Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/B-duEPAwTuhPNik-TPmHmEM37rk.roa
File:                     B-duEPAwTuhPNik-TPmHmEM37rk.roa (raw, json)
Hash identifier:          dF2HCtWGq12se3SGsxCE8IJ1xEIwd2Ajujmr9dxl/Qk=
Subject key identifier:   07:E7:6E:10:F0:30:4E:E8:4F:36:29:3E:4C:F9:87:98:43:37:EE:B9
Certificate issuer:       /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial:       0188016390FB1EE1A1E6420FB1784450E03C
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/B-duEPAwTuhPNik-TPmHmEM37rk.roa
Signing time:             Tue 09 May 2023 16:41:22 +0000
ROA not before:           Tue 09 May 2023 16:41:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        193.33.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 09:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:01:63:90:fb:1e:e1:a1:e6:42:0f:b1:78:44:50:e0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
        Validity
            Not Before: May  9 16:41:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07e76e10f0304ee84f36293e4cf987984337eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:fc:39:03:b9:98:4c:fe:5f:f3:44:b9:25:
                    68:ff:e7:34:04:b3:f4:a8:ab:c6:c7:64:5e:fa:77:
                    63:ec:b8:4d:10:5d:1a:a4:1c:52:46:5d:ea:78:3c:
                    eb:81:d3:eb:c9:41:a7:54:41:57:ec:2d:e5:76:71:
                    fb:ad:69:89:c7:9d:ce:4f:f2:c6:23:b2:d1:7b:38:
                    89:43:e9:7c:a9:88:66:66:88:e3:29:01:e9:fb:f9:
                    ea:46:a7:87:60:ac:c5:06:17:df:f6:85:e5:94:4d:
                    5e:18:47:11:d8:e1:f8:c8:49:09:1c:79:1c:d7:5b:
                    f3:88:cb:15:88:67:64:b3:d5:ea:20:57:50:4f:ad:
                    18:58:fb:88:64:4c:27:95:67:fa:ed:3a:f0:b9:5c:
                    ca:92:e8:76:b0:a4:bb:3f:59:97:e1:18:41:cd:a2:
                    fb:7f:a7:19:15:a0:fa:04:f6:9d:b2:c0:2b:1f:8b:
                    a1:28:5b:bd:fb:14:7e:a2:3c:9a:95:15:cb:be:59:
                    89:f0:99:fa:38:d5:2b:71:71:49:77:a1:28:bb:c9:
                    4b:e9:89:11:fa:97:b7:39:4e:85:da:85:4e:cb:17:
                    60:c5:d4:81:13:2f:b7:a3:f1:50:7a:06:24:f3:be:
                    83:49:b6:e1:72:5a:86:e8:2a:36:6c:49:41:da:67:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E7:6E:10:F0:30:4E:E8:4F:36:29:3E:4C:F9:87:98:43:37:EE:B9
            X509v3 Authority Key Identifier:
                keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/B-duEPAwTuhPNik-TPmHmEM37rk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:cc:68:bf:2e:ab:b7:3b:fa:76:74:59:0f:5e:a6:41:52:
         1d:a5:f8:b6:53:79:56:3e:98:87:37:5d:f1:3b:3c:48:16:d0:
         aa:e0:eb:dc:67:1a:47:2a:8e:2d:87:0a:a2:3c:2a:84:79:21:
         63:78:33:84:fa:83:3b:e0:7f:c7:15:96:d4:38:d5:bf:df:c9:
         af:84:4a:5d:7c:9b:59:88:19:de:47:e2:81:bb:d4:c7:8a:9c:
         0a:f6:5d:95:34:63:ad:7f:98:38:a1:09:ef:6a:45:e9:80:6d:
         c7:d9:83:1d:37:3d:61:92:58:16:0c:82:fa:a2:48:44:d9:00:
         b6:91:ff:9e:33:e5:22:8e:23:cf:9e:2f:1f:df:ff:a7:90:48:
         43:d1:69:82:24:32:3d:60:4b:26:ab:7e:f4:bd:28:1e:1a:11:
         76:5d:99:74:c1:2c:50:8e:e3:7e:17:29:a5:04:66:e5:4e:81:
         0f:ff:dc:78:f7:90:64:a0:e9:93:2c:d4:0b:ee:06:2a:c1:bb:
         ec:65:cd:de:02:c1:48:33:1d:42:6a:19:e1:41:d6:65:90:20:
         9d:c5:18:90:97:43:9c:f0:f1:54:d8:f7:71:4d:ab:14:73:66:
         41:f8:4e:ba:33:fe:ea:0a:3e:d3:37:e2:7e:89:13:d0:5a:9c:
         03:45:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org