Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vE7ksHbCzcV3Oo20QzDEqyyqpHM.roa
File:                     vE7ksHbCzcV3Oo20QzDEqyyqpHM.roa (raw, json)
Hash identifier:          jGCQDqtPVfSjpHjzLf/JSr86puyD046eLNdJycBbhRU=
Subject key identifier:   BC:4E:E4:B0:76:C2:CD:C5:77:3A:8D:B4:43:30:C4:AB:2C:AA:A4:73
Certificate issuer:       /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial:       01860457CC71858B87764AFF053E63079B1E
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vE7ksHbCzcV3Oo20QzDEqyyqpHM.roa
Signing time:             Mon 30 Jan 2023 20:21:48 +0000
ROA not before:           Mon 30 Jan 2023 20:21:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.93.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 17:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:04:57:cc:71:85:8b:87:76:4a:ff:05:3e:63:07:9b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
        Validity
            Not Before: Jan 30 20:21:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc4ee4b076c2cdc5773a8db44330c4ab2caaa473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:47:a8:cc:82:2b:6b:c0:f6:58:11:2c:78:
                    23:43:11:ea:48:a1:e5:45:3e:24:0d:5a:85:1d:e9:
                    1c:9c:dc:94:e2:84:fc:77:05:92:ca:0f:a7:e3:30:
                    7e:ef:02:c1:26:db:16:7e:d1:aa:62:7a:2d:98:fd:
                    30:58:db:08:e9:8a:65:f9:d8:44:49:a2:f9:29:16:
                    26:39:cd:a3:a9:1c:ab:54:d2:98:9e:a7:21:37:f4:
                    c3:47:cd:8a:dc:61:23:ad:38:b7:c0:7a:bf:11:c3:
                    9a:fa:3e:2d:4e:73:8b:e0:d4:b7:e2:af:62:64:b3:
                    a8:53:ed:72:75:74:5f:dd:60:f2:81:b8:88:ad:ff:
                    a9:21:f0:f5:7e:f9:96:e6:9f:8a:85:2a:dd:b2:d6:
                    4b:3c:c3:5a:06:83:c5:94:74:ce:9f:5d:9b:f3:d7:
                    09:5a:da:ef:b9:66:cb:69:db:3c:5a:98:2f:36:24:
                    33:d4:f0:46:f9:c1:c6:f4:8b:93:f3:cd:40:95:7f:
                    d8:ba:da:31:58:d9:fc:56:30:a9:fc:22:5a:21:91:
                    0c:b9:1c:af:29:0d:09:c6:32:8c:7b:3e:8d:9e:49:
                    95:ae:d8:fd:38:e5:14:b4:ed:8a:d1:7e:20:2d:8c:
                    33:5b:21:de:a7:11:62:f5:56:06:57:67:4b:8e:0c:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4E:E4:B0:76:C2:CD:C5:77:3A:8D:B4:43:30:C4:AB:2C:AA:A4:73
            X509v3 Authority Key Identifier:
                keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vE7ksHbCzcV3Oo20QzDEqyyqpHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:2b:3b:46:e0:ad:9e:71:41:fb:44:00:f4:b2:45:e0:f1:
         d1:45:5e:23:f6:7c:b7:d2:36:f9:2a:af:de:28:cd:ba:0c:e7:
         10:31:b6:f4:2d:ae:d9:98:a0:5c:83:81:f7:4e:b4:75:6f:a9:
         1e:ef:60:65:cf:f8:e0:2b:ef:16:0f:e1:24:51:f4:5b:b0:5d:
         ea:29:85:b6:49:9e:95:c6:05:7a:7f:52:4e:1b:78:60:38:12:
         72:2d:ee:62:0f:95:89:7f:5d:d4:31:76:52:d0:66:5a:08:99:
         4a:62:e0:26:6f:f4:99:f7:1f:5e:4b:bb:60:ea:e2:33:6c:4a:
         2b:db:bd:65:37:b3:5a:60:04:22:d4:dc:b8:2a:fd:7b:18:c8:
         25:c1:45:fe:6c:72:81:cc:60:66:51:15:25:89:e7:d6:28:7b:
         7f:86:97:bc:ab:a2:e5:1d:5d:65:95:de:a8:35:18:6c:a4:50:
         d6:25:7f:02:4c:46:7c:e3:fd:92:30:e5:70:f5:de:30:63:ab:
         4a:b1:ac:ba:90:78:43:d4:cb:70:b3:de:6c:fe:9f:ca:1d:30:
         fe:e5:7b:ba:eb:2b:e5:4f:02:99:6e:ab:58:7c:5d:be:55:2a:
         b7:9f:b3:e1:12:37:ab:e6:17:f8:ac:80:ef:fb:af:bc:80:30:
         57:27:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org