Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUyYeamkvSbZwFUTACVjMZr2pYE.roa
File:                     GUyYeamkvSbZwFUTACVjMZr2pYE.roa (raw, json)
Hash identifier:          lc3eO9Mhx6/2VTax7yrkzJhBvG617p1mHCjcC3KWZKs=
Subject key identifier:   19:4C:98:79:A9:A4:BD:26:D9:C0:55:13:00:25:63:31:9A:F6:A5:81
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0186DAF4FCEDD7DF425A7DD5C2FA5961A3AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUyYeamkvSbZwFUTACVjMZr2pYE.roa
Signing time:             Mon 13 Mar 2023 12:32:13 +0000
ROA not before:           Mon 13 Mar 2023 12:32:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197549
IP address blocks:        85.93.5.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 14 Mar 2023 06:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:da:f4:fc:ed:d7:df:42:5a:7d:d5:c2:fa:59:61:a3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Mar 13 12:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=194c9879a9a4bd26d9c05513002563319af6a581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:af:c9:fa:0c:58:76:56:6d:1a:eb:63:8d:
                    91:b3:2e:16:8a:58:f1:54:04:4c:03:99:c9:75:4d:
                    65:1a:d8:25:b6:80:c2:77:ca:2d:2f:42:2b:50:55:
                    74:62:b7:95:fb:e9:d9:83:1a:bd:e4:9a:c6:ac:d7:
                    f8:bc:ef:f1:8d:ad:c9:f8:66:bc:0a:92:55:55:b1:
                    ff:ca:1f:7a:cf:d3:90:16:14:87:a5:6b:cf:ad:d9:
                    3e:34:d1:db:b2:03:c7:0b:d3:f4:ba:fd:65:ac:a5:
                    7a:8e:62:94:2b:44:76:c8:f8:77:d6:e8:db:0a:87:
                    84:91:66:ce:c5:ab:ee:49:c8:09:1f:78:cf:26:64:
                    ff:29:2c:02:28:2b:9e:4b:bf:f3:2d:2a:16:ea:2c:
                    ee:57:15:eb:b2:28:52:f8:08:2d:d4:05:28:28:22:
                    1c:68:11:a6:41:ec:6f:02:3d:4d:94:43:e6:6c:dd:
                    2b:36:47:02:c1:60:ce:92:27:c7:45:32:e7:63:2c:
                    b9:43:47:d4:22:8a:35:8a:2a:10:c8:99:cc:67:ba:
                    6d:59:d8:4c:0c:09:70:f1:7b:11:16:ec:f4:95:a6:
                    a1:f7:23:a1:01:94:99:49:43:bb:34:07:23:8b:4e:
                    d2:3d:1a:81:67:03:96:0b:bd:ea:c0:6b:f7:9d:59:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4C:98:79:A9:A4:BD:26:D9:C0:55:13:00:25:63:31:9A:F6:A5:81
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GUyYeamkvSbZwFUTACVjMZr2pYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.93.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:59:76:1f:7d:19:04:51:b0:b0:1f:fc:5f:5c:67:51:68:36:
         dd:0b:af:a2:fc:1c:ed:50:01:28:34:1a:d5:3d:c9:71:c9:cf:
         2b:a3:ac:63:8d:63:3b:08:ef:7a:ec:34:f4:9f:b5:5f:de:af:
         dc:79:a3:bf:83:86:92:99:d1:5a:3e:48:32:d1:2e:fb:0d:d5:
         81:19:1d:b7:01:d7:e3:4c:75:55:8a:bb:e5:26:5f:7c:6d:7f:
         23:70:4e:77:a7:7c:73:a5:db:18:3d:63:25:ad:63:c8:3a:2d:
         74:80:4b:2a:63:5c:21:b6:fd:c0:ee:23:47:f8:54:b7:9f:bd:
         30:e0:a1:a5:d2:90:9b:4e:53:8e:d8:22:bf:7b:09:52:4f:17:
         34:11:74:69:8b:3f:65:78:15:ab:d1:c6:cf:bc:50:69:70:a4:
         6f:7e:35:ac:6b:c3:2b:8d:75:0e:79:f8:47:7a:ce:d3:a5:59:
         7d:4d:c8:12:fe:f0:3b:da:db:29:e0:d6:35:14:0e:21:85:e5:
         16:2e:ef:f7:9d:16:68:3a:51:76:c2:43:f8:e0:ae:db:9f:62:
         36:40:f3:a8:16:eb:63:1c:9e:4d:ad:64:bc:0d:be:02:ca:29:
         79:d3:a1:fd:3f:14:60:10:dc:80:d2:56:48:f3:11:54:66:c2:
         20:81:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org