Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SeXyKXXP_a1XMZi7DsN0Fl4oQY0.roa
File:                     SeXyKXXP_a1XMZi7DsN0Fl4oQY0.roa (raw, json)
Hash identifier:          C74VKdzUmEob2+aez6RVvnQp2PCziqnLaaki2q+1ahA=
Subject key identifier:   49:E5:F2:29:75:CF:FD:AD:57:31:98:BB:0E:C3:74:16:5E:28:41:8D
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       01860849397B81ECF11BE9E89C7CF79C8C99
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SeXyKXXP_a1XMZi7DsN0Fl4oQY0.roa
Signing time:             Tue 31 Jan 2023 14:44:21 +0000
ROA not before:           Tue 31 Jan 2023 14:44:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205937
IP address blocks:        93.94.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:08:49:39:7b:81:ec:f1:1b:e9:e8:9c:7c:f7:9c:8c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Jan 31 14:44:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49e5f22975cffdad573198bb0ec374165e28418d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:0e:50:12:38:a4:86:c4:ba:ea:74:28:eb:
                    2d:ff:60:f9:0c:7a:37:95:44:13:dd:70:35:ae:63:
                    16:73:c7:80:52:86:75:a5:c9:12:bf:5a:d4:50:a3:
                    88:f0:69:aa:b1:18:80:07:40:26:93:b1:9e:5f:bc:
                    98:1e:97:e2:4b:20:c4:01:dc:86:7e:10:24:a9:07:
                    cd:76:7e:ba:67:d1:35:ba:db:c0:44:17:a4:7e:c0:
                    02:c8:61:85:b0:cd:49:5a:72:bc:06:40:02:c1:b8:
                    50:e3:40:50:60:75:52:23:5d:30:a7:6a:32:a6:10:
                    39:a0:bf:49:db:57:d1:60:2c:54:f9:19:3e:2c:2d:
                    74:30:96:c9:0c:c6:8b:a0:64:f0:93:91:19:bc:7c:
                    ba:d8:fb:85:81:bb:ea:7e:01:46:2f:b5:d3:51:6e:
                    2c:c4:ba:64:81:1a:2c:06:58:fb:7f:c8:7f:c0:e8:
                    08:34:bd:32:be:55:fd:da:95:8b:ca:f9:e6:83:b9:
                    1f:07:e3:3a:00:5f:62:6b:6a:d1:57:f3:14:25:36:
                    a4:b4:2f:69:4e:47:8a:cc:91:44:66:82:78:4f:df:
                    14:b1:45:b7:38:d4:68:59:53:bb:3f:86:58:e4:66:
                    f5:d8:3a:a6:89:51:8f:92:f0:64:c0:68:97:7c:36:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:F2:29:75:CF:FD:AD:57:31:98:BB:0E:C3:74:16:5E:28:41:8D
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SeXyKXXP_a1XMZi7DsN0Fl4oQY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.94.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:bb:31:da:eb:b8:bd:2d:3b:19:3c:5d:92:d2:7f:c7:e8:
         67:3d:13:42:9f:2b:a7:de:a6:88:89:d3:7d:f0:b2:47:eb:fa:
         7b:d8:2b:0b:8c:fd:e6:a2:a2:00:11:3f:d9:bd:42:c1:f7:ce:
         e6:cc:4d:17:da:f5:2f:56:72:c7:0f:8c:96:a0:d3:77:89:4d:
         4a:39:8d:58:a9:8e:5e:a3:58:01:9d:c0:94:ae:7e:77:ad:b2:
         df:ac:90:6d:14:65:5e:c8:6b:8d:0a:15:09:14:68:a8:30:a7:
         45:8c:24:6d:1f:75:a2:b9:fc:51:dc:0f:a6:f6:29:4d:ff:1b:
         43:cb:3d:ec:e0:d0:8a:d7:1b:ee:fe:68:18:d0:a7:b6:fe:ef:
         60:70:6c:4f:3a:21:ce:7e:cc:58:45:3d:3b:99:60:4e:ba:af:
         f4:95:68:fe:d6:d9:db:6f:94:c7:56:d5:b1:23:2c:f9:02:1c:
         08:8f:55:85:c0:78:ac:66:1a:95:3c:59:d9:92:5d:88:60:6a:
         3a:f0:4d:54:35:53:f6:39:54:93:5d:1c:32:a9:fb:63:0e:3a:
         cb:ec:4e:ae:ff:47:f1:73:be:2c:d1:fe:c0:29:1a:15:eb:d4:
         12:f7:da:16:f9:01:ce:9a:78:81:95:94:6a:f6:23:2d:df:11:
         1d:42:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org