Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/uM8DOywVDGyXKEve_Pnu7NYmqqA.roa
File:                     uM8DOywVDGyXKEve_Pnu7NYmqqA.roa (raw, json)
Hash identifier:          wi2Qwqy3EIJANPNslrrtm53JQEGukJOCk3THGgIkeK0=
Subject key identifier:   B8:CF:03:3B:2C:15:0C:6C:97:28:4B:DE:FC:F9:EE:EC:D6:26:AA:A0
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01856C65EFF6A890D90A109B4843B86990FC
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/uM8DOywVDGyXKEve_Pnu7NYmqqA.roa
Signing time:             Sun 01 Jan 2023 08:14:57 +0000
ROA not before:           Sun 01 Jan 2023 08:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47510
IP address blocks:        93.179.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 May 2023 11:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:ef:f6:a8:90:d9:0a:10:9b:48:43:b8:69:90:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  1 08:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8cf033b2c150c6c97284bdefcf9eeecd626aaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:fa:55:6f:f8:aa:fb:68:76:04:00:fb:36:
                    2a:7a:94:c5:55:8b:2f:0e:63:02:ef:76:1c:ff:e0:
                    2c:f9:67:0b:99:da:46:e4:db:5a:aa:b2:79:12:e8:
                    fe:a7:52:66:e7:d4:3b:54:d6:84:6c:0e:60:ae:2a:
                    35:60:39:58:88:da:e7:05:a5:3a:01:e9:38:aa:40:
                    3b:7b:70:52:1f:92:ee:e8:21:e2:a1:82:66:3c:76:
                    ff:b3:67:3d:78:2b:2f:f4:db:41:c0:d8:ce:56:2e:
                    b9:01:51:f4:12:5c:9c:6a:ec:e3:81:9b:aa:c7:78:
                    08:e8:26:ef:22:9d:14:fb:c9:00:06:bf:56:2a:c5:
                    5e:8e:21:d7:09:6b:50:a9:9b:52:af:bc:5c:d5:8f:
                    fe:30:8d:32:41:85:26:b6:43:b7:de:16:86:e9:31:
                    44:a8:7f:9d:74:c1:b5:63:90:6c:ac:7b:a1:ac:40:
                    83:31:f0:65:bb:0b:bd:a8:3a:12:93:98:2b:60:5b:
                    17:11:6d:b7:cb:08:a9:52:c0:59:6c:90:f0:91:4c:
                    0e:fe:e6:c9:22:54:ef:d6:0c:1a:eb:bb:38:6f:d2:
                    52:f5:9f:39:20:b2:f6:c9:63:a3:b3:a7:71:10:18:
                    22:a5:ee:d2:cd:b5:1a:a8:50:ce:c2:df:0a:e1:6c:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:03:3B:2C:15:0C:6C:97:28:4B:DE:FC:F9:EE:EC:D6:26:AA:A0
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/uM8DOywVDGyXKEve_Pnu7NYmqqA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:43:ee:a5:91:5e:6e:5b:f3:e3:6f:60:b0:f5:7f:d7:8c:
         44:45:a9:25:bf:c1:a1:f4:55:37:e3:02:27:32:89:3d:3c:51:
         4d:58:b6:eb:09:61:c9:18:67:a2:e8:fe:7b:7b:c5:3d:8e:00:
         1d:70:73:34:d8:f1:c9:17:13:26:3c:19:57:75:21:92:9b:bc:
         45:46:cd:ad:ae:94:db:00:67:e5:48:a0:0b:8d:c4:da:c1:9f:
         64:4f:5d:68:f4:e9:42:bd:71:76:ce:e0:5b:5b:59:03:fe:23:
         e2:63:ed:1f:4f:d5:0f:e7:e8:ab:a0:2a:ae:09:51:25:88:d8:
         f0:30:18:94:bd:ce:a0:34:24:b9:58:2c:67:a5:e1:2e:d2:26:
         20:9f:91:47:45:04:5d:fe:1d:fe:c3:e7:b8:0e:01:f4:79:97:
         05:ca:30:ab:b2:1b:40:c9:47:10:a2:d4:cb:69:97:90:52:d7:
         5c:07:be:69:28:59:4c:20:9e:c6:3a:01:af:d1:48:aa:b4:55:
         28:6f:d3:9a:46:97:5f:62:4c:fa:1f:3c:72:9c:ad:af:eb:aa:
         6e:2a:7d:d5:f8:93:4b:c1:cc:5f:54:c6:c6:22:b9:49:18:a1:
         e3:2a:13:e1:22:3f:6b:59:6d:d1:38:9b:1e:ff:76:8e:8f:18:
         c2:7e:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org