3:ac:9d:1d:d1:f9:91:da:3c:63:
         47:73:ab:0c:a7:63:7f:38:db:a4:e4:5a:8a:e4:a1:91:f7:fb:
         77:69:2b:50:7d:77:9f:61:e1:73:fe:85:cc:ee:c8:3e:1f:4b:
         21:2a:43:cf:9d:25:24:a9:ee:91:4b:53:31:b3:44:c4:15:46:
         4c:23:69:85:e9:2d:ba:52:f0:de:34:a4:73:ee:0f:27:59:e4:
         8f:7f:f4:74:ee:6b:8f:57:55:c8:77:d1:d0:f0:d2:de:d8:04:
         71:3a:72:03:d1:a8:85:f9:eb:94:dc:65:fa:09:09:34:91:a4:
         f7:94:5b:6d:9d:4f:69:6c:3c:26:59:7d:90:14:2e:79:ff:43:
         75:28:23:88:de:9c:fd:18:6c:5e:e4:b6:2b:79:a9:5b:1c:dc:
         92:65:be:82:44:d1:51:78:d0:26:93:0e:33:66:52:10:15:33:
         92:59:a7:7c:34:c4:3e:e8:e5:a2:4f:a6:14:6b:16:08:8e:57:
         e5:6b:8f:e6:42:da:9d:e8:53:83:88:8f:a7:22:6b:b5:81:6c:
         92:70:45:d4:0e:fc:0d:85:39:d3:d5:10:de:c2:8c:41:69:46:
         46:30:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:45 2024 by rpki-client on console-ams.rpki-client.org