Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IMEy55rMYLjNRX9s2XnsNM8HX0o.roa
File:                     IMEy55rMYLjNRX9s2XnsNM8HX0o.roa (raw, json)
Hash identifier:          q0YIcgG24YjFBHEZXauwo1kfti/yFh61xzOqLbZqV7o=
Subject key identifier:   20:C1:32:E7:9A:CC:60:B8:CD:45:7F:6C:D9:79:EC:34:CF:07:5F:4A
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       0185CF2D67115F22E048634509C3E319E10E
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IMEy55rMYLjNRX9s2XnsNM8HX0o.roa
Signing time:             Fri 20 Jan 2023 12:35:37 +0000
ROA not before:           Fri 20 Jan 2023 12:35:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12695
IP address blocks:        93.113.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:cf:2d:67:11:5f:22:e0:48:63:45:09:c3:e3:19:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan 20 12:35:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=20c132e79acc60b8cd457f6cd979ec34cf075f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:6d:4b:de:95:39:84:00:a7:51:be:32:74:
                    85:86:00:99:e4:77:7d:57:87:5c:ff:98:82:4b:1d:
                    7c:17:62:ee:1b:95:9f:20:cb:22:ca:c5:e9:51:c1:
                    1c:07:89:36:21:89:20:99:bc:3f:b0:ba:bd:56:70:
                    c0:58:18:ae:df:5e:3e:30:30:b0:b0:a1:d4:f8:d3:
                    a4:69:06:4a:b1:4f:fa:e5:7a:ca:41:2a:50:62:a9:
                    49:42:13:b3:dd:60:d3:10:fa:91:00:e6:38:73:5a:
                    59:6a:48:1a:86:4a:22:47:04:32:7b:83:66:a5:62:
                    ee:7f:5a:54:45:fb:8c:af:50:8e:0e:9a:63:da:44:
                    b3:99:d7:1c:30:53:e3:ee:31:9f:b6:05:5f:77:d9:
                    4f:f0:0a:e3:7a:32:4a:14:6a:91:82:9a:e1:37:54:
                    21:a2:4a:83:10:95:ec:31:20:7a:cc:82:2b:7a:ee:
                    7f:51:b4:2e:4d:dd:eb:72:cc:2b:f7:cc:d5:63:90:
                    3d:c3:75:2d:b0:d1:1f:8e:84:69:7e:dc:e9:5d:f3:
                    ac:f6:82:52:08:5c:ca:d9:24:b9:4d:ad:b9:1f:58:
                    b8:b8:f6:e8:20:6c:07:94:22:aa:e6:63:e6:b7:29:
                    d5:8e:47:ef:49:b1:4e:6b:53:3b:f8:95:1e:46:e7:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C1:32:E7:9A:CC:60:B8:CD:45:7F:6C:D9:79:EC:34:CF:07:5F:4A
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IMEy55rMYLjNRX9s2XnsNM8HX0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:88:93:64:d3:2e:61:b2:d5:4e:e2:e0:7a:37:d3:d2:36:33:
         0d:ee:a1:99:01:18:64:80:a6:80:5f:26:57:4c:fb:12:94:a8:
         6f:55:77:db:25:d7:4a:02:62:29:cd:db:d4:d0:35:02:f8:f0:
         e8:06:00:81:6c:c1:2e:a6:32:5b:7e:89:ff:ed:6e:83:8e:c7:
         3e:db:8e:15:bb:94:be:5a:41:7b:8b:60:0e:03:83:86:c3:f8:
         11:db:7e:63:b8:3c:6e:9f:59:01:d1:c3:8b:b2:a1:5a:af:ff:
         47:43:cc:6d:23:49:4a:22:cc:f7:b7:c5:d8:d4:64:bb:4b:96:
         28:7e:13:a8:48:45:f1:fe:b0:00:ff:ad:3f:b7:c0:80:24:d0:
         67:f4:9f:8c:8a:b7:e0:76:19:ac:70:5b:e8:10:a9:26:77:ec:
         27:ab:0c:9f:99:a4:54:97:74:62:38:5a:03:00:9c:bf:62:54:
         0e:87:7e:68:08:3d:90:c5:35:39:85:4f:ea:bd:ab:6f:43:10:
         57:08:8a:6f:28:32:20:82:a2:cd:42:b2:70:5c:37:e1:10:71:
         f6:03:ba:cf:52:aa:c1:bb:19:81:1e:0c:80:7f:b7:0f:21:65:
         b5:af:b3:8a:81:c3:79:89:08:98:f4:6d:4b:f2:3b:59:36:30:
         43:a7:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org