Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rMd92SKYNYLJHJER1JQypF3udFI.roa
File:                     rMd92SKYNYLJHJER1JQypF3udFI.roa (raw, json)
Hash identifier:          8Fd/5EoUK/WNSdUC9UfCe3Wrmfp0Gk/TcqAG85TdVTQ=
Subject key identifier:   AC:C7:7D:D9:22:98:35:82:C9:1C:91:11:D4:94:32:A4:5D:EE:74:52
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01856C65F753C6FEC714FEDC5A10BD528208
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rMd92SKYNYLJHJER1JQypF3udFI.roa
Signing time:             Sun 01 Jan 2023 08:14:59 +0000
ROA not before:           Sun 01 Jan 2023 08:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201389
IP address blocks:        93.179.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Mar 2023 19:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:f7:53:c6:fe:c7:14:fe:dc:5a:10:bd:52:82:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  1 08:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acc77dd922983582c91c9111d49432a45dee7452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:f4:07:b9:41:3b:7a:94:a6:2d:5f:61:94:
                    e1:6c:94:5b:23:95:a2:6e:8d:c9:24:08:24:24:3f:
                    98:23:33:47:f6:ac:95:e9:31:f4:87:67:9c:9f:68:
                    86:14:e9:b6:18:57:7c:d5:10:e2:1d:26:0f:40:8f:
                    86:ce:04:3c:0f:fe:2b:22:05:35:9e:45:61:dd:b1:
                    c8:9d:51:84:f3:fe:6c:12:f9:68:c7:c8:79:de:67:
                    9a:b5:8c:64:8f:17:09:ec:ab:ff:7d:c8:d4:f2:51:
                    50:71:e9:9e:99:c2:c8:8d:48:7f:50:11:e7:2e:87:
                    f7:e0:c2:52:3c:fd:5c:ba:9d:b6:2a:2b:09:31:bd:
                    37:89:ab:32:13:ca:8a:0b:e4:b0:a6:bd:5a:18:2b:
                    05:a6:fb:ca:2f:25:b6:05:e6:46:fb:ed:b4:d9:5f:
                    75:0f:31:93:cd:54:b1:38:0d:86:18:64:51:a3:5e:
                    d9:a5:5c:d8:db:62:00:1a:d6:6e:48:f9:12:5d:4f:
                    1b:3e:31:2c:04:f9:55:7b:ff:8e:85:11:9b:66:f0:
                    00:17:77:f4:63:7e:8f:c9:73:1e:6b:e1:b0:8b:2e:
                    38:45:4f:e3:15:b2:42:af:e9:a4:09:cb:27:54:3d:
                    a3:3f:b8:83:a2:fc:e4:79:f8:66:d0:f3:26:cf:7c:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:7D:D9:22:98:35:82:C9:1C:91:11:D4:94:32:A4:5D:EE:74:52
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/rMd92SKYNYLJHJER1JQypF3udFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:89:de:0b:e1:e8:f8:c5:9b:20:52:64:bc:fb:b1:f9:3d:
         70:6f:5c:e2:ff:15:c4:0b:e8:c0:6a:d6:6b:e4:80:dc:68:1c:
         6f:62:d2:d2:1d:98:b6:ad:f8:15:36:26:c2:3e:7c:1d:3b:af:
         e5:07:05:28:3b:23:12:9d:6f:51:46:98:f3:d8:44:c1:8a:7b:
         19:81:5e:52:00:fa:cf:aa:27:7b:59:34:0c:68:c9:20:3e:a7:
         17:d4:1c:3f:69:56:45:4d:a5:0e:8b:40:f5:33:73:9a:e3:ee:
         77:e3:cb:08:55:12:ca:cf:35:73:59:4a:ad:88:ed:da:15:83:
         02:e2:a1:74:cf:c4:ad:6f:34:6a:40:f5:8e:a8:7d:8b:d5:9a:
         3b:58:3c:01:59:46:34:20:2d:9f:f7:00:0a:3c:c5:56:6c:32:
         f4:b3:7a:a8:f4:90:f3:e5:17:a5:c9:db:25:77:2d:29:7c:11:
         4c:fc:0c:02:34:75:64:59:93:58:87:de:65:26:92:67:74:ee:
         79:56:b0:14:52:ef:97:65:22:9f:68:4a:0c:f4:c6:b7:db:a8:
         ff:80:19:3d:5e:de:07:2d:e9:31:62:41:6e:56:dc:49:f3:f3:
         33:22:ef:20:dc:d8:ff:37:40:b1:33:2a:57:37:d8:f4:d7:7e:
         5a:d4:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org