Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-m_4pOKAinzAHwL6Ux5-tnBu9c.roa
File:                     1-m_4pOKAinzAHwL6Ux5-tnBu9c.roa (raw, json)
Hash identifier:          hlPtJUVy7iOioCcU8/nl1r1/wT73X54p/CJffN8Cil0=
Subject key identifier:   D7:E9:BF:E2:93:8A:02:29:F3:00:7C:0B:E9:4C:79:FA:D9:C1:BB:D7
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095C3B8FF296CA7E69609F24C96A472
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-m_4pOKAinzAHwL6Ux5-tnBu9c.roa
Signing time:             Mon 02 Jan 2023 03:45:41 +0000
ROA not before:           Mon 02 Jan 2023 03:45:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213182
IP address blocks:        93.170.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:c3:b8:ff:29:6c:a7:e6:96:09:f2:4c:96:a4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7e9bfe2938a0229f3007c0be94c79fad9c1bbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:76:6b:97:53:20:b5:4b:12:c5:77:e3:a1:
                    6d:f2:16:ef:72:14:6e:39:5f:1f:a7:f3:e2:d2:18:
                    45:dd:0a:bf:db:33:06:e8:51:01:41:a5:df:85:55:
                    a2:e3:2a:1f:8b:da:07:20:9b:da:1a:34:66:31:c2:
                    a6:d6:b4:a3:92:d9:d2:48:55:04:ba:9a:28:b1:a0:
                    d7:d1:62:f6:aa:3e:1b:32:8b:fc:5c:87:d4:66:0b:
                    b0:41:3f:c9:b5:e9:06:d2:71:c9:2e:01:f6:69:11:
                    da:0d:9b:43:80:4e:e7:38:0a:98:d7:8c:fa:40:9a:
                    23:0f:6d:1f:9a:c8:eb:ee:d6:00:96:c0:f9:f7:cc:
                    49:6b:ae:96:7c:6c:a8:3e:dc:44:89:2f:d8:33:d0:
                    65:2b:f3:75:70:71:a0:44:ce:db:52:25:85:ee:90:
                    33:3f:99:d1:67:3f:82:83:90:d9:af:2a:9c:31:ee:
                    75:5f:3a:92:35:6e:37:75:17:a4:87:c8:cf:cd:63:
                    48:3a:11:5d:07:f3:46:e1:59:6a:00:2e:75:c1:e4:
                    98:c7:8b:ee:44:10:38:36:d3:d8:78:c7:7a:82:2d:
                    21:e0:59:00:47:1c:a7:54:72:c8:19:55:9b:a6:f2:
                    2a:db:3c:51:0d:bf:fc:3b:cd:f9:42:dc:6e:c5:e0:
                    95:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:BF:E2:93:8A:02:29:F3:00:7C:0B:E9:4C:79:FA:D9:C1:BB:D7
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-m_4pOKAinzAHwL6Ux5-tnBu9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:23:42:0b:fd:41:99:9e:d8:86:7d:7a:b9:57:65:72:aa:
         f5:e7:31:e9:bc:c0:f2:5d:8c:c1:a2:78:2b:4b:e8:08:9d:13:
         84:31:b4:36:9f:c0:00:60:fe:26:99:b4:de:83:68:91:8c:95:
         5b:7c:90:33:9c:84:54:dc:4a:10:e3:94:1d:f6:04:d1:dc:d2:
         c6:16:b8:9e:e0:fa:a9:4b:9e:6a:b1:6c:86:e1:e4:7c:39:8f:
         6b:92:fe:de:94:9a:c8:b8:ed:ba:d8:51:e6:f2:72:f3:c8:45:
         06:68:e6:cd:08:d2:73:e3:ca:c1:ef:c3:cd:6f:d1:6c:2d:78:
         13:0d:0e:db:3f:56:1d:03:80:e2:dc:62:d2:41:48:9c:d1:00:
         67:ff:97:cf:0f:46:ac:64:69:0e:1c:09:d0:ab:a4:59:ce:ce:
         93:67:75:0b:34:3f:34:f4:59:c8:9f:98:ab:14:3d:3d:4b:47:
         58:b6:78:37:6d:17:d9:e9:8d:47:9e:47:8a:d0:5e:47:f6:b4:
         a2:61:3e:02:42:92:e3:ac:ec:de:7d:87:0d:93:77:f7:a2:17:
         2b:75:fc:cc:fc:46:f1:61:3c:1e:6b:34:ca:1f:bf:98:fd:01:
         33:60:ee:80:46:8c:fa:b3:57:f1:02:a6:bd:2c:25:3e:99:10:
         f4:45:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:48 2024 by rpki-client on console-ams.rpki-client.org