Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/edTNdIqgJo-vBGLGvrluErjQpUo.roa
File:                     edTNdIqgJo-vBGLGvrluErjQpUo.roa (raw, json)
Hash identifier:          Hns2zUr53yKlgRkz3/MluFterPMjESCc7xYokFALeOQ=
Subject key identifier:   79:D4:CD:74:8A:A0:26:8F:AF:04:62:C6:BE:B9:6E:12:B8:D0:A5:4A
Certificate issuer:       /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial:       01856D53E7EFCDDB3E53475D4690537F27A8
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/edTNdIqgJo-vBGLGvrluErjQpUo.roa
Signing time:             Sun 01 Jan 2023 12:34:53 +0000
ROA not before:           Sun 01 Jan 2023 12:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203974
IP address blocks:        193.56.24.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:e7:ef:cd:db:3e:53:47:5d:46:90:53:7f:27:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
        Validity
            Not Before: Jan  1 12:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79d4cd748aa0268faf0462c6beb96e12b8d0a54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b1:12:2d:5c:73:4d:d6:0f:13:6b:94:83:e0:
                    79:94:4c:27:68:ef:97:c4:cf:71:4e:3b:41:8d:23:
                    59:dc:6b:74:7c:9e:7f:12:e8:f5:62:3c:ce:c2:f8:
                    9e:f5:a1:e3:16:a5:f1:6d:4c:08:64:21:e9:7b:82:
                    1b:e1:02:78:ba:b2:b6:31:26:68:e0:00:3f:5e:ff:
                    c1:ad:c9:fd:30:12:a0:8a:7c:53:71:92:67:70:dd:
                    04:07:5e:a7:73:96:e1:4c:a5:c2:ad:e4:0b:16:1e:
                    ca:40:fb:e9:63:0a:e7:97:dd:ac:b0:6c:02:20:7e:
                    3c:ea:7b:78:89:d4:db:18:70:e1:72:fa:ad:0f:0e:
                    89:57:a9:7c:ef:b1:de:ac:6c:86:f5:8b:0e:63:2a:
                    e1:fb:3d:42:52:13:ea:e7:c5:54:8e:03:f7:a7:ee:
                    aa:33:41:db:f7:44:f9:52:a9:87:32:3f:3b:d0:ab:
                    54:a3:e0:e2:92:e7:cb:fc:7c:5b:61:a1:33:8c:4d:
                    ad:da:54:0b:96:61:ec:ec:7c:90:c4:81:da:7d:f0:
                    43:25:46:17:a1:dd:b7:0b:9f:c0:bd:13:53:2b:ae:
                    d5:6b:0d:ef:97:76:8c:8c:aa:b8:be:1c:d5:85:d0:
                    01:bd:47:69:7d:6d:46:d5:f9:8b:0e:28:30:f2:57:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D4:CD:74:8A:A0:26:8F:AF:04:62:C6:BE:B9:6E:12:B8:D0:A5:4A
            X509v3 Authority Key Identifier:
                keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/edTNdIqgJo-vBGLGvrluErjQpUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ca:ca:e1:d9:87:ed:63:0c:35:24:a4:91:1f:52:dd:66:3e:
         9b:a2:8e:f6:b2:a4:27:9a:48:75:34:73:1d:97:20:eb:e1:ef:
         b3:40:85:03:f9:bc:f3:15:7a:45:ad:42:13:57:d2:4c:5c:29:
         19:55:5c:de:f9:35:1a:ec:7f:68:d1:79:22:db:2e:cb:6d:58:
         84:2d:5f:05:fe:78:8f:ce:ca:fa:9a:10:7f:97:27:79:c5:56:
         2f:11:97:2d:4b:79:c8:b4:ad:34:71:21:62:dc:90:f0:f4:7b:
         ad:11:a6:4e:f0:81:99:d5:21:9c:58:c8:32:23:a5:7a:ae:b9:
         0e:89:32:d7:b1:32:54:5d:bc:aa:78:2c:bd:2f:a5:8a:b8:8e:
         6d:ae:5c:12:1a:c5:9c:4f:c2:c3:0e:8b:d4:3c:6b:f7:7c:16:
         b1:2f:9a:f7:03:e3:c3:08:94:29:4a:47:6b:bd:8b:26:d5:1b:
         ee:79:48:95:4e:f5:7e:e8:d0:d4:5f:c7:85:90:e5:e6:20:b8:
         77:6f:f7:66:8e:a0:2d:84:a1:c6:34:ec:32:98:eb:85:f6:97:
         8e:f9:a9:ef:87:7c:6f:11:44:52:44:f4:0a:42:e4:3f:d2:c6:
         08:d4:6a:28:c8:b6:e2:01:d1:fc:bb:82:4d:43:57:fa:59:f7:
         85:ea:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:47 2024 by rpki-client on console-fra.rpki-client.org