Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Z-DHO5LtyEvWKwyqqbFRlhcHQTo.roa
File:                     Z-DHO5LtyEvWKwyqqbFRlhcHQTo.roa (raw, json)
Hash identifier:          QO1XTWxhhsJ9YnMZRianfYT4lLx2lRkHPauEJdovcUA=
Subject key identifier:   67:E0:C7:3B:92:ED:C8:4B:D6:2B:0C:AA:A9:B1:51:96:17:07:41:3A
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01856C53CF2D8105FC6FB9116009198B0956
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Z-DHO5LtyEvWKwyqqbFRlhcHQTo.roa
Signing time:             Sun 01 Jan 2023 07:55:09 +0000
ROA not before:           Sun 01 Jan 2023 07:55:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61084
IP address blocks:        93.190.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:cf:2d:81:05:fc:6f:b9:11:60:09:19:8b:09:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 07:55:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=67e0c73b92edc84bd62b0caaa9b151961707413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:7b:83:2e:56:24:14:52:a8:6d:7c:b9:52:
                    ae:6b:98:59:7f:71:d3:85:1c:53:f1:95:63:db:0d:
                    3b:a8:84:04:de:98:ac:45:42:74:29:2b:6c:28:4f:
                    c9:ab:de:35:9a:50:2a:40:bd:d7:fa:8b:e9:9a:2e:
                    7c:b7:ca:33:76:79:68:8c:18:08:02:b3:2a:a1:48:
                    0a:b1:39:68:d8:2e:0a:0d:f2:f3:74:0e:3a:62:c7:
                    d4:7b:0e:09:2a:8b:46:36:f2:8e:0e:c2:1d:58:32:
                    bf:d1:13:9a:95:69:d4:18:88:f2:65:35:38:11:01:
                    fe:91:f1:57:81:3d:dc:dd:9c:13:47:6b:1d:de:e8:
                    05:8b:49:8b:ed:ac:69:d5:91:d7:c7:77:a3:9f:85:
                    8a:d4:1e:07:19:a5:27:90:c5:a1:38:5f:55:a6:64:
                    29:05:58:31:26:06:e4:ff:c2:48:e0:47:15:e3:09:
                    46:13:30:10:7b:82:2a:5d:cb:06:d1:26:96:60:fe:
                    b1:a9:de:e3:81:16:06:e6:99:8a:aa:21:54:a5:8c:
                    9b:7e:31:36:f5:0b:fc:79:8d:9c:c7:60:5d:1b:e1:
                    5c:c0:be:95:21:22:39:33:48:2b:42:a7:62:89:de:
                    06:f7:9b:d1:47:7c:56:dd:a6:9a:4d:79:92:d4:5c:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E0:C7:3B:92:ED:C8:4B:D6:2B:0C:AA:A9:B1:51:96:17:07:41:3A
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Z-DHO5LtyEvWKwyqqbFRlhcHQTo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:69:1d:72:bc:54:66:26:c8:9c:4e:38:08:11:38:66:73:7b:
         32:fc:27:bf:b3:26:1d:e0:86:ae:93:65:1f:9f:52:08:36:9c:
         5f:8e:e6:52:0b:db:a5:01:bc:b7:96:f3:89:74:7b:99:34:ee:
         d8:f8:61:89:44:36:39:40:b0:24:fe:8b:be:58:00:cf:4c:e3:
         14:8f:ac:9a:18:60:a3:b6:71:20:0d:d0:0a:9f:48:3e:a4:55:
         ad:27:12:d9:69:7d:7f:bb:8a:3e:0a:c8:c8:72:0f:63:a2:eb:
         e5:ec:30:32:7a:5a:99:a4:05:59:35:fe:6a:f4:87:cf:b9:36:
         85:4f:8f:90:f2:60:74:e7:bb:eb:5c:ca:b7:23:1c:db:0d:a7:
         28:f9:0a:ed:12:79:b4:82:aa:35:7e:6f:08:d3:b3:78:c5:3e:
         8f:6d:3f:a9:ad:28:5d:b5:ce:4a:2f:c8:38:69:34:5a:76:ae:
         13:04:bc:18:ea:cd:9f:9c:4b:67:87:4a:f5:ea:03:ab:05:e8:
         97:78:20:b4:8a:17:25:30:61:c7:a6:84:0c:58:f8:4f:6e:e5:
         d1:52:bf:42:05:20:a5:13:80:2c:d7:c7:e6:d6:13:a4:67:0e:
         7e:00:de:14:fc:ed:17:23:ae:54:08:89:b1:4e:60:57:92:5d:
         76:de:7d:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU88tgQX8b7kRYAkZiwlWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjMwMTAxMDc1NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2UwYzczYjkyZWRjODRiZDYyYjBjYWFhOWIxNTE5NjE3MDc0MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntl7gy5WJBRSqG18uVKua5hZf3HT
hRxT8ZVj2w07qIQE3pisRUJ0KStsKE/Jq941mlAqQL3X+ovpmi58t8ozdnlojBgI
ArMqoUgKsTlo2C4KDfLzdA46YsfUew4JKotGNvKODsIdWDK/0ROalWnUGIjyZTU4
EQH+kfFXgT3c3ZwTR2sd3ugFi0mL7axp1ZHXx3ejn4WK1B4HGaUnkMWhOF9VpmQp
BVgxJgbk/8JI4EcV4wlGEzAQe4IqXcsG0SaWYP6xqd7jgRYG5pmKqiFUpYybfjE2
9Qv8eY2cx2BdG+FcwL6VISI5M0grQqdiid4G95vRR3xW3aaaTXmS1FwY6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfgxzuS7chL1isMqqmxUZYXB0E6MB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvWi1ESE81THR5RXZXS3d5cXFiRlJsaGNIUVRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb4NMA0G
CSqGSIb3DQEBCwUAA4IBAQBHaR1yvFRmJsicTjgIEThmc3sy/Ce/syYd4Iauk2Uf
n1IINpxfjuZSC9ulAby3lvOJdHuZNO7Y+GGJRDY5QLAk/ou+WADPTOMUj6yaGGCj
tnEgDdAKn0g+pFWtJxLZaX1/u4o+CsjIcg9jouvl7DAyelqZpAVZNf5q9IfPuTaF
T4+Q8mB057vrXMq3IxzbDaco+QrtEnm0gqo1fm8I07N4xT6PbT+prShdtc5KL8g4
aTRadq4TBLwY6s2fnEtnh0r16gOrBeiXeCC0ihclMGHHpoQMWPhPbuXRUr9CBSCl
E4As18fm1hOkZw5+AN4U/O0XI65UCImxTmBXkl123n0b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org