Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/f0GZzm8YdEOAbiI2JACk_iCtyP4.roa
File:                     f0GZzm8YdEOAbiI2JACk_iCtyP4.roa (raw, json)
Hash identifier:          TuMHeH/GJOsdiR9aHM2nO3r6TbEgu9eLB8QfmYkMdhM=
Subject key identifier:   7F:41:99:CE:6F:18:74:43:80:6E:22:36:24:00:A4:FE:20:AD:C8:FE
Certificate issuer:       /CN=463f917077f8f3d0e338c742ea21d64358d19d52
Certificate serial:       019056A0D232F90025B48474183EBA3F2E0B
Authority key identifier: 46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/f0GZzm8YdEOAbiI2JACk_iCtyP4.roa
Signing time:             Wed 26 Jun 2024 22:18:18 +0000
ROA not before:           Wed 26 Jun 2024 22:18:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        195.93.132.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 00:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:56:a0:d2:32:f9:00:25:b4:84:74:18:3e:ba:3f:2e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463f917077f8f3d0e338c742ea21d64358d19d52
        Validity
            Not Before: Jun 26 22:18:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f4199ce6f187443806e22362400a4fe20adc8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:d0:47:89:47:7c:f2:06:bd:a1:51:55:64:
                    14:dc:1c:b9:dc:15:18:40:d0:34:85:af:16:a5:5b:
                    e5:9d:e7:36:1b:b0:14:99:d1:6d:97:2a:16:dc:96:
                    2d:6c:55:db:77:1f:ae:e2:7e:d6:fd:5d:a6:cf:9b:
                    24:53:a4:0d:2b:97:cb:22:92:5b:ef:51:5f:69:59:
                    4d:66:31:5d:da:21:4b:28:34:83:9c:32:74:72:69:
                    b1:bb:4f:d2:a1:ad:20:6c:4f:77:a9:aa:20:88:18:
                    6d:3b:89:49:43:d6:92:69:cd:50:ce:b3:b9:3d:89:
                    20:df:e0:c6:2c:4f:a5:09:91:c4:1b:70:b7:eb:48:
                    fe:78:20:c6:99:eb:14:c2:20:e5:24:0c:60:a8:5c:
                    82:6b:0f:6a:77:e2:2d:81:7d:a6:d5:ef:15:ff:aa:
                    e9:85:bf:b0:34:ad:34:5b:6e:7f:ed:e9:e9:6f:5e:
                    a5:04:2f:33:c5:bc:d9:2a:9e:fb:8f:69:1a:1b:e5:
                    a4:ec:5c:a6:21:e3:9b:86:5b:f1:b1:35:12:52:f7:
                    e9:48:28:c1:ad:99:bd:01:10:c0:08:db:ec:28:9e:
                    14:6c:f2:70:04:33:c9:0b:f0:72:30:d7:19:4d:d3:
                    5f:08:56:d9:37:bb:26:70:34:04:79:bb:55:07:8e:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:99:CE:6F:18:74:43:80:6E:22:36:24:00:A4:FE:20:AD:C8:FE
            X509v3 Authority Key Identifier:
                keyid:46:3F:91:70:77:F8:F3:D0:E3:38:C7:42:EA:21:D6:43:58:D1:9D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj-RcHf489DjOMdC6iHWQ1jRnVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/f0GZzm8YdEOAbiI2JACk_iCtyP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8b5f7c-b3ae-4b58-81bb-25a40c075f12/1/Rj-RcHf489DjOMdC6iHWQ1jRnVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:00:87:7a:08:53:10:eb:00:91:de:40:15:db:a2:80:e5:
         b6:41:f7:3e:a0:21:17:05:8a:cc:18:6f:c0:0a:a6:fa:3d:ef:
         81:7a:ba:ed:93:0c:70:a5:fb:17:1e:b9:e2:9c:ed:c1:5f:ed:
         56:f0:26:08:ce:17:20:9a:15:f8:31:31:ac:d3:a8:3e:a1:6f:
         64:4b:5f:48:a1:a6:50:05:10:0c:dc:70:54:bf:d4:fc:02:45:
         1a:9c:93:70:6d:5c:f1:ef:9c:6a:42:34:98:ac:f9:40:fc:18:
         7f:9a:ba:e5:6a:6e:c2:d6:77:65:b3:09:87:a0:f0:18:54:3e:
         b5:0c:13:9b:40:ca:2b:c0:2d:5f:25:2d:ad:d9:00:f8:9d:dc:
         f4:8b:5f:9e:a8:7c:8a:d6:28:c0:53:28:be:ed:c8:57:7c:38:
         58:37:30:14:f1:6b:95:9e:08:f3:06:cb:a7:ad:a6:be:cf:72:
         08:b8:eb:6e:3a:a4:d9:78:08:69:23:e3:84:6d:f2:2e:b3:47:
         6d:26:b3:3e:4d:dd:9d:03:4d:9a:ba:df:97:49:f1:1e:07:a1:
         0e:39:3f:37:51:64:a9:63:03:89:cb:68:18:db:c4:dd:49:1d:
         41:e2:37:ee:aa:46:39:a0:5d:a0:25:4c:11:aa:2b:82:d6:fb:
         f2:06:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 05:27:51 2024 by rpki-client on console-fra.rpki-client.org