Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa
File:                     JroXSewuTlqL8acAPutFzZNknBE.roa (raw, json)
Hash identifier:          l2u/uEuBAZWFTYAPOkoRVxIEaXveXfd8HKc+kSVvGyo=
Subject key identifier:   26:BA:17:49:EC:2E:4E:5A:8B:F1:A7:00:3E:EB:45:CD:93:64:9C:11
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       0189B667B941810CAE4BA99DA5D07E95C423
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa
Signing time:             Wed 02 Aug 2023 13:19:58 +0000
ROA not before:           Wed 02 Aug 2023 13:19:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213382
IP address blocks:        93.186.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b6:67:b9:41:81:0c:ae:4b:a9:9d:a5:d0:7e:95:c4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Aug  2 13:19:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26ba1749ec2e4e5a8bf1a7003eeb45cd93649c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7a:ba:e3:39:ca:b6:4b:4e:43:f0:8e:0c:88:
                    c0:72:f1:18:96:52:ad:e1:8a:34:42:50:48:00:c8:
                    2b:8b:69:e5:d4:4e:14:c4:1f:64:98:4a:0c:47:dc:
                    fd:eb:d8:3b:3c:9c:ac:ad:d3:53:13:a7:b7:d2:b4:
                    ed:d8:89:9f:6d:d1:78:25:4a:1b:b3:80:46:eb:31:
                    24:3e:d1:20:47:3b:f2:93:19:86:87:32:07:67:89:
                    77:0e:2e:50:b8:2a:b7:2f:9f:bf:ba:1a:8b:00:5d:
                    c5:10:2e:85:c9:e8:e0:e1:3e:c2:c1:70:03:86:1d:
                    e6:77:48:a4:78:8d:89:a0:db:61:77:9f:6a:17:5e:
                    0b:bc:da:9a:77:20:64:ae:af:7b:0b:dd:2d:3e:8a:
                    e0:b2:fc:4a:26:60:6c:44:ca:75:e2:c5:38:af:77:
                    98:c1:d9:9e:89:92:41:da:00:34:b1:2b:0d:62:3e:
                    b6:40:f8:4f:79:be:5e:27:e7:d8:ad:8a:99:e2:94:
                    ea:77:6e:22:06:56:95:de:25:56:04:10:3a:1b:82:
                    17:39:3e:e6:0c:39:37:fc:2a:69:46:e8:a7:2d:76:
                    72:fb:e0:e2:cd:17:3a:34:31:50:01:15:26:3d:0c:
                    3a:04:9c:8c:e7:81:21:7f:25:ed:37:d4:1f:af:fe:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:17:49:EC:2E:4E:5A:8B:F1:A7:00:3E:EB:45:CD:93:64:9C:11
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:78:5a:03:2f:df:16:4c:90:aa:5d:61:98:f7:27:35:1f:a6:
         f0:95:d4:ff:70:3c:e8:b1:a7:74:34:33:69:a0:a5:30:41:ea:
         fe:a3:5d:7f:d4:cb:cc:1a:84:7b:78:bd:a7:25:cf:64:fa:43:
         fb:09:d0:b6:9a:77:3f:c5:53:00:1d:21:07:f9:e2:ab:72:de:
         70:5b:54:d5:86:ed:30:15:7b:a7:21:3f:1a:38:d0:a4:b7:13:
         a3:1d:f8:55:3c:0e:51:33:11:40:f4:63:0e:be:f4:6f:b8:d8:
         06:78:3f:36:a9:96:a5:94:dc:89:49:ee:35:8c:2d:82:8a:c8:
         1d:97:39:ad:44:ec:62:64:f8:d2:13:d9:ea:c7:89:c0:b8:2d:
         47:30:d4:ac:be:71:eb:87:30:3c:71:89:6a:bb:ef:a0:2b:31:
         39:21:87:fb:2f:04:01:26:29:59:b8:41:6b:f7:fa:3f:90:f9:
         57:f4:60:58:c0:20:c7:4f:dd:9e:a1:2f:19:c5:8c:1c:e4:6f:
         81:fc:06:50:bd:54:a7:3a:d0:7d:f3:d4:86:0e:c7:20:05:fa:
         46:01:87:8f:04:e8:58:b0:05:5a:e0:5b:54:90:93:e2:0b:1c:
         cc:92:88:b7:07:1c:cf:7e:7e:fd:0a:7f:c7:40:93:43:d8:82:
         72:7a:33:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org