Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/sqvvv9FJeMKKuUEvpDbchENOiAA.roa
File:                     sqvvv9FJeMKKuUEvpDbchENOiAA.roa (raw, json)
Hash identifier:          lFqgh7kkpIDtK5TnEqvareK4qNsfibf0l2AkvwxVdb8=
Subject key identifier:   B2:AB:EF:BF:D1:49:78:C2:8A:B9:41:2F:A4:36:DC:84:43:4E:88:00
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       01881F760975357A9D931A9CE4CF9BDB8D0D
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/sqvvv9FJeMKKuUEvpDbchENOiAA.roa
Signing time:             Mon 15 May 2023 12:50:09 +0000
ROA not before:           Mon 15 May 2023 12:50:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49614
IP address blocks:        109.105.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Jun 2023 10:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1f:76:09:75:35:7a:9d:93:1a:9c:e4:cf:9b:db:8d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: May 15 12:50:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2abefbfd14978c28ab9412fa436dc84434e8800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:39:4e:b0:fb:64:45:2d:cc:71:ea:05:a0:50:
                    64:15:de:5c:76:27:c3:f7:3e:af:f7:80:52:57:7f:
                    f5:f1:9c:21:7a:2a:c8:04:04:a9:37:ad:23:1a:cf:
                    f4:ce:4a:8d:54:db:ae:8d:26:a6:04:f8:59:77:ee:
                    bd:ed:a0:cc:4b:e3:8f:46:aa:7c:12:1b:de:1b:12:
                    40:47:23:6a:3c:53:09:cb:f5:12:cb:c6:e0:db:46:
                    e9:e7:70:05:4d:cf:96:fd:0e:b7:ae:0a:5c:1a:dc:
                    2b:30:78:cb:22:2b:28:e9:c0:40:44:27:fa:4d:77:
                    03:73:06:97:a9:f2:76:27:12:41:ee:20:0c:2e:a5:
                    9d:98:79:22:16:b5:5e:98:90:f7:7d:38:54:f1:4b:
                    11:1a:2d:c6:59:d1:6b:71:7e:70:0a:92:b0:3e:17:
                    15:af:cc:24:ad:4f:c7:f5:f6:ce:7d:2a:9b:da:1f:
                    6b:57:46:ac:94:e2:2c:08:e5:b1:1c:37:7c:bc:dd:
                    e1:f4:a3:48:d0:e0:23:86:ab:ea:fa:94:b2:9e:ae:
                    7c:20:7e:23:55:ac:d8:f2:41:19:d0:e2:57:7f:5a:
                    a9:52:db:11:05:5c:29:fb:f7:51:80:9a:c0:27:e7:
                    ac:b9:f9:6d:89:43:ce:10:31:9b:7e:82:53:79:32:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AB:EF:BF:D1:49:78:C2:8A:B9:41:2F:A4:36:DC:84:43:4E:88:00
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/sqvvv9FJeMKKuUEvpDbchENOiAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.105.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:e1:e1:5b:61:33:3f:18:f9:12:9c:dd:cd:47:9d:35:14:
         8a:55:ec:65:af:fe:9a:95:93:bd:77:da:89:58:02:f9:01:17:
         ad:58:ce:29:4f:01:9c:a0:a3:e4:f9:9f:6c:64:10:6e:d1:ff:
         77:13:cf:5b:19:f6:a9:f1:86:0a:dd:4f:dd:2c:aa:f0:46:bc:
         5c:ed:81:3c:da:65:94:ae:88:b0:09:c9:4c:6f:db:bd:67:94:
         da:e0:c2:4a:f6:e9:cc:93:cd:c1:f6:71:7a:32:db:b8:b6:21:
         6c:21:d3:45:af:07:c0:a7:8d:17:64:2a:6f:bc:f6:de:b0:fe:
         8e:69:40:eb:20:dd:e0:7d:2b:95:cb:65:42:76:4f:58:df:fc:
         0c:a5:ac:3e:7c:ff:25:04:9f:5b:a0:b4:66:f1:25:7e:fa:53:
         0f:dd:4f:fe:7c:87:59:86:31:81:46:51:45:58:11:83:4e:cf:
         7d:63:46:d2:30:b7:f4:b0:4a:16:46:5d:01:c3:16:cf:de:46:
         8a:d7:0c:62:b1:8d:d9:d6:99:e3:58:f6:1a:b9:1f:35:b8:17:
         f5:6d:1a:64:c0:49:60:f4:22:a2:2d:23:19:b1:f7:01:86:20:
         77:c6:84:e8:df:1e:61:79:b1:53:05:1a:05:ae:43:04:98:19:
         f0:02:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org