Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa
File:                     _JjN9z_eHtKi9K13GXzdjpss-OU.roa (raw, json)
Hash identifier:          luhqcM39wbAqHPzdBIRBQ7jgMJSBiZdBIF4p+776wV0=
Subject key identifier:   FC:98:CD:F7:3F:DE:1E:D2:A2:F4:AD:77:19:7C:DD:8E:9B:2C:F8:E5
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       018B3D0CE3B5A58C59CFB02DA592A309233E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa
Signing time:             Tue 17 Oct 2023 09:52:16 +0000
ROA not before:           Tue 17 Oct 2023 09:52:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210931
IP address blocks:        93.179.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3d:0c:e3:b5:a5:8c:59:cf:b0:2d:a5:92:a3:09:23:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Oct 17 09:52:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc98cdf73fde1ed2a2f4ad77197cdd8e9b2cf8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:e1:d1:b3:09:19:71:24:56:d0:05:82:36:
                    fe:17:5a:19:f9:e4:68:04:db:33:1c:ab:4c:f8:09:
                    ac:4d:48:52:1b:e9:67:b2:52:2c:bf:3e:49:03:18:
                    03:d4:c9:50:ce:de:89:47:2c:67:69:49:98:0b:e9:
                    b0:a2:7a:8d:6f:5f:4c:39:20:aa:57:63:c7:79:d6:
                    da:5b:53:5b:8f:7c:ff:01:d8:89:f5:f1:5e:9a:f0:
                    6d:a1:c3:45:e7:ac:f0:33:6c:29:85:0a:70:53:32:
                    55:84:fb:4d:7f:50:71:b8:46:6d:9b:4d:54:c3:49:
                    4b:dc:70:a2:ec:8a:1a:46:03:9d:8f:68:25:52:d3:
                    5b:10:33:68:f2:4e:c7:98:9a:43:c3:59:de:fd:e7:
                    a4:2a:b2:15:7b:59:e2:98:f2:d0:b5:5c:fd:d5:5f:
                    3c:9f:79:10:9a:df:88:43:ef:42:a7:1a:87:12:59:
                    71:d4:7f:2d:cf:d8:3b:21:1a:82:60:c7:59:29:2a:
                    30:af:7c:8d:5b:0f:e8:db:d0:b1:4e:7a:57:8f:bf:
                    e7:51:84:0a:78:4a:72:cc:99:3d:8d:bc:84:7b:c1:
                    30:e8:fb:80:21:3b:27:58:13:50:be:e7:5e:28:c5:
                    b3:d4:dc:b2:08:9d:ac:82:81:32:da:d4:21:8e:6b:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:CD:F7:3F:DE:1E:D2:A2:F4:AD:77:19:7C:DD:8E:9B:2C:F8:E5
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:6d:83:4b:7f:6c:43:7c:25:f0:ec:89:f3:0e:63:25:f1:
         9b:26:3c:a1:69:b4:b8:35:f7:42:e7:a4:70:de:9d:c1:7d:55:
         fd:49:de:2d:82:d4:6e:f6:26:19:11:29:d4:d2:9e:7c:00:86:
         b5:f4:b9:94:c2:7a:53:30:1e:37:67:f0:fb:73:cf:35:09:ae:
         d5:cb:a0:be:7e:bc:a4:39:dd:71:ae:74:51:2c:76:26:af:58:
         be:43:73:56:4d:be:44:2a:f9:c1:07:60:70:3e:a3:ff:6d:b9:
         8a:d0:87:28:47:88:65:59:c8:fa:fd:38:2d:61:e0:c8:f4:37:
         15:44:27:41:d8:d1:ab:e3:9e:43:f1:54:98:02:46:f8:1f:9d:
         23:cf:ae:74:d2:d2:59:b0:cf:47:1b:3c:5c:57:af:5d:49:f4:
         07:67:05:48:01:f0:79:1f:8b:28:88:62:17:6f:dc:fb:28:80:
         3d:66:1f:6d:88:e9:c0:66:fc:6b:d5:6d:92:84:bb:8b:97:3f:
         ab:40:70:a8:75:cc:7e:4e:63:f8:15:72:d7:07:3f:b8:8c:35:
         8e:c4:50:dc:71:11:1a:2d:de:6a:b2:e8:58:09:41:60:ea:d5:
         99:cf:50:0f:3d:8e:ac:fb:ae:4f:64:f8:af:a5:b9:27:c5:02:
         f6:b9:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org