Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/E7Lfg6PkT_1dq_y4ri4o8l7t2iY.roa
File:                     E7Lfg6PkT_1dq_y4ri4o8l7t2iY.roa (raw, json)
Hash identifier:          6zJJubvuBQA73l2uFE+LI/Q8CUIaad6keIWG4F18Lmo=
Subject key identifier:   13:B2:DF:83:A3:E4:4F:FD:5D:AB:FC:B8:AE:2E:28:F2:5E:ED:DA:26
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       01856BF7D65B1C375C1A7CF09B41A102FF12
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/E7Lfg6PkT_1dq_y4ri4o8l7t2iY.roa
Signing time:             Sun 01 Jan 2023 06:14:42 +0000
ROA not before:           Sun 01 Jan 2023 06:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200375
IP address blocks:        193.178.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:f7:d6:5b:1c:37:5c:1a:7c:f0:9b:41:a1:02:ff:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Jan  1 06:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13b2df83a3e44ffd5dabfcb8ae2e28f25eedda26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:b1:16:81:18:1f:3a:41:29:be:ac:a4:42:
                    d4:c8:fa:91:38:bb:33:9f:98:70:39:d0:1d:25:38:
                    2d:7a:a8:9d:52:f1:de:17:ff:28:88:65:b2:6c:8d:
                    ad:27:de:1f:9e:9a:bd:56:ed:72:bc:ff:16:c5:c0:
                    08:e9:c8:95:d0:6f:5e:76:f3:e5:36:9d:3d:02:8d:
                    de:f2:04:f4:62:44:ad:29:60:39:4d:6b:bd:33:6b:
                    0e:b1:0c:9f:ce:dc:27:68:21:53:8a:9d:f4:ae:96:
                    8a:81:3c:1e:fc:4d:3b:fa:ca:d2:7c:15:4c:26:e4:
                    dc:5e:77:27:4c:47:52:a2:f4:32:08:5a:a5:c3:56:
                    3d:ef:27:5b:c0:95:8d:fe:da:38:69:f8:bf:a9:71:
                    92:68:0a:71:e3:35:66:d1:23:47:47:51:65:ee:3b:
                    0a:88:73:70:f4:b2:ee:d5:50:64:2c:65:0e:3f:57:
                    6f:aa:15:06:22:26:f2:43:d4:06:7f:31:e1:57:76:
                    dd:cf:94:1e:46:ba:b6:fd:b3:8a:24:7d:f9:70:c1:
                    5e:b0:d2:7c:0d:a3:17:56:f5:8e:32:36:49:31:bc:
                    4f:58:cd:3c:43:d7:4b:60:5c:64:19:e1:e1:86:10:
                    14:63:5e:0b:d7:19:a5:fb:0a:3d:d0:07:4b:f9:2c:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:DF:83:A3:E4:4F:FD:5D:AB:FC:B8:AE:2E:28:F2:5E:ED:DA:26
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/E7Lfg6PkT_1dq_y4ri4o8l7t2iY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:10:46:ef:d6:ab:31:c7:c5:57:47:40:b1:14:c4:2d:8d:1c:
         57:14:7d:32:1f:c2:aa:9e:54:96:95:9a:dc:60:f5:5c:f4:cb:
         b4:3c:41:5f:65:78:e5:19:e0:ed:8f:a3:e7:71:e9:a8:07:38:
         d5:5e:44:bb:9c:bb:0b:5c:c3:7e:68:2e:d7:17:88:37:42:81:
         1f:16:71:28:0d:53:14:92:bb:f7:a3:0c:d1:29:19:00:a9:4f:
         3f:17:3a:8a:49:d2:eb:d9:0f:6e:f5:30:56:92:b8:b5:d2:9f:
         bf:6e:38:ef:b5:2a:2c:13:4d:64:b3:44:ac:92:8e:b4:6c:13:
         45:b2:8b:d8:45:36:1e:a6:2c:b0:21:06:40:2e:39:91:6c:7d:
         0c:b1:9b:89:ed:89:48:79:81:82:af:b4:4d:b5:77:3f:35:c2:
         96:b8:90:f7:58:87:16:6d:2f:cb:3f:75:81:32:36:48:d3:e1:
         78:14:3a:b1:1c:c5:c2:48:24:8e:99:b7:38:aa:81:60:29:0d:
         ae:dc:05:b1:14:70:f1:3c:56:63:c7:2d:34:0d:fa:22:86:a7:
         91:3d:a3:cf:35:28:70:61:07:7e:5a:ee:7b:eb:90:83:9e:cc:
         cc:93:97:3b:1c:c4:21:dc:47:04:72:55:0f:a9:64:7b:a6:fe:
         a7:17:0d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:23 2024 by rpki-client on console-ams.rpki-client.org