Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/euD1GD3wZablXjXZH4L-6xPs7Nk.roa
File:                     euD1GD3wZablXjXZH4L-6xPs7Nk.roa (raw, json)
Hash identifier:          QHVnnzWIaVSLKJGRONeOf3/oWsbEyqhN5rABZ2V0eU4=
Subject key identifier:   7A:E0:F5:18:3D:F0:65:A6:E5:5E:35:D9:1F:82:FE:EB:13:EC:EC:D9
Certificate issuer:       /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial:       01856D5D1585317909E5D8508D412BF42B51
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/euD1GD3wZablXjXZH4L-6xPs7Nk.roa
Signing time:             Sun 01 Jan 2023 12:44:54 +0000
ROA not before:           Sun 01 Jan 2023 12:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     39748
IP address blocks:        193.93.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:5d:15:85:31:79:09:e5:d8:50:8d:41:2b:f4:2b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
        Validity
            Not Before: Jan  1 12:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ae0f5183df065a6e55e35d91f82feeb13ececd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:cd:1d:80:d9:11:ad:3f:30:94:90:4b:10:
                    7c:d3:4e:99:bc:d0:14:47:f9:f2:12:9a:39:1b:83:
                    b2:68:4e:4f:97:64:35:4a:46:4b:9c:ea:f7:cd:c7:
                    7d:ee:0a:af:2a:32:ce:54:7b:a8:ed:7b:df:81:eb:
                    0d:f9:8a:66:33:af:83:b5:c1:22:e2:f1:fa:89:22:
                    40:3c:35:e7:ef:31:2c:be:4f:61:2e:06:39:fb:0e:
                    49:5f:9a:07:32:3c:30:a5:c1:30:95:03:dc:98:00:
                    dd:8f:d8:2a:0c:1c:c8:81:38:9f:80:4a:8e:72:26:
                    d1:39:1b:38:44:73:04:5c:c7:72:c0:f0:94:33:81:
                    93:26:77:fa:42:34:cb:68:26:55:b5:4d:6e:62:c7:
                    c0:03:ac:1e:24:0f:5e:38:61:cf:b1:1b:45:ae:7b:
                    47:d7:76:4d:6e:2f:3d:8c:75:59:c6:b6:fc:48:a2:
                    33:8b:2a:c7:7d:89:4d:4a:59:f0:2a:c5:51:be:1f:
                    c1:5e:83:4b:be:95:33:5e:de:8f:20:24:10:d5:71:
                    c7:e0:60:45:54:25:ee:4a:e6:ee:9c:20:cc:da:da:
                    b5:fa:4b:b1:bc:83:66:43:be:9e:45:df:7f:b7:d2:
                    3f:dc:25:a4:0e:52:d1:f2:35:34:f3:98:c0:50:67:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:F5:18:3D:F0:65:A6:E5:5E:35:D9:1F:82:FE:EB:13:EC:EC:D9
            X509v3 Authority Key Identifier:
                keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/euD1GD3wZablXjXZH4L-6xPs7Nk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:39:35:02:4a:8e:29:1b:d3:2f:85:b8:5e:7c:96:7e:2b:
         3a:36:75:6b:ed:2d:82:15:a3:25:d5:40:ee:67:39:ef:0e:9f:
         8e:21:a7:7f:ed:5e:cf:f5:46:5c:b2:da:0e:86:01:ec:0a:73:
         51:6f:d8:87:bd:19:4f:aa:1a:8f:9c:35:17:d6:ba:8a:67:0f:
         e3:03:1a:36:eb:19:82:d1:1f:c9:d0:32:51:f6:9e:b6:ed:6f:
         28:c8:f1:90:24:aa:11:c7:5c:7b:71:b2:47:6a:0b:cd:bd:ae:
         45:1a:0e:ad:a4:a0:13:e5:e5:c6:72:7c:21:dd:13:da:9e:00:
         e6:48:4b:38:62:c7:8c:41:c6:90:01:e4:96:02:1b:2c:5a:2d:
         1c:84:bc:9a:e8:d8:1e:2c:fa:d3:6c:84:42:a7:6e:5d:9f:1c:
         4b:9f:fe:30:86:21:a1:1c:54:b8:4b:11:36:aa:82:48:5f:f8:
         8d:ff:ec:82:6a:94:25:19:00:13:6d:36:0a:85:18:a5:46:8b:
         9f:e7:15:c0:2e:78:e6:db:32:d4:98:3e:97:bf:92:03:c1:64:
         aa:03:8d:77:e3:1f:c8:9f:a6:ed:5c:e5:26:0d:5d:3b:2c:9d:
         34:c2:fc:63:fb:2a:ec:ce:d6:ce:0d:6f:31:fc:64:d5:34:77:
         ba:6b:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org