Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/f5RYenVZwBSdfG-u683efS6B4Bc.roa
File:                     f5RYenVZwBSdfG-u683efS6B4Bc.roa (raw, json)
Hash identifier:          A4sn7XNYdkCiIhcQ+iL79C2f7OqOdNNZCiDZbeWB7gA=
Subject key identifier:   7F:94:58:7A:75:59:C0:14:9D:7C:6F:AE:EB:CD:DE:7D:2E:81:E0:17
Certificate issuer:       /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial:       018F2A17A20037362ED641F2FD7ED42FB83C
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/f5RYenVZwBSdfG-u683efS6B4Bc.roa
Signing time:             Mon 29 Apr 2024 13:42:22 +0000
ROA not before:           Mon 29 Apr 2024 13:42:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44327
IP address blocks:        193.138.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Apr 2024 12:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:2a:17:a2:00:37:36:2e:d6:41:f2:fd:7e:d4:2f:b8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
        Validity
            Not Before: Apr 29 13:42:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7f94587a7559c0149d7c6faeebcdde7d2e81e017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:c0:fd:9b:84:5e:b8:14:2b:9e:63:76:71:
                    e8:9d:2d:22:37:85:37:a5:af:8b:78:11:b9:c8:ca:
                    53:cd:c9:4a:ae:89:4c:76:62:b7:b0:bf:34:60:7b:
                    37:07:a1:a9:7a:2b:87:f3:ac:fd:7c:3d:d4:0e:00:
                    94:76:4d:2a:b4:9f:5a:e1:32:5c:42:f2:8d:29:92:
                    41:fe:4b:21:ef:46:f0:44:96:4a:ba:76:30:05:53:
                    83:bf:27:1a:06:40:59:f6:95:de:fe:e9:bc:5c:5c:
                    ee:1a:57:69:cc:78:f5:29:54:15:a8:4d:96:7c:84:
                    f3:19:5c:e6:d7:48:ae:bc:46:e9:e5:6c:7d:82:62:
                    22:63:85:be:18:ff:46:db:85:a7:40:15:77:ff:fd:
                    36:9f:4c:de:28:cf:32:89:96:94:a7:2a:92:c2:f7:
                    92:6f:35:2a:b0:c8:fb:d0:97:34:a5:2a:b3:36:25:
                    6a:20:1c:c8:20:ad:4a:fe:06:49:f5:ce:ea:d3:ac:
                    75:36:2c:99:ca:17:53:b8:e8:7c:91:ef:87:73:20:
                    f6:53:a2:d7:da:03:ee:ef:23:c8:78:f5:ec:b6:c0:
                    ce:4f:ad:69:ce:53:01:e7:44:93:f8:05:33:0d:5c:
                    80:53:ad:95:21:fc:bd:d1:4e:cd:14:6b:f1:31:b1:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:94:58:7A:75:59:C0:14:9D:7C:6F:AE:EB:CD:DE:7D:2E:81:E0:17
            X509v3 Authority Key Identifier:
                keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/f5RYenVZwBSdfG-u683efS6B4Bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:97:65:c4:74:24:c4:fe:e0:20:6f:70:6a:93:7a:ca:d2:2a:
         24:7b:4a:50:23:7f:e4:ad:7e:3c:aa:85:d0:20:f9:08:f1:8f:
         5c:f9:90:64:40:4b:84:bf:5d:2b:50:cf:75:97:ee:58:91:3a:
         cc:7f:ba:28:8d:f9:a3:82:c0:8a:d3:47:bb:dd:1d:23:cf:63:
         38:5c:cf:b5:ba:03:c5:5d:e9:42:d5:cb:a9:38:5d:ac:30:6f:
         cc:62:18:39:3e:e5:af:89:c5:a2:96:ed:a7:f3:8d:d8:f0:09:
         51:b7:db:d6:0e:64:4e:44:1f:02:11:30:a0:07:7e:1e:2f:a6:
         7e:10:c3:37:5f:0a:34:0b:4a:2a:a8:09:19:5d:83:d7:97:e0:
         b6:bb:bb:f1:35:70:0f:a0:7c:cc:6e:37:14:5e:a3:c4:0f:69:
         e7:51:2b:73:cc:03:46:f5:4c:03:44:64:91:ab:2a:b5:f4:05:
         f3:3f:04:a7:ff:72:00:d6:fc:e4:9f:5b:8e:64:ad:66:b2:95:
         a0:b7:a5:33:7b:c9:0e:fc:f2:a4:41:d3:64:73:06:78:25:86:
         48:f7:a7:26:87:e2:d6:18:af:45:66:e6:8e:84:3e:67:ef:75:
         44:22:e5:58:5f:ce:86:5b:c3:bb:2b:6a:c4:fc:52:93:c7:28:
         38:10:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:25 2024 by rpki-client on console-ams.rpki-client.org