Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa
File:                     MWuqAuNERw-26iybqwtLrzS9aXI.roa (raw, json)
Hash identifier:          uRnwyU8rBimFp0yGuknnqGxma6fkF1bwiv2DGiikUOk=
Subject key identifier:   31:6B:AA:02:E3:44:47:0F:B6:EA:2C:9B:AB:0B:4B:AF:34:BD:69:72
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       01856BC105B036FE4A1604E7B55B0A984BF1
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa
Signing time:             Sun 01 Jan 2023 05:14:50 +0000
ROA not before:           Sun 01 Jan 2023 05:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213113
IP address blocks:        93.177.80.0/24 maxlen: 24
                          2a0a:d981::/32 maxlen: 32
                          2a0a:d980::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c1:05:b0:36:fe:4a:16:04:e7:b5:5b:0a:98:4b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Jan  1 05:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=316baa02e344470fb6ea2c9bab0b4baf34bd6972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:f8:f7:1a:2c:35:d3:dc:ba:01:a8:ce:57:
                    15:65:4d:ac:9a:3d:d0:a4:dc:9a:6b:7d:99:f9:e6:
                    df:22:0f:da:07:4c:2c:47:42:35:ab:b4:49:9c:96:
                    87:6d:40:7e:86:62:c8:d8:2e:26:55:4d:32:1e:ef:
                    46:9a:fd:f2:54:45:84:5c:17:95:a4:4a:53:94:67:
                    e9:a9:9a:74:4a:e3:59:d1:d8:a4:ff:b1:3c:26:54:
                    ca:76:6c:49:84:2f:62:49:76:08:64:7b:98:05:8b:
                    3c:91:c0:fe:bc:0f:e2:bb:3d:70:a6:89:e1:ae:f7:
                    71:46:cd:2e:ed:b0:6e:23:0f:19:d2:4d:f9:51:67:
                    2c:1d:07:99:f9:48:84:8c:4d:e2:55:44:43:a9:e0:
                    75:6a:72:5f:92:15:09:79:b8:99:52:a9:39:43:5d:
                    43:e8:c8:ec:88:3f:54:c8:de:25:31:4a:f6:b3:30:
                    1a:b6:7c:bb:2a:1d:60:ca:43:d1:3a:a6:51:c6:31:
                    a6:88:fb:fa:ec:7d:e5:ec:73:ed:33:6b:28:d1:73:
                    70:1d:35:c1:6a:b3:12:ee:2a:63:54:83:d9:c2:dc:
                    99:f1:f4:5a:fd:de:0d:42:03:89:29:81:fe:71:36:
                    b7:89:b4:3d:be:22:52:52:8f:8b:cd:af:53:72:ee:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6B:AA:02:E3:44:47:0F:B6:EA:2C:9B:AB:0B:4B:AF:34:BD:69:72
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/MWuqAuNERw-26iybqwtLrzS9aXI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.80.0/24
                IPv6:
                  2a0a:d980::/31

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:29:2e:bb:05:4e:27:60:5f:d8:4b:5c:0e:e9:81:e3:cb:
         0a:d0:75:9c:4b:da:7e:f9:51:87:8e:dc:0c:d0:e6:b5:c6:43:
         ea:12:41:67:24:fc:c4:02:62:51:27:ba:38:9b:b7:82:75:c4:
         95:2e:2e:00:b4:31:ae:c5:ac:fe:78:df:b3:b9:48:51:00:da:
         3e:0c:f0:ae:fb:5f:e1:65:30:c5:7f:ce:55:20:10:e9:c3:de:
         b0:a5:ac:8d:a7:bb:cd:39:cb:bd:1d:91:c8:47:20:75:22:6f:
         00:e7:5c:ee:43:45:f7:a8:7e:b2:2f:19:32:10:14:fe:57:25:
         07:bc:1b:bd:92:2a:70:cb:28:c1:a8:c0:ff:2d:89:5a:1d:6e:
         0d:f1:3e:87:3b:6f:89:a9:d9:b1:c3:1e:c4:5f:38:8c:f1:87:
         4e:40:2d:fc:44:38:ea:28:89:7b:56:c2:d8:7f:1c:40:87:e4:
         99:35:2e:b7:01:78:9b:43:fa:78:8c:e4:81:4c:e7:8d:39:07:
         44:f7:e6:56:ce:00:15:36:e6:24:a7:31:c9:da:dd:0b:1a:fa:
         8c:85:40:5e:59:16:7f:9f:38:a2:0a:24:c2:ef:75:1c:fe:71:
         e3:12:f7:19:b7:19:8f:91:ed:63:4d:67:17:98:89:83:cc:49:
         f2:b8:e7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:21 2024 by rpki-client on console-ams.rpki-client.org