Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGtt7UNvc4e0a0GwkkD7HJ6cYuA.roa
File:                     uGtt7UNvc4e0a0GwkkD7HJ6cYuA.roa (raw, json)
Hash identifier:          XHraDP4K2DayHAcYRRwRJSj91FJteB+gKWXp9Q27RJw=
Subject key identifier:   B8:6B:6D:ED:43:6F:73:87:B4:6B:41:B0:92:40:FB:1C:9E:9C:62:E0
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0188F98D750A1F180CFE5C1502648F716609
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGtt7UNvc4e0a0GwkkD7HJ6cYuA.roa
Signing time:             Mon 26 Jun 2023 21:12:57 +0000
ROA not before:           Mon 26 Jun 2023 21:12:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50286
IP address blocks:        93.123.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 15 Jul 2023 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f9:8d:75:0a:1f:18:0c:fe:5c:15:02:64:8f:71:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jun 26 21:12:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b86b6ded436f7387b46b41b09240fb1c9e9c62e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:a7:a0:f0:74:f4:0a:09:a9:e5:a0:9b:8c:
                    bf:6d:e0:d7:b4:ea:ef:da:a1:84:78:20:55:d3:87:
                    e7:e0:6b:7b:36:53:cc:91:ec:e6:92:ba:7b:69:a7:
                    46:3d:38:00:26:4e:cb:68:d8:04:9f:78:d6:00:20:
                    03:f3:f9:59:ba:b0:d2:76:d6:f1:c1:08:c7:ae:7c:
                    03:7d:fa:f2:85:9c:e0:14:05:aa:f2:a9:33:ac:e7:
                    c0:a6:b8:17:29:8c:16:60:fb:ba:98:ca:7f:34:eb:
                    33:a5:9b:5c:ac:2b:1f:80:48:1f:70:3a:73:eb:24:
                    98:88:c9:1b:61:a0:fa:70:fd:e6:57:b6:c1:1a:dc:
                    50:de:f5:39:51:33:99:bc:f2:a5:30:ff:25:c1:02:
                    c0:6b:4c:c1:5c:15:02:65:12:0f:57:9f:44:fe:10:
                    bf:34:55:05:ea:b7:43:ce:4e:72:79:d1:1c:0e:42:
                    54:0c:b7:83:04:0b:7e:28:34:5b:de:62:8f:4f:19:
                    81:4e:3a:65:22:39:59:05:98:a8:d1:7d:02:64:97:
                    e6:fa:dd:d2:12:e1:f1:75:75:6f:61:bf:48:fa:27:
                    51:99:f3:76:29:a5:8b:ec:be:63:cf:38:49:70:b5:
                    50:6d:65:d3:73:4d:4c:3b:ea:bb:b8:57:09:33:bc:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:6D:ED:43:6F:73:87:B4:6B:41:B0:92:40:FB:1C:9E:9C:62:E0
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uGtt7UNvc4e0a0GwkkD7HJ6cYuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:43:f2:a5:ec:46:33:1d:f2:59:f0:6d:9d:69:75:61:be:
         7d:5b:bf:7d:43:72:7f:5b:fc:43:44:3a:64:b7:ff:09:0a:91:
         8e:84:d0:4a:81:63:1c:bc:b2:27:a1:ed:dc:f5:b8:f3:d7:9d:
         86:6b:fe:59:c2:e9:90:7d:9c:ec:4e:fc:af:30:e7:8e:0d:26:
         6d:40:3a:31:56:02:1d:48:4d:70:f1:09:68:d1:cb:fa:ff:e0:
         f6:8b:10:76:30:41:31:28:67:3a:20:62:74:95:3b:2b:de:f2:
         cd:98:af:2a:59:58:24:90:5b:14:77:6e:e3:7e:da:f6:a4:30:
         a4:57:64:ca:11:91:e0:11:14:4f:71:8d:bc:e0:73:f7:63:4d:
         99:a6:e0:72:26:0b:c8:f0:ae:4e:3a:2c:40:a6:b3:d3:60:35:
         6a:08:cb:45:48:3b:f0:2a:36:4e:b9:43:82:dd:eb:a8:62:e4:
         5b:db:ba:0a:9d:c9:ae:6b:18:ff:18:af:27:76:63:3c:7f:cc:
         ae:13:00:72:2f:ef:1f:73:10:eb:93:50:92:0f:db:32:d9:11:
         58:29:64:f8:d6:8e:f2:f5:30:59:58:06:5c:ca:28:60:f6:35:
         ac:91:fa:84:92:3a:69:38:ee:41:8e:d7:15:d3:dd:37:49:4d:
         97:c5:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:20 2024 by rpki-client on console-fra.rpki-client.org