Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa
File:                     pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa (raw, json)
Hash identifier:          mThdVppBEsUR2dl6rWe3kb8k+nhKHwYE+ZwEE1ih+WE=
Subject key identifier:   A6:6B:A8:11:39:74:03:70:12:D7:F0:39:8E:C3:F4:0C:A1:1E:13:94
Certificate issuer:       /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial:       01856CAF20E016B5D1998D1ED7F570EA406A
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa
Signing time:             Sun 01 Jan 2023 09:34:54 +0000
ROA not before:           Sun 01 Jan 2023 09:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61334
IP address blocks:        93.113.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:af:20:e0:16:b5:d1:99:8d:1e:d7:f5:70:ea:40:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
        Validity
            Not Before: Jan  1 09:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a66ba8113974037012d7f0398ec3f40ca11e1394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:44:50:09:25:fb:63:94:86:85:e4:f4:78:
                    f2:2f:1b:24:e2:89:dc:28:1d:ce:8b:6b:6e:24:e7:
                    6d:51:e8:f3:ee:17:25:55:db:69:78:97:60:9c:bb:
                    10:30:b7:c3:43:22:35:c7:f3:27:c2:76:0a:d0:d7:
                    15:86:7a:8a:1e:52:34:41:e6:39:55:17:91:a2:91:
                    03:8c:66:96:96:5b:53:fa:81:96:74:43:1f:57:af:
                    9a:50:9a:f2:38:bb:d5:68:48:4d:f1:e2:01:78:b9:
                    31:f9:e7:29:b1:4a:9c:3a:41:86:63:b4:6a:eb:af:
                    93:00:0a:d8:04:a6:c8:f7:56:72:d8:c8:ca:15:f1:
                    79:ef:47:96:52:dc:20:e5:4c:9b:20:6c:32:52:f6:
                    8e:ac:d0:ce:37:88:7c:31:a3:3b:50:1f:a2:6b:49:
                    e6:dc:d5:7a:78:bf:00:95:c8:34:48:88:7d:6e:3d:
                    32:de:8e:2c:85:3e:26:d7:ef:6c:e1:4c:57:e1:98:
                    c1:5f:25:c1:f7:c4:b0:3a:c6:18:21:14:94:be:28:
                    6d:a6:5b:e0:95:21:06:d9:0e:c8:a1:da:c6:96:4d:
                    ba:0d:7c:45:d6:f7:78:05:f4:66:8d:74:6a:45:37:
                    82:2c:f1:5e:ca:0f:52:82:55:a8:2a:67:19:b3:83:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6B:A8:11:39:74:03:70:12:D7:F0:39:8E:C3:F4:0C:A1:1E:13:94
            X509v3 Authority Key Identifier:
                keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/pmuoETl0A3AS1_A5jsP0DKEeE5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:54:35:86:21:bf:ee:76:40:ce:e2:64:7e:75:4a:2c:4f:
         ee:12:56:0a:2c:e8:48:68:98:4f:8c:f5:35:b2:8f:85:59:f5:
         d5:80:8a:2d:b9:3e:dd:60:18:12:68:85:ed:30:ac:cf:22:d7:
         bd:8e:de:8a:8e:b3:b6:ac:38:14:29:75:b9:99:03:63:db:35:
         19:b8:13:06:a4:c7:00:d9:08:f8:d2:eb:b7:68:cd:23:6a:6a:
         63:28:69:99:c8:2a:08:69:60:10:23:06:14:b0:9c:6f:8d:34:
         93:fd:da:63:5c:a0:5d:c4:b7:e1:3d:b5:17:93:65:41:98:a9:
         c1:40:c4:5f:7c:9c:33:0f:40:1e:c1:f4:69:42:89:7f:b9:f2:
         36:1a:64:61:55:49:22:cb:fd:e7:a5:e8:25:b0:46:62:c6:f7:
         c4:d5:b7:83:fd:e8:e4:c2:31:1e:8f:a2:49:5f:f3:5a:00:58:
         de:af:40:fe:14:4e:5f:3e:b3:21:55:8e:02:2e:ec:92:bb:37:
         96:db:95:b7:8e:aa:33:ad:08:14:91:ec:72:1a:93:7a:da:aa:
         d0:a2:c7:b0:e4:59:30:ad:a4:4e:4a:a1:9e:74:fb:b7:78:84:
         bb:fe:9e:5c:1a:40:5c:e5:f8:87:ed:23:8f:5b:41:19:e1:4b:
         cd:0a:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org