Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/n2n_J-2hyCI29HobOFh3RrZI66c.roa
File:                     n2n_J-2hyCI29HobOFh3RrZI66c.roa (raw, json)
Hash identifier:          BIkHaEwL1RFnOKsOzsBwZgIn1ajduYrTtISlnu9xy/A=
Subject key identifier:   9F:69:FF:27:ED:A1:C8:22:36:F4:7A:1B:38:58:77:46:B6:48:EB:A7
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018CC500489EAE7B8E722A502F074DAC5E9C
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/n2n_J-2hyCI29HobOFh3RrZI66c.roa
Signing time:             Mon 01 Jan 2024 12:29:39 +0000
ROA not before:           Mon 01 Jan 2024 12:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50653
IP address blocks:        217.113.10.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 11:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:48:9e:ae:7b:8e:72:2a:50:2f:07:4d:ac:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  1 12:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f69ff27eda1c82236f47a1b38587746b648eba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:37:d8:79:12:38:ea:94:6b:18:eb:9f:0f:8c:
                    c7:1b:d4:91:65:a2:99:40:6c:e7:a4:ad:2a:d1:78:
                    f6:d8:f8:26:72:98:d3:05:e6:42:a9:b0:4d:18:79:
                    c0:0b:91:0f:d4:8d:0e:cb:9c:bf:40:b0:79:09:7a:
                    01:54:68:5a:48:5d:44:69:f9:18:5b:2e:28:aa:4c:
                    44:99:ff:41:d4:b7:84:24:96:53:39:7e:fe:f9:21:
                    0a:02:0d:0f:ce:ce:23:8a:29:96:48:3f:15:f0:d2:
                    c2:01:c2:3f:53:60:a8:59:8e:b7:8b:9f:c4:77:7f:
                    29:29:52:81:08:69:b2:6d:bd:77:99:ec:f4:96:29:
                    ca:50:1d:c6:6e:2e:eb:b8:2d:49:b8:f2:b4:f1:a7:
                    28:d0:40:a7:0b:51:97:cd:f3:71:d3:72:79:27:53:
                    a0:07:6b:e8:82:f3:28:90:fe:84:20:0d:4c:31:14:
                    cc:66:8c:90:6d:7f:32:e5:f5:ea:a7:78:fd:4d:7c:
                    6c:e6:dc:7e:fa:b0:f4:f0:55:c0:29:fa:bf:b7:fd:
                    73:1e:fc:71:25:e9:61:d2:94:58:b8:7f:7f:69:6f:
                    df:3f:da:a0:20:5b:59:dc:a4:e0:a7:23:2f:ed:6c:
                    d4:f8:6e:9d:32:9f:52:c6:ed:f0:88:71:fd:ff:5f:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:69:FF:27:ED:A1:C8:22:36:F4:7A:1B:38:58:77:46:B6:48:EB:A7
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/n2n_J-2hyCI29HobOFh3RrZI66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:92:d1:e0:3a:20:d3:e8:98:d0:75:66:f0:4f:23:13:6c:ef:
         3d:ff:f1:f8:b7:fd:95:de:2a:e8:39:6b:32:3e:e5:4d:db:b3:
         2c:ef:e3:67:56:14:ea:83:0e:f8:58:e8:2b:d8:39:3e:0e:77:
         cf:cb:81:60:de:8a:5e:61:89:32:7e:9c:09:8b:5a:fb:74:9b:
         08:e1:36:34:61:41:e0:0a:0f:b2:d4:c2:f0:8e:cc:18:79:fa:
         42:13:b6:41:1e:d3:5b:96:1a:ff:7e:98:f3:3c:3c:f3:af:75:
         30:ec:b3:5d:63:32:49:57:91:35:2f:90:47:62:68:ad:51:d2:
         94:ce:28:a2:f6:1a:42:6c:01:31:90:f4:74:1c:89:92:89:ea:
         98:ce:9c:82:89:06:71:b6:42:59:61:4e:74:7c:5b:f0:9b:40:
         71:57:91:25:96:2f:db:1d:71:ae:2f:42:f6:48:6c:fa:dd:ff:
         43:34:0a:75:85:3b:e7:73:19:a8:35:cf:5d:89:c4:be:31:c8:
         54:6f:58:59:fe:6e:fc:9c:ce:9f:33:31:cc:e8:d4:c9:b8:e9:
         43:23:11:43:8a:65:be:f9:e4:da:c0:cf:52:33:02:74:fe:24:
         0f:1b:1c:4f:38:16:9d:25:89:a5:be:7c:45:67:40:9c:d0:55:
         11:15:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:22:07 2024 by rpki-client on console-ams.rpki-client.org