Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/Skwk_DCZIzYhjpi3CCXOMRiLTmk.roa
File:                     Skwk_DCZIzYhjpi3CCXOMRiLTmk.roa (raw, json)
Hash identifier:          pAaijuOrOcYLzgXWaWVNqkTOLEHGmfTRYho29eyDK8E=
Subject key identifier:   4A:4C:24:FC:30:99:23:36:21:8E:98:B7:08:25:CE:31:18:8B:4E:69
Certificate issuer:       /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
Certificate serial:       0185707980B36AC6F4FC203B5118611372FC
Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/Skwk_DCZIzYhjpi3CCXOMRiLTmk.roa
Signing time:             Mon 02 Jan 2023 03:14:49 +0000
ROA not before:           Mon 02 Jan 2023 03:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31510
IP address blocks:        193.228.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:80:b3:6a:c6:f4:fc:20:3b:51:18:61:13:72:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0
        Validity
            Not Before: Jan  2 03:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a4c24fc30992336218e98b70825ce31188b4e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:56:94:22:bd:1f:8b:83:45:32:a3:23:fb:
                    19:4d:7b:78:aa:fb:9b:0f:c0:94:02:0b:92:c7:2f:
                    0c:71:7e:2e:97:db:8c:71:8a:58:fe:f4:e8:c9:38:
                    83:d5:62:b2:09:09:e0:58:2f:4c:cf:69:30:28:be:
                    26:5a:56:09:fa:03:53:0f:4a:b2:cf:26:39:46:3d:
                    97:0d:f6:e7:16:9b:11:4a:19:80:79:3b:ad:62:3d:
                    d8:b5:38:02:a1:4e:99:2a:7b:61:a5:61:4b:95:e9:
                    de:84:58:80:b5:eb:d5:d3:82:19:5b:e9:84:c0:1d:
                    55:95:1c:9c:dc:0e:8f:35:1f:d6:97:39:7b:a1:99:
                    82:99:9f:4d:99:6d:67:6f:dd:6c:86:ae:92:28:49:
                    f1:4d:01:0b:77:72:9c:16:dc:c9:c1:c7:d0:e9:4c:
                    bf:95:8e:52:48:40:4c:e6:ef:94:d1:e3:63:16:29:
                    10:9f:28:9e:01:0f:74:c3:c3:e6:80:12:7a:e9:41:
                    d0:49:ef:2b:59:97:7b:b5:b6:93:53:db:53:93:22:
                    b2:0e:47:b4:d5:9f:72:cf:db:81:99:02:5b:c7:f4:
                    0f:d6:e8:c1:06:05:d0:b2:33:1c:e2:cd:33:de:82:
                    93:f8:d7:71:6f:16:b0:70:ca:32:47:f0:87:e4:e7:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:24:FC:30:99:23:36:21:8E:98:B7:08:25:CE:31:18:8B:4E:69
            X509v3 Authority Key Identifier:
                keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/Skwk_DCZIzYhjpi3CCXOMRiLTmk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:ae:a8:37:a8:c4:dd:ec:ea:a3:33:e4:8b:e5:ee:2a:bd:f1:
         b7:78:d7:f6:71:39:48:3f:51:b2:9f:09:7c:d1:e2:4a:0a:46:
         d2:a2:b1:ba:ea:85:e7:7c:c4:76:d1:b5:16:84:c4:12:8d:f4:
         cd:9b:98:d8:a0:84:51:a0:d0:a7:03:5b:6e:38:22:bd:16:75:
         3e:72:c7:fd:21:f3:3d:0d:41:1f:52:c0:97:07:ab:3d:6a:09:
         a1:ec:7a:b3:a4:08:1b:00:9b:77:3d:4b:18:f4:77:f1:8d:4e:
         11:b0:04:6c:81:f8:83:db:81:f5:01:11:63:3d:77:87:5e:9e:
         7d:6b:00:25:b1:95:f9:9e:cf:22:27:71:be:ee:3c:f5:55:c0:
         3b:7f:1d:81:c2:54:9b:f7:df:03:c4:49:0f:76:ff:26:67:0a:
         d1:85:7e:42:08:a5:7e:73:d3:20:66:a4:ae:11:58:39:f4:07:
         18:54:92:d0:bd:89:e3:97:6a:c1:72:8b:2a:6f:f2:9f:77:ff:
         1c:3b:f2:82:b0:bf:2d:8c:97:d8:f7:58:bf:cf:d0:57:46:a4:
         a1:25:fe:a4:48:fe:52:ff:6a:de:d0:ff:96:ab:f5:69:8d:07:
         d8:71:03:e6:29:c8:a5:e8:f7:79:f2:7a:ab:3b:9e:91:df:17:
         ed:08:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:34 2024 by rpki-client on console-ams.rpki-client.org