Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/iULUbW9dpJ0Zr6z-DDmtPJzGhSs.roa
File:                     iULUbW9dpJ0Zr6z-DDmtPJzGhSs.roa (raw, json)
Hash identifier:          GnnOoIinTQ/nM1O2FkWRVWCY6EDCxEnYTuT15YCzr84=
Subject key identifier:   89:42:D4:6D:6F:5D:A4:9D:19:AF:AC:FE:0C:39:AD:3C:9C:C6:85:2B
Certificate issuer:       /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial:       0185701EE14D959F73B90B8737DD1B504FD7
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/iULUbW9dpJ0Zr6z-DDmtPJzGhSs.roa
Signing time:             Mon 02 Jan 2023 01:35:50 +0000
ROA not before:           Mon 02 Jan 2023 01:35:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8987
IP address blocks:        193.24.42.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:e1:4d:95:9f:73:b9:0b:87:37:dd:1b:50:4f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
        Validity
            Not Before: Jan  2 01:35:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8942d46d6f5da49d19afacfe0c39ad3c9cc6852b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:c9:bc:e6:a0:0d:a2:a1:e5:bf:96:cb:f5:
                    13:b4:dc:38:9d:7f:f9:49:8b:b0:68:fc:0a:54:38:
                    7d:e5:dd:e6:12:23:c4:68:05:71:96:54:5d:e0:95:
                    ad:46:51:c0:0d:2b:c3:a0:09:34:8f:91:1d:0b:c7:
                    24:34:f4:4b:fe:65:87:c8:d9:e7:c4:c9:72:78:00:
                    2f:85:37:a0:48:22:cb:73:bb:65:b2:8d:53:c9:72:
                    3d:64:d2:c8:4e:c7:7b:0c:6d:01:84:0f:05:51:52:
                    03:d9:6a:6f:fc:76:0b:e1:f0:ec:22:26:fa:19:4d:
                    0e:1a:9d:c6:ea:1f:28:53:58:53:ae:8a:37:59:a7:
                    e5:63:72:6c:f1:96:15:b0:f2:2b:de:5e:a7:77:d4:
                    04:25:88:ce:91:4a:c2:e7:f3:56:b0:24:33:6b:17:
                    f2:f0:87:fa:ba:1a:26:b0:1d:91:5a:78:1f:8a:b6:
                    73:f8:96:68:05:0f:4a:5c:36:a0:a3:11:c7:c4:6d:
                    b9:21:a6:c1:ad:c7:2f:d2:d3:f6:7a:34:3f:a8:fc:
                    88:6d:60:69:e7:85:3a:c7:a6:1c:1f:63:cc:fa:39:
                    0c:ee:1d:7f:6f:c7:28:34:ae:c8:4f:68:60:4e:7b:
                    d2:50:85:38:ac:43:e6:b9:10:de:41:4a:a5:8c:74:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:42:D4:6D:6F:5D:A4:9D:19:AF:AC:FE:0C:39:AD:3C:9C:C6:85:2B
            X509v3 Authority Key Identifier:
                keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/iULUbW9dpJ0Zr6z-DDmtPJzGhSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:14:23:f7:15:8b:8b:b3:f2:b5:ff:ef:6c:8f:98:4f:13:
         ab:77:8e:8a:72:32:fd:21:c3:09:65:d8:c2:bd:b3:6c:33:7c:
         41:a0:19:5d:db:07:f3:a0:3d:62:09:3b:9c:24:b6:06:d6:20:
         89:ed:c2:f6:48:f9:ea:f1:5d:d4:31:15:15:53:23:0b:6c:69:
         5c:33:34:cd:83:86:46:c6:75:32:e6:90:25:9b:00:e7:64:0b:
         a5:b9:27:78:90:2d:69:f4:53:b8:25:39:6f:36:2e:c6:40:57:
         1b:16:cc:52:4f:4c:06:a4:ac:f9:e9:72:92:f5:02:73:17:c0:
         c9:01:77:95:ef:e5:ef:e5:09:a8:ed:00:4a:eb:65:64:c1:da:
         59:ab:12:ed:1c:a0:b4:ec:98:c3:2c:3d:38:c7:df:72:9b:51:
         21:bc:33:c5:b3:a9:0f:f5:f4:4f:be:63:e4:e7:4f:ff:fc:c4:
         29:f5:b1:a2:a6:49:10:59:71:8e:07:60:61:c8:ae:bf:e4:1f:
         37:6b:2c:36:e8:25:8c:27:1e:b3:ec:7d:97:3e:92:3c:dd:b8:
         3f:37:8b:2f:22:ae:58:be:df:90:3b:3d:58:14:a2:33:07:c5:
         d5:d5:3e:4f:c3:a4:52:6f:1c:6f:5a:72:8b:09:62:9d:2e:1a:
         81:4f:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org