Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Zu5yRsMQ8XamEnFEhkBu_-uNWk.roa
File:                     9Zu5yRsMQ8XamEnFEhkBu_-uNWk.roa (raw, json)
Hash identifier:          dTRc3XG72QfHerE+6zwugU2Ec86wuOwrcUTimrxMBaQ=
Subject key identifier:   F5:9B:B9:C9:1B:0C:43:C5:DA:98:49:C5:12:19:01:BB:FF:AE:35:69
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01860230A57FD6DFB38661C6AFDD88BC19A4
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Zu5yRsMQ8XamEnFEhkBu_-uNWk.roa
Signing time:             Mon 30 Jan 2023 10:19:47 +0000
ROA not before:           Mon 30 Jan 2023 10:19:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        193.93.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 11:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:30:a5:7f:d6:df:b3:86:61:c6:af:dd:88:bc:19:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jan 30 10:19:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f59bb9c91b0c43c5da9849c5121901bbffae3569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:25:5b:7e:9d:3d:6b:75:03:16:89:10:1a:
                    39:e3:9f:0c:ab:33:dc:1a:06:fe:f2:f7:2a:82:12:
                    93:21:c8:81:b8:80:eb:c6:af:f9:ec:c2:6f:3b:27:
                    3c:4e:9c:b2:a3:01:e5:3c:43:d5:4f:d1:10:3f:27:
                    9b:70:a9:61:7c:6f:62:f8:f5:8b:94:ab:d3:d6:48:
                    ac:e9:4a:e7:f0:b3:3c:69:d5:1c:86:99:48:c2:7d:
                    2f:ea:4b:09:e1:50:ee:be:e6:a7:d4:c2:20:08:17:
                    ae:a4:0a:29:c5:2f:a1:14:b2:c9:31:5e:eb:70:64:
                    ac:77:6e:14:3d:3b:81:be:9d:60:2a:45:0f:e1:f7:
                    f4:de:be:e7:41:fb:00:fc:9e:06:7a:27:7c:57:44:
                    22:43:78:71:64:81:ca:5a:2e:ad:09:09:9a:32:d8:
                    5a:2d:e3:25:6a:17:9b:87:44:52:1d:d7:6c:49:ca:
                    83:42:70:ce:e9:7c:2c:66:ff:ec:9a:a5:fb:1d:3c:
                    19:16:8d:c0:60:c7:25:46:92:49:13:a6:dd:12:d1:
                    4d:0e:11:33:53:73:55:aa:d6:3d:e0:4f:88:8c:5c:
                    f5:df:08:8c:21:45:f6:a9:67:5d:1e:a0:b3:02:ac:
                    be:6d:49:b8:32:7e:5e:77:32:3d:a4:38:8d:7b:7a:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9B:B9:C9:1B:0C:43:C5:DA:98:49:C5:12:19:01:BB:FF:AE:35:69
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9Zu5yRsMQ8XamEnFEhkBu_-uNWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:67:da:cb:06:fb:8a:a1:45:25:a1:36:27:d0:57:7e:63:
         19:02:31:31:33:3c:9f:f1:d0:6f:32:0f:5b:5f:6f:85:ad:5b:
         0a:06:78:a3:00:51:da:17:ca:24:fc:50:c6:5d:f5:cb:35:27:
         93:46:ca:36:0f:5a:6b:0b:dd:d0:2d:a2:d2:ef:ce:16:0b:15:
         55:73:b3:28:d5:26:d0:33:57:74:74:f5:5b:0b:41:ab:0c:52:
         0e:ee:65:98:9b:99:a7:34:cb:26:91:f3:1b:1a:7e:49:3d:48:
         ec:df:59:5b:d7:29:e7:a7:8e:3a:6d:f8:5e:1c:54:4b:44:48:
         7f:9d:1d:df:69:bd:ed:85:cb:07:be:34:36:c7:98:43:5f:a5:
         34:20:af:49:99:36:19:92:90:63:a7:85:51:6c:31:43:38:b6:
         9e:6e:e8:96:31:c0:26:02:58:09:4c:b6:9e:03:dc:1b:14:64:
         da:65:2f:03:5c:ee:68:7c:03:f1:f3:82:d2:5f:b9:68:69:7a:
         ff:bb:6d:e6:97:7f:e5:ee:a3:d4:1a:df:df:56:e7:3b:1a:2c:
         b8:df:21:2e:e7:57:96:a1:91:81:44:c3:4e:5b:bb:c9:77:a4:
         65:fb:95:1b:b6:0b:2b:9a:48:d1:e8:3f:09:dd:3a:59:d9:ef:
         29:d9:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org