Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/IuCZTWiBBCz2txXtvX5By7ytTaU.roa
File:                     IuCZTWiBBCz2txXtvX5By7ytTaU.roa (raw, json)
Hash identifier:          g7LRszOoY+7Q81oI0KwafYFeXPjXuYESb0k4imjuJac=
Subject key identifier:   22:E0:99:4D:68:81:04:2C:F6:B7:15:ED:BD:7E:41:CB:BC:AD:4D:A5
Certificate issuer:       /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial:       018CC49355D15095E05C4A47FEC17E071B7D
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/IuCZTWiBBCz2txXtvX5By7ytTaU.roa
Signing time:             Mon 01 Jan 2024 10:30:39 +0000
ROA not before:           Mon 01 Jan 2024 10:30:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2914
IP address blocks:        93.93.96.0/22 maxlen: 24
                          93.93.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Apr 2024 07:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:55:d1:50:95:e0:5c:4a:47:fe:c1:7e:07:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
        Validity
            Not Before: Jan  1 10:30:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=22e0994d6881042cf6b715edbd7e41cbbcad4da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:1c:ce:89:a4:1e:cc:5f:46:8b:f7:fe:94:
                    b3:88:85:93:5c:86:bd:5b:51:48:45:ff:fb:bc:96:
                    95:f7:46:c6:67:d8:73:30:1d:82:b0:a1:c4:93:5b:
                    57:6a:13:6f:fc:d5:57:0b:62:16:fb:bb:d0:2c:67:
                    75:44:41:5a:4e:80:9f:b7:ff:04:0f:ee:00:1d:a7:
                    0f:3a:b2:21:17:dd:7a:7a:0c:c4:3c:0d:e0:93:1a:
                    0b:0e:78:9f:0d:1b:49:ed:eb:9f:c0:cf:f7:cb:17:
                    c2:17:13:c1:54:c4:ea:cd:df:03:16:48:64:b3:de:
                    51:80:bb:44:c1:8a:2d:b9:09:e1:ca:bd:0c:aa:15:
                    5f:7c:a9:12:d6:00:ac:5b:ca:46:44:e9:92:b5:3d:
                    8f:d9:fd:93:90:e2:19:d7:1c:0c:36:f4:cd:bf:fe:
                    6d:e5:ef:ae:08:5c:64:7e:40:06:bc:67:8d:29:35:
                    77:3d:63:5f:13:96:aa:d3:9f:94:3b:6b:a2:6c:5f:
                    c6:ef:ad:21:d0:76:e3:23:37:dc:c3:6d:d9:cb:d6:
                    20:b2:e0:14:9a:15:01:f3:24:54:ef:45:27:b8:83:
                    8c:5d:4d:61:9e:2b:57:46:37:61:9d:b3:f9:d9:12:
                    94:d5:79:62:75:0e:8e:2f:49:6c:fd:e1:b4:84:21:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E0:99:4D:68:81:04:2C:F6:B7:15:ED:BD:7E:41:CB:BC:AD:4D:A5
            X509v3 Authority Key Identifier:
                keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/IuCZTWiBBCz2txXtvX5By7ytTaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:10:99:c3:41:4b:41:fa:bc:13:b4:c6:36:05:2c:8f:ca:f2:
         0a:c5:68:8d:bc:fc:04:8f:e7:16:b0:d3:dd:aa:60:27:ee:d7:
         01:dc:4e:74:28:45:bf:7a:02:56:63:27:9b:3f:71:ca:42:46:
         49:8d:74:bb:16:d1:11:7e:cc:7a:6f:e2:3d:b9:79:88:66:6f:
         23:f0:4d:c2:27:71:b0:59:c5:e0:bf:f3:b1:e5:a0:62:3a:af:
         79:6d:3d:e0:60:cc:34:00:c3:45:7c:bb:91:4e:b8:70:a0:34:
         ae:00:2a:8d:b1:8e:d9:1b:53:b3:32:f1:8b:45:be:9b:0d:e9:
         39:7f:c9:89:4e:67:58:87:8f:b7:ae:39:90:00:70:b2:65:cf:
         67:69:8e:c4:ae:0c:c3:6e:07:97:bf:99:be:cf:1d:17:1e:d8:
         7b:29:22:3a:99:4c:a4:66:2a:47:0a:11:88:21:47:e0:44:4d:
         5d:b0:2e:11:0d:7c:64:f3:eb:98:5f:fb:8b:35:84:b5:f7:e3:
         aa:d1:b9:ad:93:ea:e3:59:31:12:de:46:f6:ad:55:09:8d:2e:
         81:c2:f4:b8:ce:6d:8b:c0:0c:08:ac:5e:15:3a:f7:ad:84:fa:
         ad:fb:f5:e3:c8:f9:6c:a6:56:99:3f:83:e0:e4:d3:f8:52:d0:
         88:ae:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:31 2024 by rpki-client on console-ams.rpki-client.org