Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/m0k__tK9lt-4QbCvBpjmuK6q_A8.roa
File:                     m0k__tK9lt-4QbCvBpjmuK6q_A8.roa (raw, json)
Hash identifier:          LO+dRrVj4Mp7ZSjbJjQk4TBK3DThgTx9iBbneu6iExs=
Subject key identifier:   9B:49:3F:FE:D2:BD:96:DF:B8:41:B0:AF:06:98:E6:B8:AE:AA:FC:0F
Certificate issuer:       /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial:       019201ED687809DF97422C9EE847A195380A
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/m0k__tK9lt-4QbCvBpjmuK6q_A8.roa
Signing time:             Tue 17 Sep 2024 21:39:48 +0000
ROA not before:           Tue 17 Sep 2024 21:39:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215232
IP address blocks:        95.164.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 14:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:01:ed:68:78:09:df:97:42:2c:9e:e8:47:a1:95:38:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
        Validity
            Not Before: Sep 17 21:39:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9b493ffed2bd96dfb841b0af0698e6b8aeaafc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:91:d8:fc:5b:74:a2:b2:7a:f7:d3:83:3b:
                    4b:c4:49:7a:a2:5f:dd:ba:c8:bd:60:54:fb:0b:84:
                    7e:84:33:40:78:28:82:ef:a3:b8:5b:6d:aa:2d:7d:
                    1d:8b:d2:10:f0:88:7e:0e:d3:5a:85:a5:92:a5:d2:
                    da:77:bc:6e:bb:ff:d9:4a:4b:aa:06:3c:de:b7:d8:
                    e1:7f:b0:1c:31:22:3e:79:d7:23:27:6f:fc:44:19:
                    6e:ed:e7:93:8b:7b:6d:45:45:23:57:2e:37:b7:e0:
                    e3:d4:29:7c:66:21:ca:97:57:f4:39:44:2f:7f:2c:
                    3e:15:c4:13:7c:6b:2f:ea:05:1c:19:42:4d:76:36:
                    5a:8e:2f:2c:c8:71:c8:ce:a6:a9:42:fc:b9:5b:45:
                    a0:48:9d:fa:0f:9f:d2:67:58:8f:1b:0f:42:4e:b9:
                    34:a5:1e:b6:37:e3:90:89:de:2f:7a:df:d3:ae:d1:
                    31:b0:56:d2:4a:19:92:3f:35:1f:8d:c7:39:27:93:
                    35:1b:35:33:6a:ad:08:9e:f9:59:eb:d0:86:78:8d:
                    bf:12:c4:50:2d:a1:51:eb:29:b9:7f:88:f8:64:49:
                    2e:62:d0:fc:50:6b:8e:ff:0a:9a:ee:06:29:b7:a4:
                    43:75:85:86:7f:6f:a1:3c:3f:5c:e4:8c:77:a1:86:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:3F:FE:D2:BD:96:DF:B8:41:B0:AF:06:98:E6:B8:AE:AA:FC:0F
            X509v3 Authority Key Identifier:
                keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/m0k__tK9lt-4QbCvBpjmuK6q_A8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.164.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b7:90:d4:b0:e3:5e:30:7e:f2:69:1c:b0:7c:8b:f0:e6:64:
         b2:4c:2d:e0:d0:81:2f:58:6c:7c:d9:f0:23:12:57:1e:92:fd:
         e6:1e:86:f8:4c:a2:22:8f:79:4f:77:11:2c:be:e3:92:4f:85:
         a5:e7:62:0b:48:a0:ae:90:01:c8:0d:75:6b:f6:5e:97:2a:2b:
         9b:e7:86:6e:ac:46:b0:95:e2:c9:d3:9f:bc:46:9e:98:d3:90:
         b0:4d:8b:d0:4c:15:b2:49:bb:b0:44:b3:77:d1:17:0d:09:8e:
         60:9f:ba:51:30:07:a5:12:71:df:24:94:72:a6:19:fb:b8:b7:
         3a:a3:ff:22:27:95:1e:82:ed:b0:96:14:99:ea:e5:e9:57:d7:
         53:b7:8c:a4:9e:ef:ec:3b:15:28:24:f1:5a:ca:5e:85:b6:04:
         b8:ab:57:d2:4e:17:c9:ac:10:7d:36:e4:83:95:76:fd:bc:84:
         df:d2:00:34:e3:79:01:3e:fa:82:ab:d3:30:31:47:e2:d7:39:
         7b:5a:e3:e9:3a:9b:a3:73:f0:30:dd:76:be:54:f5:df:cb:1c:
         e5:8d:dd:f0:22:a4:46:df:c1:d3:d5:50:fb:4e:85:bf:d0:9e:
         cb:0d:3e:6c:1e:53:d8:5b:13:d8:8c:77:22:80:63:a5:a2:98:
         13:dd:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:31:47 2024 by rpki-client on console-ams.rpki-client.org