Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uFcIegMY_xh4jU3Hdi6HQLGrBzc.roa
File:                     uFcIegMY_xh4jU3Hdi6HQLGrBzc.roa (raw, json)
Hash identifier:          hukuWrDXWPXhpnJPV50YgJVBBrP9fDjb7a6rT/dF654=
Subject key identifier:   B8:57:08:7A:03:18:FF:18:78:8D:4D:C7:76:2E:87:40:B1:AB:07:37
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095169C79CF3B1B1F5F25930C23987E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uFcIegMY_xh4jU3Hdi6HQLGrBzc.roa
Signing time:             Mon 02 Jan 2023 03:44:56 +0000
ROA not before:           Mon 02 Jan 2023 03:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41119
IP address blocks:        93.170.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:16:9c:79:cf:3b:1b:1f:5f:25:93:0c:23:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b857087a0318ff18788d4dc7762e8740b1ab0737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:3d:ac:5c:94:94:e6:0b:4d:45:7b:3e:1c:
                    bd:25:f1:f3:57:e7:1c:52:eb:73:80:85:bc:9c:2c:
                    e8:03:fe:84:c4:84:4d:3a:a3:38:4e:49:07:d8:67:
                    c4:b2:f4:ca:70:f6:8c:4d:9e:1e:d9:26:11:62:30:
                    aa:4b:bc:44:58:cd:03:8c:a1:b1:b8:67:65:25:c0:
                    82:19:6e:5f:30:24:76:1a:5f:4e:32:da:15:10:4a:
                    79:78:61:f1:c4:4d:f0:5d:df:52:4d:fc:2f:06:5c:
                    a6:18:23:77:34:08:de:08:2d:51:a7:75:eb:6c:0e:
                    f2:f0:a8:c1:f7:84:c6:af:d8:28:06:3a:ee:74:56:
                    a5:2b:81:05:3a:95:98:52:ec:01:69:e6:d1:7b:b0:
                    11:a2:a7:e2:98:ec:07:77:0c:7f:71:4a:e5:34:21:
                    60:eb:7c:ca:49:94:b9:b2:20:c5:5e:ad:8b:9a:f9:
                    10:3b:55:25:ed:2c:bc:67:ce:17:0e:93:1a:ad:4f:
                    d5:c6:11:3a:cb:25:f5:07:3a:ea:3b:db:0b:c2:57:
                    6c:1e:29:50:82:b1:1e:d5:dd:ec:85:40:1e:24:14:
                    cd:7c:a5:ea:cc:7a:22:70:df:e2:c0:77:e0:7b:2d:
                    c7:51:ec:e0:53:17:4c:52:60:c1:5e:86:e3:11:78:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:08:7A:03:18:FF:18:78:8D:4D:C7:76:2E:87:40:B1:AB:07:37
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uFcIegMY_xh4jU3Hdi6HQLGrBzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:30:d7:5e:c6:ca:9e:0e:e8:ea:37:d9:c8:81:0d:fa:7f:89:
         6a:75:3d:71:36:0d:27:14:8d:aa:ce:93:8a:9e:60:f3:6e:de:
         4f:12:59:c4:89:12:d4:6a:84:c8:cf:ac:3c:41:9a:ba:51:5e:
         21:77:ea:ab:fd:16:cf:0c:58:e3:b2:e2:14:42:df:d6:03:96:
         3f:6e:13:8d:9d:d8:4e:ad:bb:a5:c8:8b:84:ce:6a:4d:93:f9:
         32:ea:73:cf:1d:3a:c3:ab:cd:f7:a5:38:8b:8d:7a:5e:72:37:
         cf:df:d2:92:87:5f:39:01:d1:bb:46:d1:a3:de:23:b8:79:37:
         a3:d3:81:5a:45:0a:60:3e:ec:e9:b2:99:e9:10:b0:65:cf:22:
         7f:91:89:18:5a:b2:59:7c:c8:3a:65:53:1f:6c:97:cf:3e:5e:
         ea:c7:fc:1a:a6:93:81:ca:35:47:8a:0c:36:5e:fa:9d:bc:5f:
         a6:01:d6:48:2a:6d:34:b9:f8:1b:7d:07:69:a8:59:96:5a:34:
         95:f2:4d:24:ea:9b:c5:a9:43:d8:e1:bf:31:81:ad:0f:14:b7:
         8c:0a:3b:4e:61:0f:4f:2a:fd:6f:8a:a1:e3:e0:8e:74:df:89:
         78:5c:6c:4c:32:57:8b:fe:58:1d:f2:6f:21:df:45:47:66:29:
         91:23:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org