Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/sPciJ5KethVES9uY5WuDojecRxI.roa
File:                     sPciJ5KethVES9uY5WuDojecRxI.roa (raw, json)
Hash identifier:          cCddNn0dAUgvk5Jeyg2bV5ucIyLSLXm0X57jxhR0Nqs=
Subject key identifier:   B0:F7:22:27:92:9E:B6:15:44:4B:DB:98:E5:6B:83:A2:37:9C:47:12
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       0188C1CC93BF1C0047751048CCBC1FB57FB2
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/sPciJ5KethVES9uY5WuDojecRxI.roa
Signing time:             Fri 16 Jun 2023 01:23:09 +0000
ROA not before:           Fri 16 Jun 2023 01:23:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211493
IP address blocks:        193.32.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 12 Nov 2023 19:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:c1:cc:93:bf:1c:00:47:75:10:48:cc:bc:1f:b5:7f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Jun 16 01:23:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0f72227929eb615444bdb98e56b83a2379c4712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:28:ba:a3:b5:6a:e7:4e:13:ca:c4:17:98:c7:
                    a2:14:e1:a0:48:21:a6:c3:3c:ba:f2:75:48:8f:f3:
                    4a:ca:5a:8c:57:eb:0d:63:3d:99:a4:9e:a1:8b:6e:
                    20:ff:08:ed:c3:97:f1:c2:b9:36:90:94:0e:44:f9:
                    39:27:46:a1:53:f8:da:8a:48:3d:74:c6:25:a4:49:
                    2d:52:64:ec:5f:0c:bf:4f:e2:ee:6c:33:66:48:df:
                    64:15:2a:aa:26:ae:7c:4a:a5:42:f1:e7:bd:6e:54:
                    63:59:6b:27:dd:96:69:d3:c6:f6:e9:a8:b5:5f:53:
                    b9:d3:c8:29:30:51:96:78:cd:4f:85:b3:88:b3:e7:
                    ef:b0:25:6f:43:45:3a:7b:c5:b4:fb:f0:e5:56:93:
                    f8:1f:cc:c1:ef:b6:0f:68:2b:32:1e:20:3b:28:09:
                    bd:9e:91:3e:62:15:21:ec:6d:1a:87:c6:6b:34:ff:
                    a6:fe:09:f5:7e:c8:f0:8c:ef:c7:47:e2:aa:bc:5d:
                    fd:b6:84:65:32:29:3d:91:b5:1a:38:b7:8f:9c:77:
                    8f:39:36:6e:39:e1:3c:b5:35:82:35:04:53:54:81:
                    02:a6:a2:98:26:80:60:14:6b:36:52:fa:11:52:04:
                    aa:6b:3d:b3:b3:ac:0a:be:cd:3c:bd:2c:d3:cf:20:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:22:27:92:9E:B6:15:44:4B:DB:98:E5:6B:83:A2:37:9C:47:12
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/sPciJ5KethVES9uY5WuDojecRxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:93:3f:58:ef:20:5d:0b:fe:3f:29:90:05:b1:dc:bb:74:d5:
         7a:2f:20:e8:34:b5:f2:c8:f6:d1:2c:5a:bc:07:81:0c:8a:18:
         c4:d3:b3:64:d8:19:26:f3:7e:6d:02:2b:8c:c6:b6:ad:e0:9c:
         81:a9:9a:65:b5:df:73:a5:62:08:c5:10:96:ca:b6:12:5e:fe:
         cd:cc:d0:36:6a:cb:26:fc:dd:89:ea:2d:eb:6a:a6:e7:3f:1d:
         07:f9:e9:51:bc:c8:21:bc:e8:4b:8e:b4:13:b1:b3:7b:c3:c5:
         3e:57:e3:6e:3b:6b:fc:47:eb:01:38:f9:ef:d4:c2:b2:37:b5:
         6e:7a:b5:e1:6d:6e:69:1b:b2:16:18:f6:b1:3d:8f:cb:a4:4f:
         90:74:38:c7:c8:ad:91:61:e8:11:c6:e4:7d:46:0a:8a:b8:66:
         32:99:fd:6c:04:6a:c3:b3:1d:e9:2e:19:00:aa:fe:ab:57:17:
         3d:10:5b:e7:e1:52:aa:ae:05:18:b9:bc:45:cb:ad:26:8f:c5:
         5b:18:11:76:7e:22:45:f6:e6:4e:ce:5b:79:3e:2e:ce:4e:1e:
         3f:ad:b4:88:50:bb:4c:2a:15:8d:e4:16:78:0c:3d:9f:59:ee:
         2d:d7:4d:d3:e5:49:29:2e:70:d9:54:92:67:32:bd:19:66:14:
         d5:e7:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:40 2024 by rpki-client on console-ams.rpki-client.org