Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jqTkF6D7ZvKfWt-gwEcnX-cSBGU.roa
File:                     jqTkF6D7ZvKfWt-gwEcnX-cSBGU.roa (raw, json)
Hash identifier:          DjI5UMX1oaTau7X7Z5QWaMEswsR+wUs/TgeWWwYRMWM=
Subject key identifier:   8E:A4:E4:17:A0:FB:66:F2:9F:5A:DF:A0:C0:47:27:5F:E7:12:04:65
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01856DEF79BC41268DF5B745DB5B50E6D9BA
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jqTkF6D7ZvKfWt-gwEcnX-cSBGU.roa
Signing time:             Sun 01 Jan 2023 15:24:48 +0000
ROA not before:           Sun 01 Jan 2023 15:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202081
IP address blocks:        193.59.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 May 2023 10:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ef:79:bc:41:26:8d:f5:b7:45:db:5b:50:e6:d9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 15:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ea4e417a0fb66f29f5adfa0c047275fe7120465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:7b:04:43:e0:51:9a:d9:8c:12:4a:c0:e0:
                    fe:72:fe:ad:e6:85:a6:fc:6b:3c:9e:6f:e2:ff:50:
                    3b:c9:70:63:5b:01:54:ed:fe:53:ba:6e:bc:d0:bf:
                    30:b0:cb:ea:a2:3b:ca:23:5c:3a:d6:ba:47:16:0c:
                    25:41:b4:ca:f2:41:b7:bd:e8:44:37:da:75:b2:97:
                    4b:c1:4e:ef:15:3c:ea:df:c8:3e:bd:fc:86:bf:0d:
                    3c:df:a6:02:3b:50:8e:b9:6d:62:4a:06:22:94:05:
                    f7:ac:40:30:79:ae:b4:c6:5b:77:fe:e9:76:15:fe:
                    d1:47:66:3d:b7:af:f5:bc:b3:a3:2e:53:f3:8b:74:
                    23:17:86:e2:ea:f8:f2:43:d1:64:67:ee:e7:08:19:
                    7b:24:c8:42:e1:e2:5e:c5:38:fa:f5:71:3c:d6:39:
                    ea:c9:fc:9b:91:58:ee:ca:37:65:2f:80:42:54:cf:
                    87:12:31:25:52:cc:d9:62:24:55:16:b6:b7:79:5b:
                    42:28:97:97:ef:91:1d:40:b9:a2:19:ac:2a:f0:1a:
                    bc:73:b8:4e:0f:f6:3d:8d:21:2d:ab:04:91:72:20:
                    f5:fe:ab:4b:a0:8a:11:85:b6:1e:9a:0f:75:ea:6b:
                    b8:5e:9a:e5:5e:48:48:cc:99:98:7b:85:d6:ba:94:
                    6f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:E4:17:A0:FB:66:F2:9F:5A:DF:A0:C0:47:27:5F:E7:12:04:65
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/jqTkF6D7ZvKfWt-gwEcnX-cSBGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:26:8a:38:42:bb:bb:1a:e2:b5:32:a6:6c:ad:12:30:65:14:
         1e:2e:4d:97:e3:19:c0:68:1a:01:bf:22:79:92:2b:5c:ca:57:
         e0:f2:05:63:13:33:82:6b:a6:a9:20:9f:76:34:a6:62:f2:91:
         0e:71:c7:ff:88:46:e1:09:05:5f:7d:be:43:dc:19:7f:94:bf:
         da:2d:15:7d:20:67:8a:2a:14:49:08:0a:30:ee:6b:3f:04:69:
         e5:ec:fd:08:3c:24:fc:86:bd:f7:aa:8e:06:49:45:44:5a:38:
         47:fc:ae:d9:c7:29:d5:6d:25:2e:dc:93:75:6c:05:cf:7c:a7:
         c1:5d:3b:59:62:c1:ce:a4:8a:26:94:8f:ce:f6:4a:41:aa:40:
         1c:92:3b:69:f3:61:d1:50:3d:9b:0d:a5:a2:05:cc:35:4f:63:
         09:59:97:2f:be:3f:43:b2:39:77:c6:d0:ae:a2:83:f0:af:48:
         ec:43:41:67:24:61:30:71:cb:f1:a5:6a:5e:30:3c:c2:04:81:
         18:4a:ec:49:c8:d5:3c:c3:86:82:c2:eb:4f:6e:38:4c:b5:5d:
         fe:63:81:58:2a:df:62:aa:2c:13:8d:b4:4b:1f:7b:cb:1a:4e:
         c0:85:a4:ad:0a:c7:30:34:6b:02:cc:88:bc:70:86:20:0a:39:
         c3:6d:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org