Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I08vdcu2_VnylIJtO5qKO7bwyZg.roa
File:                     I08vdcu2_VnylIJtO5qKO7bwyZg.roa (raw, json)
Hash identifier:          3dch9fpqeRMWaCm8w45uP9eTBcxqhJemw4kmhg6FqWE=
Subject key identifier:   23:4F:2F:75:CB:B6:FD:59:F2:94:82:6D:3B:9A:8A:3B:B6:F0:C9:98
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       01888CA520811E496F56DB1E35CBC1762703
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I08vdcu2_VnylIJtO5qKO7bwyZg.roa
Signing time:             Mon 05 Jun 2023 17:40:11 +0000
ROA not before:           Mon 05 Jun 2023 17:40:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24875
IP address blocks:        93.114.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8c:a5:20:81:1e:49:6f:56:db:1e:35:cb:c1:76:27:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jun  5 17:40:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=234f2f75cbb6fd59f294826d3b9a8a3bb6f0c998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:a9:bc:f0:9b:f4:0d:b3:f6:2c:61:36:31:
                    9c:ce:0f:59:9b:84:4c:39:b8:c9:a0:3b:89:bb:81:
                    87:38:9f:77:94:30:3a:38:76:a1:89:f0:d7:1b:83:
                    47:d5:1a:66:0d:ce:b9:d9:03:9b:78:e0:b2:02:fb:
                    e6:d1:f6:d7:64:17:9d:d8:f7:5a:2b:01:57:58:77:
                    75:9e:c2:06:f9:66:c8:3f:60:4b:f7:6f:2b:b9:1e:
                    38:3b:95:3b:f1:c4:3f:d6:c9:82:14:03:a7:37:91:
                    6d:82:92:67:59:8b:38:90:39:0c:98:c0:e0:48:9a:
                    f5:d1:f7:44:1e:ae:a1:a7:1f:e4:e9:f2:d3:92:48:
                    f9:3c:c1:41:e2:a5:15:71:9b:6a:67:56:b3:a4:ac:
                    b8:45:95:32:ea:ed:94:34:ea:cd:86:12:ab:5a:70:
                    b7:c2:cb:69:55:1c:79:1c:91:4a:cc:19:d5:d1:24:
                    fa:0e:f1:f9:6e:d5:ca:38:12:0a:34:83:0b:a1:e4:
                    77:70:17:a0:f6:de:16:87:f9:d5:88:54:9f:96:35:
                    af:ef:7a:90:20:18:51:41:74:9d:bb:66:fe:5d:ad:
                    82:1a:59:19:09:18:5d:7f:01:6d:84:85:e3:b6:f4:
                    c2:03:8d:c7:c5:44:7f:3e:c7:54:79:f0:10:74:dd:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4F:2F:75:CB:B6:FD:59:F2:94:82:6D:3B:9A:8A:3B:B6:F0:C9:98
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I08vdcu2_VnylIJtO5qKO7bwyZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:d8:d5:96:0d:a6:7b:01:38:56:0e:40:f0:11:24:33:b3:
         af:72:40:df:cc:27:3c:4f:f3:36:15:75:f4:61:d2:8e:24:48:
         e8:d9:2f:72:84:70:0c:70:10:de:79:7c:12:ef:ca:d8:03:6f:
         e9:8a:8e:e3:b3:72:82:e9:fb:5c:35:d8:97:ac:de:35:21:96:
         aa:5b:f4:0b:26:4b:a0:17:99:5d:61:46:dc:70:04:61:15:53:
         ce:09:9a:b2:ea:2d:2a:1b:fb:4d:28:5a:82:f9:b9:e7:a0:e6:
         7d:16:47:27:64:e6:9d:c0:12:60:9f:51:93:6c:1e:84:d5:4f:
         1c:1f:b7:5c:21:ec:c5:7e:f5:aa:ed:65:9a:b4:77:4b:79:53:
         9b:53:26:33:d3:ef:06:b8:ae:23:5c:2c:3a:9b:96:5d:80:26:
         e4:26:a0:3e:a3:9b:36:fd:6e:5a:17:64:ed:36:ea:6c:cc:e8:
         4c:34:0d:cb:03:63:c8:26:67:3c:4e:4a:0e:7c:20:d7:89:36:
         b7:a7:f2:d2:4f:e0:08:42:4e:66:97:95:f7:14:20:56:c8:86:
         29:c0:d3:13:0e:96:4b:d5:a3:b3:c7:b3:b6:8d:76:74:49:d3:
         39:6d:6a:7d:23:9b:36:59:c1:81:bb:e9:dc:0d:ee:10:61:f5:
         d3:cc:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 20:35:09 2023 by rpki-client on console-fra.rpki-client.org