Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NCCPLRnbH_tDg9Ttkq8h_BPuHt0.roa
File:                     NCCPLRnbH_tDg9Ttkq8h_BPuHt0.roa (raw, json)
Hash identifier:          9LEsnmhSwPX3FiUvoLMXDm3gKIwg431vLZBjFpiKhlM=
Subject key identifier:   34:20:8F:2D:19:DB:1F:FB:43:83:D4:ED:92:AF:21:FC:13:EE:1E:DD
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       018CCA2A5A1601AC787100BAEC526D25AE4C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NCCPLRnbH_tDg9Ttkq8h_BPuHt0.roa
Signing time:             Tue 02 Jan 2024 12:33:42 +0000
ROA not before:           Tue 02 Jan 2024 12:33:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213182
IP address blocks:        93.170.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 13:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:5a:16:01:ac:78:71:00:ba:ec:52:6d:25:ae:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 12:33:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=34208f2d19db1ffb4383d4ed92af21fc13ee1edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:58:f6:c4:d8:24:c1:99:db:a3:58:c5:55:
                    b6:b0:da:b9:6d:71:65:cf:e0:24:10:b9:d3:d6:3d:
                    f6:31:ad:fb:01:9e:bd:b9:60:67:30:88:92:92:4c:
                    a0:99:86:6f:88:46:c5:c1:70:e0:50:97:fd:ec:9e:
                    a7:8d:bf:2e:e2:a9:da:61:6b:8a:ea:ec:70:60:01:
                    bb:b2:99:55:e5:e3:32:57:08:cc:45:37:1c:d9:6d:
                    90:0a:8b:aa:60:18:2a:33:b4:a3:02:bc:25:60:5c:
                    a1:00:d5:b6:e0:9d:98:c2:b9:cd:9d:df:8f:4f:0f:
                    c8:55:68:59:87:6c:b7:2b:79:ee:5e:13:85:d0:91:
                    5e:e2:84:05:32:b2:ea:53:1b:ac:1f:24:45:24:51:
                    26:63:7f:2f:f0:e9:c3:94:d7:a1:ff:ca:f8:c0:c1:
                    0f:4b:99:cc:48:98:1a:82:c2:19:6a:d3:40:d2:9e:
                    52:99:48:08:42:f9:b5:9e:03:19:d5:af:37:65:20:
                    48:27:c8:66:ec:0d:57:65:71:b2:8f:ce:8e:a2:ea:
                    c4:29:41:ad:c6:a4:5c:e3:d1:46:10:b0:a2:96:70:
                    54:45:3f:c8:2e:e5:62:93:21:98:88:34:5d:2c:25:
                    34:e2:40:6d:47:f5:b2:16:65:c0:e1:fb:0b:2d:66:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:20:8F:2D:19:DB:1F:FB:43:83:D4:ED:92:AF:21:FC:13:EE:1E:DD
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NCCPLRnbH_tDg9Ttkq8h_BPuHt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:0c:7a:6f:b7:cf:8d:59:49:f8:be:c5:4f:99:d0:30:a2:4a:
         19:43:12:a8:30:b6:50:02:47:09:91:1c:98:2a:4c:7f:cf:5e:
         ef:50:0a:4d:4d:3b:a4:07:ee:d6:b7:0c:15:0f:7c:4c:a4:e5:
         db:f4:ab:9b:16:ac:21:93:1b:8b:86:c0:f2:01:ca:5c:c1:8a:
         5d:57:fc:6f:bc:24:cb:e4:88:3e:41:a0:7c:e7:47:43:8b:77:
         89:e4:d4:39:44:d6:91:07:c2:37:8e:f2:c3:16:1f:59:43:11:
         6c:b2:b3:19:a1:67:90:24:48:04:5f:b9:af:83:df:55:ea:b4:
         82:e3:1a:de:a5:ad:d4:c8:2f:10:77:e3:62:56:d4:76:c6:ee:
         5f:26:fd:62:45:5d:2f:68:c6:dc:9a:33:05:a8:cc:74:11:60:
         03:3c:6d:ca:40:dc:9a:ad:ce:00:88:ae:a0:c5:c0:d4:48:18:
         65:c2:c7:a1:9f:79:0c:19:b0:3b:c5:81:f1:92:84:02:b8:07:
         75:17:d0:67:6b:5f:da:a0:47:e5:80:72:4a:84:db:4f:e1:6c:
         da:b3:de:db:9f:b1:c0:18:d9:c6:4e:bf:27:ac:ce:d9:fc:a3:
         42:07:54:11:c8:88:60:22:29:4b:92:d5:47:7b:55:68:c5:48:
         80:71:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org