Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/4mL5-lfh2dfuJKgBak_ThT2CkzU.roa
File:                     4mL5-lfh2dfuJKgBak_ThT2CkzU.roa (raw, json)
Hash identifier:          B3IyZP6Ah+yv79al6HidDzWGYvE39yRinBqTjXvO8K0=
Subject key identifier:   E2:62:F9:FA:57:E1:D9:D7:EE:24:A8:01:6A:4F:D3:85:3D:82:93:35
Certificate issuer:       /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial:       01856D3857563CD8329478F22D11B636DF5A
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/4mL5-lfh2dfuJKgBak_ThT2CkzU.roa
Signing time:             Sun 01 Jan 2023 12:04:46 +0000
ROA not before:           Sun 01 Jan 2023 12:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8758
IP address blocks:        193.247.148.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:38:57:56:3c:d8:32:94:78:f2:2d:11:b6:36:df:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
        Validity
            Not Before: Jan  1 12:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e262f9fa57e1d9d7ee24a8016a4fd3853d829335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:6e:84:af:f3:56:35:6b:a9:c1:bb:ce:a8:
                    15:05:cd:78:d2:d1:f0:e9:f7:8f:f9:08:cc:37:7a:
                    df:75:7d:93:75:98:6a:aa:4d:42:4e:e7:1e:e6:c3:
                    b4:dd:ce:70:71:a7:9f:29:71:15:cb:ad:50:90:ff:
                    30:bb:e5:b1:5b:ee:77:99:2d:48:5f:e7:af:e2:f5:
                    ea:44:61:5e:cb:c1:48:85:2e:91:bf:1e:ec:0a:33:
                    08:67:c4:90:2e:06:09:ec:62:82:5b:c1:ac:51:1e:
                    1d:ae:65:b6:87:bd:98:09:69:31:ba:ee:42:bc:b2:
                    7a:30:e7:17:9e:90:18:03:72:5e:0a:96:d4:f0:e9:
                    dc:34:63:95:8e:8b:b1:1a:d2:d7:3e:e4:a1:3c:ce:
                    46:1e:f3:b1:99:3b:19:cf:ca:27:10:04:31:74:e1:
                    04:52:f5:66:74:16:06:19:07:ae:e8:40:73:aa:59:
                    7a:a2:f3:d9:7b:5c:b1:11:2a:54:69:5e:52:af:6d:
                    8a:30:33:e6:17:b5:ba:b2:d5:57:cc:5b:27:35:5d:
                    3a:f4:df:8e:57:16:ba:ae:ba:f2:b2:3b:07:97:d9:
                    9b:61:a5:d8:f6:d5:82:65:28:bd:fd:c6:1a:7d:98:
                    32:56:76:07:02:0c:fc:f1:29:6e:b7:3b:df:ee:79:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:F9:FA:57:E1:D9:D7:EE:24:A8:01:6A:4F:D3:85:3D:82:93:35
            X509v3 Authority Key Identifier:
                keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/4mL5-lfh2dfuJKgBak_ThT2CkzU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:8f:78:cd:90:64:d2:b2:38:75:ac:de:60:c4:04:76:0d:
         c8:9e:38:c1:69:ce:82:a6:c5:c1:3d:b8:78:fb:ad:73:96:ed:
         9b:b2:c7:57:88:55:f8:63:72:77:23:e7:41:57:a1:84:93:b5:
         5d:94:ae:db:9e:8a:15:bd:f1:0d:e1:b4:27:61:5b:90:c3:2c:
         3a:06:fb:97:83:60:1c:50:b8:d7:8c:3c:bd:f7:ad:e9:d7:09:
         09:99:84:15:f5:29:d0:47:71:45:71:12:dc:ca:8f:b0:29:b4:
         17:b1:4f:e0:de:e2:11:31:58:94:06:84:cd:0a:15:a7:aa:99:
         c2:17:20:cf:23:11:be:46:56:ed:d0:8a:51:23:18:a8:c4:dc:
         c6:a0:96:27:2e:ba:7e:83:f6:53:f3:64:ec:e0:bb:10:26:64:
         7e:69:5f:da:da:8f:27:f2:cf:95:b5:19:e0:39:c7:c1:54:08:
         54:22:20:99:66:2c:ee:68:9f:33:76:90:d8:fa:04:fb:66:a3:
         c0:12:3c:3f:e8:c3:50:46:55:b0:20:98:3c:d4:65:c6:2f:b0:
         09:18:69:a6:ae:f1:1f:12:74:ac:78:48:cc:79:12:b0:09:ee:
         b4:84:66:1a:81:1a:b0:7a:7d:70:45:8d:3f:93:ab:c0:e2:25:
         98:26:c3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:40 2024 by rpki-client on console-fra.rpki-client.org