Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5znlmuKpun-DQDT2EgjgAUad6GQ.roa
File:                     5znlmuKpun-DQDT2EgjgAUad6GQ.roa (raw, json)
Hash identifier:          6oeioxEI+2RYQkGABdP/h+kncn6Jp1zQmxsvW3rDzR8=
Subject key identifier:   E7:39:E5:9A:E2:A9:BA:7F:83:40:34:F6:12:08:E0:01:46:9D:E8:64
Certificate issuer:       /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial:       01856F0B6C5D028DB7ADA1AE7AB010335863
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5znlmuKpun-DQDT2EgjgAUad6GQ.roa
Signing time:             Sun 01 Jan 2023 20:34:57 +0000
ROA not before:           Sun 01 Jan 2023 20:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.151.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:6c:5d:02:8d:b7:ad:a1:ae:7a:b0:10:33:58:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
        Validity
            Not Before: Jan  1 20:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e739e59ae2a9ba7f834034f61208e001469de864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:a2:43:22:a5:40:f2:49:a9:3b:00:9a:7c:
                    a3:ff:66:69:a3:be:00:ec:11:a2:8a:b5:75:da:4d:
                    97:7c:7a:00:78:16:6e:7a:69:81:32:8a:a8:dc:14:
                    0e:64:39:b9:95:e5:ec:ce:8a:b6:c5:aa:b7:20:2f:
                    92:30:e6:92:69:37:2d:c8:c7:8f:61:ee:92:60:f2:
                    e8:62:7d:cf:43:c5:3f:e8:b2:37:83:9a:9e:f2:dc:
                    32:45:4e:b4:64:80:ae:1c:20:a0:92:f6:92:6d:1c:
                    16:41:e2:0a:b1:9c:a7:e9:93:10:f1:7a:77:92:94:
                    d5:49:de:49:1a:8e:f4:75:e5:d0:19:03:0f:db:5d:
                    63:23:ff:e3:a4:d0:01:38:f1:aa:21:ad:c6:73:1c:
                    50:38:ae:4d:20:a3:bf:91:91:68:b4:19:3a:0b:63:
                    23:00:3f:0e:fe:f3:3b:a4:ce:a5:71:02:43:69:e0:
                    8a:fe:66:51:f6:96:b2:30:a5:3a:38:31:36:e1:16:
                    33:c2:d2:88:7c:db:00:be:2c:7a:6a:c7:32:0c:70:
                    c3:66:1e:a1:9f:8b:e1:2e:99:7c:63:05:57:1a:7a:
                    4a:15:80:04:13:49:2a:bd:5f:ef:b3:98:ea:20:ae:
                    e4:8a:1e:55:26:02:f9:19:ed:f0:8e:1c:e3:72:ee:
                    83:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:E5:9A:E2:A9:BA:7F:83:40:34:F6:12:08:E0:01:46:9D:E8:64
            X509v3 Authority Key Identifier:
                keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/5znlmuKpun-DQDT2EgjgAUad6GQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:92:c6:d3:2c:8b:8a:45:2a:04:52:29:3d:d3:32:cf:18:
         93:3b:4a:30:3b:79:5f:9b:01:0f:aa:76:b2:5b:77:00:ed:59:
         81:e3:6f:75:a1:7c:d7:10:e5:ca:97:23:bf:9a:1f:00:8d:9e:
         9c:e9:7e:6c:fd:ed:04:fa:f5:57:1d:eb:d9:cb:89:2e:53:93:
         62:81:64:b4:3b:d8:ff:ff:bc:d6:68:f0:6b:00:1c:2e:c2:7a:
         67:57:7e:cd:22:53:55:04:8d:2a:74:63:7d:39:29:b2:33:5d:
         11:46:56:cc:92:78:e7:77:8c:9d:b7:8b:2b:37:04:55:54:6c:
         d2:fe:44:7f:f7:e7:af:ed:9b:05:b7:51:a0:90:cd:be:36:1a:
         85:f1:97:de:72:34:ce:db:84:8a:53:95:5f:40:38:0b:68:e3:
         34:19:e5:9c:35:c6:69:f2:30:d0:54:41:aa:bb:b7:9c:32:c0:
         42:9f:d8:36:92:68:e3:77:52:95:2a:ff:35:c8:81:8a:11:fc:
         69:79:7a:6b:ce:a7:a9:d6:92:f9:7b:43:5f:5a:ed:61:87:ff:
         76:c4:69:a9:51:8b:3e:0c:45:4d:57:52:b6:6f:3c:b3:50:83:
         68:44:2d:cc:4d:50:4a:b1:a9:8c:ae:02:bc:b6:7e:00:b2:93:
         6c:d7:75:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:43 2024 by rpki-client on console-fra.rpki-client.org