Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/VeC15eT-oI9WZplfAL8O8-0NHfc.roa
File:                     VeC15eT-oI9WZplfAL8O8-0NHfc.roa (raw, json)
Hash identifier:          1z11JKGXXPD9phyjFqxi+TP4hReeEyaKScz/2c28GwQ=
Subject key identifier:   55:E0:B5:E5:E4:FE:A0:8F:56:66:99:5F:00:BF:0E:F3:ED:0D:1D:F7
Certificate issuer:       /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial:       01856DCAF50D24B70429080301B68096F236
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/VeC15eT-oI9WZplfAL8O8-0NHfc.roa
Signing time:             Sun 01 Jan 2023 14:44:55 +0000
ROA not before:           Sun 01 Jan 2023 14:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209938
IP address blocks:        93.189.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 03 Oct 2023 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ca:f5:0d:24:b7:04:29:08:03:01:b6:80:96:f2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
        Validity
            Not Before: Jan  1 14:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55e0b5e5e4fea08f5666995f00bf0ef3ed0d1df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:a6:34:f8:6c:92:c6:a8:6a:39:91:2c:8d:
                    74:84:3a:44:42:97:2c:8e:19:a2:81:53:80:60:1d:
                    55:7a:b8:57:04:19:ef:9c:3f:58:b7:00:92:57:d6:
                    c0:ba:e9:37:6c:19:92:33:7a:ac:7b:45:b4:bc:99:
                    4c:46:24:22:9b:dc:69:92:7c:b2:0a:f2:64:09:7a:
                    38:1f:5f:ee:69:a7:88:41:25:f3:a8:58:65:39:63:
                    ce:09:87:e9:8a:2e:3f:e2:18:d0:7d:2f:2b:ef:31:
                    10:6b:fe:3f:94:14:f6:3a:7b:49:45:89:bf:3b:1e:
                    fd:36:0d:99:64:03:72:1d:e0:fe:76:75:69:54:6f:
                    f8:1f:76:8d:41:e3:62:86:2d:a5:c6:e5:f3:be:94:
                    71:91:be:96:92:f8:2f:e3:e6:de:ac:bf:16:8d:d2:
                    71:11:f7:43:49:f9:07:64:cd:d4:ab:e1:d9:e3:f6:
                    95:76:e2:87:c9:63:73:8a:46:a4:86:c3:d1:61:7f:
                    f9:5d:28:47:c5:3b:1a:fb:9b:aa:fe:d7:05:df:c2:
                    3f:7c:f8:61:8b:d5:84:96:81:d8:60:ce:20:7f:93:
                    75:1f:0c:09:b9:f9:3f:a6:c4:3e:07:4f:f3:15:42:
                    41:71:fb:03:8b:07:d5:80:f5:b7:a7:32:b6:37:53:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:B5:E5:E4:FE:A0:8F:56:66:99:5F:00:BF:0E:F3:ED:0D:1D:F7
            X509v3 Authority Key Identifier:
                keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/VeC15eT-oI9WZplfAL8O8-0NHfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.189.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:79:7e:8f:60:c5:b2:d0:e1:81:01:af:97:c2:0a:21:be:db:
         dc:0e:18:29:03:59:04:e3:1e:93:27:76:c3:27:6b:d0:2f:83:
         5b:e9:b8:94:bd:f5:5f:1b:d3:a8:8a:31:4f:da:1f:9f:fe:40:
         e8:4f:10:69:2d:87:72:a8:8a:52:8f:2b:1c:07:13:67:5c:24:
         44:90:c3:68:eb:bf:a3:e3:f5:05:fa:52:24:ca:1f:66:08:b6:
         be:21:49:88:cf:3a:7b:9a:25:0f:bd:5a:66:a2:4d:86:a3:d4:
         86:4a:eb:01:ff:8e:ce:4f:84:e5:0a:62:db:af:6b:ea:07:76:
         26:3e:1b:cf:2b:87:5a:92:ae:60:0b:13:ed:73:4a:4d:d7:ff:
         e4:73:31:10:eb:e9:3d:3e:3d:12:9e:2a:e9:f3:f8:b6:34:ad:
         23:55:06:98:ad:43:18:c4:96:bb:1a:8d:08:c8:f1:22:7b:2f:
         3a:bb:c1:12:eb:9a:2c:8a:71:68:2e:bd:dd:63:bc:7b:3d:30:
         e7:c0:2d:56:6e:11:86:3f:66:2c:49:6b:d1:43:f0:87:ec:c2:
         59:86:4b:b0:cb:eb:0a:14:e9:03:1a:f8:9c:57:05:7b:ab:36:
         67:80:70:ad:8e:0b:e5:19:cc:15:ef:4e:8d:bb:68:77:ab:4c:
         f4:2e:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org