Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa
File:                     wQalElWXJrr0jt1THDagnY5Pn7M.roa (raw, json)
Hash identifier:          glnGApJfqq6/zElwEOonSnsJTGAKbTE62AN0pdllXxg=
Subject key identifier:   C1:06:A5:12:55:97:26:BA:F4:8E:DD:53:1C:36:A0:9D:8E:4F:9F:B3
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       018616E327EA96164BE1557BF75AFF30A6C9
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa
Signing time:             Fri 03 Feb 2023 10:47:10 +0000
ROA not before:           Fri 03 Feb 2023 10:47:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206941
IP address blocks:        193.164.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:16:e3:27:ea:96:16:4b:e1:55:7b:f7:5a:ff:30:a6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Feb  3 10:47:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c106a512559726baf48edd531c36a09d8e4f9fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:e0:d1:89:0e:c0:5c:b8:72:8c:c8:16:ec:
                    cf:50:25:26:67:6f:83:e8:aa:ed:29:1d:35:5c:02:
                    da:5e:ff:69:21:9e:ba:cb:33:7d:d7:40:ad:e9:8e:
                    06:dd:91:90:4d:78:df:00:47:14:d1:82:36:2a:6c:
                    bb:44:92:bc:fe:0e:6d:89:03:13:24:db:82:a7:71:
                    c5:ac:5b:23:0e:03:ae:4a:49:a2:22:fb:3f:4e:c4:
                    ee:92:93:13:82:6c:c8:2b:42:3d:f2:d4:ac:fc:88:
                    27:e8:9b:d9:c9:75:ac:53:b5:96:76:cc:70:6e:df:
                    27:1b:8c:db:18:cc:07:fc:cb:89:cf:bd:42:98:27:
                    b2:c1:4c:6c:e5:51:46:df:bb:63:f6:db:ee:bd:3a:
                    ef:f8:e0:f5:81:de:72:16:05:46:92:d5:b1:89:1f:
                    57:5e:dc:69:0a:dd:5e:d5:51:b6:fd:d1:4f:25:f6:
                    76:26:bd:c0:9f:17:83:07:1f:0f:cd:6a:e7:42:72:
                    c7:10:c8:43:96:22:0d:c6:09:01:26:99:1a:06:6f:
                    4f:52:90:46:77:30:91:64:cd:0c:e9:1e:41:9e:e3:
                    3a:c7:dd:04:a8:cd:a0:9d:c9:c0:dd:1e:94:cb:eb:
                    94:aa:d9:c4:33:98:ab:5d:77:23:85:80:02:25:a9:
                    64:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:A5:12:55:97:26:BA:F4:8E:DD:53:1C:36:A0:9D:8E:4F:9F:B3
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:20:25:7f:69:9c:e1:47:88:dc:8e:45:f8:b6:28:97:48:
         7a:09:7d:02:ac:57:08:25:08:8e:b8:2e:b9:2f:27:e1:23:c8:
         10:ab:83:77:7c:5d:bf:70:c5:32:28:d3:00:cc:1f:57:9a:ff:
         bc:d7:8e:07:15:40:14:4f:de:2c:dd:b8:e2:bd:03:f6:bc:6c:
         f6:c6:d6:36:92:39:38:7a:c9:7f:b3:eb:72:30:a6:fb:d0:f9:
         5d:a3:33:09:ee:e7:4c:fd:34:6b:15:48:0b:75:8a:1d:4e:d5:
         f5:fa:cf:2f:cf:ec:a7:e6:8c:5c:a6:b5:fb:69:81:72:00:ed:
         e3:13:0b:7f:ce:8d:41:f9:7f:b0:3a:12:b5:10:8e:3c:8f:4c:
         c9:ae:13:b8:f7:ac:f8:6c:a6:9d:4c:8c:17:c8:29:68:f2:cf:
         b5:03:ef:a4:e4:be:58:65:09:6e:d8:64:0e:64:9f:8a:ba:6e:
         7a:d4:da:14:6f:f6:16:e9:90:39:30:a7:0d:7e:8a:10:37:0c:
         42:de:51:6b:14:06:82:4b:12:6d:f7:8a:5b:e8:e5:9e:77:4a:
         d7:e3:f8:e8:ae:bd:55:06:76:c1:37:7e:6c:af:52:68:92:ab:
         78:13:0e:e5:b1:d7:80:44:e2:c3:2c:37:a0:ca:0d:9f:fd:4a:
         bb:1c:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:16 2024 by rpki-client on console-ams.rpki-client.org