Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa
File:                     _aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa (raw, json)
Hash identifier:          SJL7Jbsh+HbmN3AQWAD7n7Y3ivtYY7D05bU7tnEasgw=
Subject key identifier:   FD:A6:04:FB:32:9A:9B:B0:49:F1:6B:2B:F0:BB:8A:9E:E0:5B:FD:7A
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       018A1D2E547712F3531636F95FB9434E663F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa
Signing time:             Tue 22 Aug 2023 12:18:10 +0000
ROA not before:           Tue 22 Aug 2023 12:18:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        193.242.117.0/24 maxlen: 24
                          193.108.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1d:2e:54:77:12:f3:53:16:36:f9:5f:b9:43:4e:66:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Aug 22 12:18:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fda604fb329a9bb049f16b2bf0bb8a9ee05bfd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:f0:4a:37:dc:ef:d8:33:78:ba:70:fc:44:
                    ad:51:9f:30:a0:7d:44:0c:f9:ee:5c:8b:ac:d5:cb:
                    da:a6:f3:c0:ee:fd:ed:d9:5a:7e:eb:4f:69:dc:52:
                    7d:c0:8f:07:e9:78:fc:79:c5:78:3a:70:61:9d:7c:
                    82:08:6e:f0:fe:df:82:ea:bc:9c:ad:47:05:60:d4:
                    5c:b3:17:06:c4:3f:20:c6:6b:4d:aa:7b:84:ee:e2:
                    9d:42:35:2d:52:72:89:7a:93:95:d5:4b:1e:99:7f:
                    13:f1:75:bc:61:d2:90:7f:64:24:c7:81:cc:b6:90:
                    f2:c4:06:dc:aa:9c:6f:60:e9:f8:e0:5b:00:eb:8c:
                    76:71:5d:ee:ba:e7:40:83:6c:0a:8c:fc:9c:dc:01:
                    11:56:7a:4a:a5:fd:c3:c5:d3:39:a0:d5:19:d6:2a:
                    8d:63:5c:e3:17:26:69:fc:04:68:ee:c7:1e:50:37:
                    54:48:39:d2:af:59:31:ca:a2:9c:66:0f:5d:a3:42:
                    2d:d7:9f:8e:14:f6:18:7b:ec:1b:52:09:32:9a:3c:
                    ca:d1:fe:7d:fd:09:17:5d:1d:7f:6a:c6:e0:2b:94:
                    5f:4a:d0:28:0e:02:37:73:9c:38:54:b5:01:01:38:
                    3d:c0:93:75:66:3d:af:7e:12:2e:95:32:db:b7:df:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:04:FB:32:9A:9B:B0:49:F1:6B:2B:F0:BB:8A:9E:E0:5B:FD:7A
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/_aYE-zKam7BJ8Wsr8LuKnuBb_Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.102.0/24
                  193.242.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:8c:7b:33:85:df:47:96:61:a5:7b:96:7c:9c:8b:f8:66:
         8c:12:0a:d8:2d:a9:00:00:27:7a:1a:fd:8c:a0:cf:bb:d5:3d:
         6b:7e:12:6f:d8:86:4a:50:48:96:3e:7d:5a:a1:af:c7:f8:2a:
         60:5d:9f:c9:aa:75:c3:22:5f:69:a1:f7:e9:04:cf:c6:44:b7:
         67:b0:98:df:03:fb:16:03:a3:11:60:20:15:4d:99:af:2c:20:
         0e:13:f0:7b:40:5b:5a:4e:73:7c:e1:24:ef:1b:c4:c7:4d:92:
         44:2c:c4:67:42:de:e1:20:f7:07:94:b9:90:e7:00:43:eb:b7:
         33:5b:27:a4:09:cd:6c:03:24:14:c4:67:d8:6e:15:fb:79:a9:
         7c:f6:e8:d8:32:73:c6:34:bd:07:99:13:fb:88:07:2b:49:8b:
         30:00:89:7d:16:2c:f4:93:d1:b5:a7:80:d4:27:94:46:61:f4:
         d4:2c:fd:7d:04:9a:f4:eb:df:e0:1a:f8:30:d8:af:62:80:fb:
         82:f1:df:10:c6:51:82:65:34:49:5f:40:f5:0c:4b:73:fd:49:
         d9:47:9c:32:ec:09:fe:19:2a:ac:12:de:1c:4c:aa:c9:3a:01:
         c7:5a:e3:ca:53:79:a3:aa:bd:fc:af:d3:97:f4:96:9e:cb:05:
         d8:42:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org