Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa
File:                     Qd7kUAxypWu5Feq5k650mgkS3gQ.roa (raw, json)
Hash identifier:          j32NKyfROFOIWXN1V5gGy7ezj9qRDMz7qR3+DkVWye0=
Subject key identifier:   41:DE:E4:50:0C:72:A5:6B:B9:15:EA:B9:93:AE:74:9A:09:12:DE:04
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       01857102E58FF52D7C30319298FDD40E576E
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa
Signing time:             Mon 02 Jan 2023 05:44:53 +0000
ROA not before:           Mon 02 Jan 2023 05:44:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3303
IP address blocks:        193.247.84.0/24 maxlen: 24
                          193.247.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:e5:8f:f5:2d:7c:30:31:92:98:fd:d4:0e:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Jan  2 05:44:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=41dee4500c72a56bb915eab993ae749a0912de04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:85:b0:41:fd:1b:1e:d5:e3:e4:c4:e9:6f:75:
                    12:1b:56:f7:32:7d:33:9a:e3:0b:fd:24:0f:b3:07:
                    8b:4e:ae:53:62:96:c6:2f:c4:5f:16:70:c5:c8:b0:
                    02:19:b7:a2:e8:5c:77:99:84:cc:51:12:91:4f:d5:
                    71:fc:54:37:13:db:99:cd:95:99:11:56:2e:e5:3f:
                    ef:c6:c7:6f:22:55:55:4d:af:48:3e:06:8f:11:89:
                    bf:82:3e:fd:4d:44:65:6c:88:e8:a1:e1:0c:45:93:
                    fc:66:12:b0:3f:2e:34:2d:73:64:f9:68:8b:b6:e0:
                    fc:14:5b:7b:d9:fc:05:6b:03:09:9f:c6:d9:18:c6:
                    0c:ec:54:19:61:3e:5f:9f:9d:ce:04:07:dd:b7:22:
                    50:c2:ce:b1:35:e9:49:e9:77:3e:d0:f3:68:c0:4e:
                    04:9f:fe:64:39:60:23:d7:59:15:43:45:ce:f4:d5:
                    a6:c8:34:14:14:f8:59:aa:52:8c:46:1e:48:c7:9a:
                    df:dc:72:ff:0d:16:17:28:66:43:f7:bd:f9:a9:8b:
                    13:b6:29:d4:45:07:ce:dd:69:46:51:5c:9d:77:c3:
                    ed:92:5c:10:60:4d:04:66:57:85:4f:ba:64:b4:4f:
                    48:4d:d8:98:61:c9:be:03:57:cf:c1:29:90:cb:7c:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DE:E4:50:0C:72:A5:6B:B9:15:EA:B9:93:AE:74:9A:09:12:DE:04
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/Qd7kUAxypWu5Feq5k650mgkS3gQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.83.0-193.247.84.255

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:cd:a6:da:0b:d5:af:78:4c:89:4f:22:db:c0:5f:60:ac:
         7b:a4:21:1d:f6:60:75:f0:ca:60:75:71:e1:b3:81:4e:17:fc:
         4b:04:b1:b5:00:3d:3f:99:d6:7d:cd:ba:0d:e4:53:c7:a7:91:
         df:0b:fb:96:8d:b4:e8:ea:27:25:1b:5d:9f:06:32:ac:cf:35:
         93:29:cd:eb:cf:e8:88:1e:58:2b:5c:c7:0a:21:dd:72:da:b2:
         06:75:0b:ee:63:a2:d5:60:bb:7f:8d:f4:02:e5:5b:f6:78:ee:
         93:c2:45:47:ba:b9:91:b3:da:8a:e7:ed:15:b2:d0:76:a8:64:
         24:f4:a9:f4:85:0a:cc:ff:f1:67:a8:38:9c:76:6d:99:dd:d2:
         e2:61:ef:d1:03:1d:41:69:50:ee:10:6c:df:a2:8a:69:35:a1:
         c1:72:9a:20:68:f1:77:3b:22:68:83:0e:e4:fe:c8:8d:4a:06:
         80:f3:09:1c:3a:48:60:6a:5a:41:7c:80:8e:ce:81:a8:0c:80:
         4b:17:68:55:37:6c:3d:35:31:a1:89:4a:55:6d:80:cc:74:14:
         e5:e3:65:da:50:98:78:32:13:e9:7e:0c:d9:ff:bf:ac:cd:6f:
         ce:5b:91:9f:98:1c:37:95:92:0a:37:f4:cf:e8:66:ad:fb:50:
         d2:45:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org