Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/fyuPxEUEmTvZWY6jVMNyhkE2Fxg.roa
File:                     fyuPxEUEmTvZWY6jVMNyhkE2Fxg.roa (raw, json)
Hash identifier:          z0qZklSQt3bifzL1UTsmGA1InkHSZCuVwuNQvhagPwM=
Subject key identifier:   7F:2B:8F:C4:45:04:99:3B:D9:59:8E:A3:54:C3:72:86:41:36:17:18
Certificate issuer:       /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial:       01856EAFEA3A82CA27EDEC2EA05F21A6A4C4
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/fyuPxEUEmTvZWY6jVMNyhkE2Fxg.roa
Signing time:             Sun 01 Jan 2023 18:55:00 +0000
ROA not before:           Sun 01 Jan 2023 18:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50423
IP address blocks:        193.105.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:af:ea:3a:82:ca:27:ed:ec:2e:a0:5f:21:a6:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
        Validity
            Not Before: Jan  1 18:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f2b8fc44504993bd9598ea354c3728641361718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:fd:9f:af:25:79:ca:a5:03:eb:a9:bb:d1:
                    14:2f:9a:9c:8d:eb:ff:b0:b9:7a:7e:97:b1:e3:78:
                    a4:58:6d:05:f5:74:06:21:0b:9f:e7:72:12:a0:94:
                    e4:51:fe:04:a4:70:08:d8:f8:40:cf:ef:1b:41:09:
                    c9:b9:9e:96:75:08:9b:15:64:ef:5a:b5:5b:df:db:
                    6c:a2:76:ba:36:0e:a7:85:19:70:b4:4c:76:fd:20:
                    42:1a:65:28:c0:ee:92:47:33:97:ca:be:b4:07:d2:
                    c3:42:c9:8c:36:45:1d:02:80:6f:28:29:45:e6:ee:
                    69:fe:92:82:e7:e8:70:3e:3b:15:e1:10:a8:1d:41:
                    f2:c6:a6:62:ac:ef:5c:b5:71:e5:82:a0:67:60:f9:
                    31:8b:fe:00:47:3d:e7:79:4c:90:bf:97:5a:bc:88:
                    02:71:37:11:da:c3:12:13:c6:b8:b2:ec:8a:1a:09:
                    c7:27:bb:ba:16:30:8e:2c:1f:cb:a2:33:39:8f:9b:
                    99:f0:4c:cc:8b:f4:13:1a:06:7b:a5:62:c3:d9:11:
                    c8:62:4d:25:05:68:93:74:69:f1:f7:1d:8d:50:82:
                    13:22:f3:4a:3c:9b:05:00:91:4b:bc:56:1d:88:53:
                    27:3a:2d:8b:c0:dd:b4:4e:2d:72:21:cd:87:19:5c:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:8F:C4:45:04:99:3B:D9:59:8E:A3:54:C3:72:86:41:36:17:18
            X509v3 Authority Key Identifier:
                keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/fyuPxEUEmTvZWY6jVMNyhkE2Fxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:04:87:db:0f:5c:fd:7e:2a:83:28:66:38:91:86:e0:db:85:
         75:41:f2:62:4a:60:e2:32:0f:f5:31:fa:00:d2:35:06:d5:de:
         bb:5a:bb:3e:c8:6c:a8:ce:97:35:bf:c3:ca:42:0f:2d:5d:14:
         ac:c1:0a:82:db:d3:6d:18:d3:a0:7c:b2:0d:d2:a8:8d:77:af:
         fa:0d:ce:bf:b5:46:41:d8:a3:d8:59:d9:97:4c:62:21:bc:f0:
         a7:ac:a0:e8:0f:59:2e:90:ec:bf:ae:5f:de:84:04:8b:13:9f:
         8f:c8:85:6e:2d:e2:c3:31:86:fa:87:e9:bc:30:14:29:04:bf:
         a3:24:9c:b7:80:56:5a:13:ed:f1:c4:54:cb:d7:6e:9d:7f:11:
         3d:70:83:4b:18:d2:af:d9:94:44:0b:00:37:bc:68:93:d3:0d:
         a8:e9:61:5a:f5:95:bb:39:7d:46:ec:12:17:4a:30:c5:9d:bd:
         53:f7:a3:1b:7e:62:9e:3d:bb:26:4d:af:24:b1:27:14:e3:0a:
         ff:49:ef:0e:c0:83:98:a5:b5:40:90:03:54:ec:cd:7e:b8:bb:
         cc:f8:5e:df:eb:ed:a3:15:44:96:79:60:bb:07:26:fc:b7:a0:
         54:25:56:92:76:6d:00:32:b1:dc:82:6c:58:35:bd:9c:6a:35:
         70:22:7e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org