Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mWGZULiVjQTKIxPdCVgk5X4uy4A.roa
File:                     mWGZULiVjQTKIxPdCVgk5X4uy4A.roa (raw, json)
Hash identifier:          EH2Gyuz29MLQjhtrC93dt0jlcEwlf5/4veEI2qA74+Y=
Subject key identifier:   99:61:99:50:B8:95:8D:04:CA:23:13:DD:09:58:24:E5:7E:2E:CB:80
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01856C53D800B5C99F0934F6EC8EC4412E6D
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mWGZULiVjQTKIxPdCVgk5X4uy4A.roa
Signing time:             Sun 01 Jan 2023 07:55:12 +0000
ROA not before:           Sun 01 Jan 2023 07:55:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211863
IP address blocks:        93.190.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:d8:00:b5:c9:9f:09:34:f6:ec:8e:c4:41:2e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 07:55:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=99619950b8958d04ca2313dd095824e57e2ecb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:27:8e:ef:4e:11:ac:07:8b:c7:45:17:23:0d:
                    f8:6f:1a:d4:14:c8:87:80:8f:d8:b6:75:45:7f:ab:
                    4d:72:24:95:36:58:80:7c:80:59:cb:13:57:4c:57:
                    3f:0e:6e:cd:e6:36:33:8b:1a:81:c3:9f:28:e0:85:
                    8f:a5:eb:ce:a8:e0:d5:fa:74:de:63:32:f8:e7:df:
                    e7:41:55:71:e6:92:e1:d4:6e:7f:bb:3b:8c:16:36:
                    0a:bd:fa:7f:ee:65:91:fb:94:51:f3:d0:7e:f9:f9:
                    d3:63:7a:74:23:8c:ab:53:94:86:4a:c5:09:3a:0b:
                    76:91:9e:f8:e7:0f:62:d9:f1:6b:bc:84:cc:f4:72:
                    11:ad:ff:dd:22:3f:97:e0:1a:d2:a6:26:e9:d8:72:
                    92:83:28:1f:f0:a4:18:e9:d4:ca:cc:f4:cb:eb:cb:
                    3d:1c:f7:25:ce:bb:a8:fd:48:40:19:1d:57:ef:0c:
                    30:50:e6:f4:05:f8:b7:b5:16:11:a5:4a:b4:d5:55:
                    77:c2:8b:10:17:00:08:69:cb:5b:05:b4:6d:ee:0e:
                    af:8e:75:fe:61:06:aa:fd:d4:3d:ed:d5:5c:29:a2:
                    e0:d9:cd:d8:f6:ff:9b:37:78:bd:1f:e1:2d:a9:02:
                    79:31:f5:cd:42:8d:1d:cd:26:6a:4d:9d:34:7f:c5:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:61:99:50:B8:95:8D:04:CA:23:13:DD:09:58:24:E5:7E:2E:CB:80
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/mWGZULiVjQTKIxPdCVgk5X4uy4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:9d:e5:cb:ab:eb:49:3e:8b:3c:87:14:ba:e6:c8:c0:06:
         65:f2:ad:0b:a6:9a:f0:9c:07:da:c6:69:c4:8b:17:08:8f:2a:
         fd:02:17:01:88:c2:b6:30:05:7a:67:5c:06:b2:6c:39:14:e5:
         0b:c7:0b:f7:ee:7a:2a:32:da:3c:39:37:32:10:a2:7c:16:49:
         d5:e3:91:87:70:36:7b:82:e4:24:6c:99:c7:d0:7e:30:0c:56:
         a1:87:61:36:cb:c9:42:02:fe:a5:84:b8:e0:c8:b6:b7:c7:6b:
         b5:bc:3f:90:f8:b9:20:e3:81:87:2e:bb:18:d5:5c:f2:6c:63:
         3a:cc:9d:ea:8d:ef:d7:4b:39:24:5e:5f:19:2c:ad:1d:b7:ec:
         b5:c6:63:ae:fb:a1:63:e5:e7:bc:40:e6:15:85:5e:5a:10:44:
         fd:f5:d0:57:b7:23:ae:4e:fb:61:b4:56:4b:27:9b:0d:ff:40:
         b8:e2:69:c6:ee:ff:be:6d:29:f7:33:e4:5e:e4:09:e4:ee:70:
         45:bc:49:19:24:52:59:0e:2b:8b:a2:66:23:3a:18:8c:94:41:
         b0:d7:3d:8d:34:ef:71:6b:30:93:88:c8:be:a7:d6:8f:44:30:
         71:d4:13:a8:39:e6:a1:b9:08:db:9a:d5:d2:f1:ad:50:70:cd:
         f6:10:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org