Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RhHHnK8bASTVIb-Mqz3hsbkF-mU.roa
File:                     RhHHnK8bASTVIb-Mqz3hsbkF-mU.roa (raw, json)
Hash identifier:          lXlBdm87SayaThPEXkhW0fgQVyGUOPzTVqoGIYbIAI4=
Subject key identifier:   46:11:C7:9C:AF:1B:01:24:D5:21:BF:8C:AB:3D:E1:B1:B9:05:FA:65
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       0191C6E46685E86AC515855B54F467D74C3F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RhHHnK8bASTVIb-Mqz3hsbkF-mU.roa
Signing time:             Fri 06 Sep 2024 10:32:22 +0000
ROA not before:           Fri 06 Sep 2024 10:32:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215998
IP address blocks:        93.113.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Sep 2024 14:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c6:e4:66:85:e8:6a:c5:15:85:5b:54:f4:67:d7:4c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Sep  6 10:32:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4611c79caf1b0124d521bf8cab3de1b1b905fa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:77:26:8e:9c:7a:b5:1b:f2:13:8c:18:66:
                    44:83:0a:7e:5a:27:fd:ed:24:88:0d:8b:bd:2a:77:
                    43:ae:b3:38:6a:39:1c:82:5f:8d:d8:21:73:b9:9e:
                    d4:3c:41:38:51:6e:71:59:08:d0:10:21:e2:5e:fc:
                    ac:03:50:e5:de:f9:b1:76:4d:3d:10:aa:1d:b2:d1:
                    2b:41:68:b5:2b:7d:0d:87:36:dd:f9:33:b4:34:23:
                    cc:2d:61:32:c0:6e:55:bb:9f:68:2c:20:e4:65:bb:
                    80:c8:87:9b:33:8a:d9:9b:60:be:cf:04:a4:1e:0c:
                    d5:b2:a9:98:99:2f:c9:d3:c9:be:77:0b:bf:0a:bf:
                    11:11:9a:3f:14:38:c8:32:ad:f1:1f:37:86:b5:af:
                    7d:56:1c:d2:33:47:0e:e0:82:e4:32:2e:43:1a:36:
                    4d:9f:76:cf:df:8f:9e:e1:16:4f:d9:93:7f:cf:bb:
                    b5:6d:e2:34:eb:2d:48:4a:c5:9f:02:8a:59:4d:e7:
                    83:de:9c:e3:80:d2:de:62:e6:22:34:24:77:70:fa:
                    60:7a:13:c5:95:c1:f4:0b:ca:a9:df:02:8a:1a:49:
                    05:18:fd:aa:77:a3:9a:1b:ec:39:59:d4:c0:de:e1:
                    74:27:42:31:66:11:90:d2:b3:01:63:6c:65:2a:a1:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:C7:9C:AF:1B:01:24:D5:21:BF:8C:AB:3D:E1:B1:B9:05:FA:65
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/RhHHnK8bASTVIb-Mqz3hsbkF-mU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a1:77:6b:a3:84:75:ff:97:e9:4c:78:df:6c:62:12:fa:6f:
         92:48:d6:e0:f1:84:87:9c:7e:80:e4:1b:db:92:01:d5:67:42:
         c4:5f:4d:3e:9f:d0:cf:4b:94:e2:5b:95:6a:3c:21:af:67:ec:
         22:01:98:e9:52:d1:34:87:eb:b2:99:c8:12:8b:ba:c7:fc:1a:
         07:98:d0:c2:af:c0:a2:61:eb:31:63:32:54:41:b0:21:64:43:
         00:10:13:58:4c:0c:85:c8:8d:1d:6c:51:6f:85:d1:2a:06:e9:
         82:88:fc:13:38:d8:31:9b:a4:db:78:49:1c:7a:80:3c:1a:93:
         55:79:6b:45:20:71:c8:06:13:1b:3a:e7:87:55:b3:9a:6e:44:
         dc:c8:e1:51:a7:41:1a:67:1a:9c:97:08:43:e6:d7:f8:b2:68:
         31:a3:b3:f7:b4:88:33:68:9e:be:1b:dd:41:b0:5f:d4:50:4e:
         42:22:72:c5:9a:e0:bf:32:1c:e6:42:8b:27:65:2a:41:5e:bf:
         de:f9:a7:8f:cd:2c:64:94:2e:86:00:e5:76:9c:f5:e1:4c:f5:
         21:67:b9:ae:c7:72:ea:3b:d1:b9:fe:29:35:88:a5:44:c9:16:
         98:18:ea:0d:2f:90:fd:32:49:3c:55:e0:54:ed:fc:00:0f:0f:
         80:19:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 18:03:29 2024 by rpki-client on console-fra.rpki-client.org