Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/dQefVS3gzHVI8VTYUc5iB6k98KM.roa
File:                     dQefVS3gzHVI8VTYUc5iB6k98KM.roa (raw, json)
Hash identifier:          Mn2Z5Vuq/IF9YBpZ80oMLqWNqkr7iNjl1M2H/TEplZ0=
Subject key identifier:   75:07:9F:55:2D:E0:CC:75:48:F1:54:D8:51:CE:62:07:A9:3D:F0:A3
Certificate issuer:       /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial:       01856F0B6CE8AD74A4733F501C48A0BF60B5
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/dQefVS3gzHVI8VTYUc5iB6k98KM.roa
Signing time:             Sun 01 Jan 2023 20:34:57 +0000
ROA not before:           Sun 01 Jan 2023 20:34:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        193.151.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:6c:e8:ad:74:a4:73:3f:50:1c:48:a0:bf:60:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
        Validity
            Not Before: Jan  1 20:34:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75079f552de0cc7548f154d851ce6207a93df0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:1f:da:c6:1a:47:53:23:2f:5c:71:54:aa:
                    2a:07:0c:37:17:77:ea:28:86:4e:a3:ae:a3:13:c5:
                    a2:6e:f3:41:60:3c:71:e4:17:04:7e:58:e8:7a:4b:
                    e7:b4:9e:10:41:04:0c:35:81:07:5b:a7:77:f3:60:
                    dd:b9:70:c5:a5:31:c2:36:34:16:97:35:e2:73:a7:
                    08:41:d0:fb:25:78:df:bc:30:81:17:43:c0:f7:00:
                    72:41:7e:0c:d1:2f:95:5c:82:c1:5b:76:d9:fc:66:
                    1f:05:9b:54:bf:6b:7b:d9:5c:7a:f2:cf:e9:86:ef:
                    0e:ed:18:9b:ef:b4:d0:ba:35:21:be:57:64:36:87:
                    80:01:1d:9e:57:b8:eb:82:8a:64:f3:ce:ed:5f:f3:
                    19:3a:2a:81:7e:92:ca:6b:e2:fb:33:e5:01:fe:1b:
                    a8:20:83:92:68:e6:39:90:68:2d:37:21:61:b4:94:
                    a9:e9:97:6c:68:b5:de:cb:dc:e5:76:c7:dc:2e:62:
                    02:2a:e9:a9:b4:ea:86:34:ab:41:50:d7:00:81:49:
                    8f:aa:f7:64:85:62:41:23:9a:03:f0:e3:99:bc:20:
                    19:32:f0:9f:85:9c:da:39:31:95:f1:3b:cd:47:18:
                    e7:3a:51:2e:00:6a:73:cc:c1:19:c9:44:a9:c7:b2:
                    4e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:07:9F:55:2D:E0:CC:75:48:F1:54:D8:51:CE:62:07:A9:3D:F0:A3
            X509v3 Authority Key Identifier:
                keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/dQefVS3gzHVI8VTYUc5iB6k98KM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:b7:64:f1:65:0b:52:7f:89:57:43:29:16:03:fd:ce:b7:ee:
         c3:23:e5:4c:e4:27:8e:7b:04:c2:2d:28:fb:d6:46:0e:bc:28:
         e3:ca:28:12:8f:8e:c9:37:dc:cf:90:02:d5:5a:93:10:f7:20:
         45:75:97:06:cd:1c:bb:23:40:8b:a2:7f:4f:b5:53:50:2e:43:
         b8:c9:46:20:ff:47:bd:c7:99:04:de:23:9b:5a:0d:76:c3:7a:
         17:10:0e:ef:69:15:8c:80:8f:a6:2e:e4:b7:0e:f4:ab:35:02:
         5a:df:31:29:e1:8c:05:b3:bb:48:15:41:84:b9:e8:ee:6d:5f:
         38:21:c9:9c:c4:00:32:13:57:e7:62:86:8b:31:79:29:28:17:
         7c:01:3f:6e:f3:93:8d:c4:56:1f:1d:79:a7:eb:d5:0e:fb:b8:
         87:ab:34:9f:cd:50:1c:e1:9a:06:0b:1b:30:3c:88:8a:74:58:
         f2:fe:37:f7:27:52:41:e0:57:be:6b:13:e4:8b:84:5f:fc:b3:
         43:53:19:73:37:65:d7:90:0e:c1:12:c9:c4:2f:96:36:16:97:
         ea:22:96:41:07:88:52:8f:3b:8b:a7:cd:32:f5:66:6d:ec:a9:
         65:a1:14:d7:17:e3:2c:6e:91:9b:06:a9:8f:8d:56:10:33:d9:
         f0:56:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:43 2024 by rpki-client on console-fra.rpki-client.org