Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/n7RAbMFYo0wXBwgfYGBI_pxXSig.roa
File:                     n7RAbMFYo0wXBwgfYGBI_pxXSig.roa (raw, json)
Hash identifier:          +LElu5sOsH8xoV9D5d6psq95KIaFwDV5EcuMYk0EiV8=
Subject key identifier:   9F:B4:40:6C:C1:58:A3:4C:17:07:08:1F:60:60:48:FE:9C:57:4A:28
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018D1E0F3D639D76549E9F5C72BCDAC1285E
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/n7RAbMFYo0wXBwgfYGBI_pxXSig.roa
Signing time:             Thu 18 Jan 2024 19:32:11 +0000
ROA not before:           Thu 18 Jan 2024 19:32:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62300
IP address blocks:        193.27.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 09:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1e:0f:3d:63:9d:76:54:9e:9f:5c:72:bc:da:c1:28:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan 18 19:32:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9fb4406cc158a34c1707081f606048fe9c574a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:46:64:de:76:8c:9e:c6:d3:38:6f:91:12:
                    34:3c:fe:b7:ee:c9:c9:9a:bf:87:16:80:b8:11:ad:
                    6f:ba:86:2b:df:59:9a:2a:6c:d8:1e:ae:a7:4b:18:
                    48:3c:9a:df:e2:f5:5c:b1:29:f4:94:c6:95:14:c9:
                    13:7e:c8:43:d7:86:8e:fd:4c:24:a5:f5:bd:86:c4:
                    90:a6:39:95:d2:52:66:fc:a7:dd:65:89:ce:9e:c8:
                    ce:70:0f:56:34:92:2f:ca:4a:2f:61:58:eb:e4:88:
                    f3:a1:3d:15:2b:93:1a:7d:a2:c1:87:6a:28:f4:d7:
                    9d:5f:70:6b:69:82:6f:30:b3:cf:b7:bd:28:3d:0d:
                    71:b0:b7:83:43:56:a9:f5:69:0e:7a:c3:b2:86:dc:
                    88:31:c7:30:1d:ce:0f:09:f3:d6:db:59:5b:28:57:
                    9c:3c:3e:17:d1:84:15:ef:21:a7:bd:c2:9e:4e:c3:
                    df:19:20:f4:30:23:45:43:d0:7f:4b:5f:b2:58:4e:
                    ac:28:d1:48:1b:53:4f:76:c4:57:26:16:63:aa:d7:
                    3a:da:28:78:70:55:43:60:4f:de:49:d6:7b:16:bb:
                    a9:b4:8a:3a:b8:e2:d9:95:30:ae:6b:00:28:e5:b2:
                    e2:83:e6:1d:5e:71:aa:14:7a:2c:cd:a9:45:d6:f0:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B4:40:6C:C1:58:A3:4C:17:07:08:1F:60:60:48:FE:9C:57:4A:28
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/n7RAbMFYo0wXBwgfYGBI_pxXSig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b7:e6:5e:69:39:63:f1:e4:72:80:e2:d6:11:ff:55:60:d8:
         37:46:35:97:61:71:6c:d4:ab:b5:38:80:e4:81:69:c4:3e:bd:
         6d:15:fc:fd:1d:ac:b7:82:53:02:a9:56:a7:2d:5e:5c:5a:fc:
         1e:a1:12:7b:74:94:0e:51:2e:d3:2b:39:d2:71:79:62:02:36:
         47:ae:2c:76:b0:15:e4:52:38:51:57:be:a1:04:e8:f0:5a:60:
         10:49:5f:ec:ed:56:af:f7:7f:80:5d:87:86:1a:4c:01:cc:b6:
         eb:40:fb:04:95:c6:95:39:50:83:1b:84:cb:6e:23:92:07:1c:
         54:09:a1:20:7b:e7:2c:d5:58:af:8b:46:c7:b3:63:09:22:e2:
         3a:f7:56:a8:f9:41:9d:b5:8f:03:ba:11:48:07:40:77:7c:9b:
         ff:e2:1f:a8:49:e7:c5:b4:e4:87:f6:94:05:5a:44:a6:f9:a9:
         3c:8e:5c:ee:95:7b:16:24:a9:6f:70:96:ec:71:d7:c5:4a:0c:
         be:b3:12:31:ef:1f:70:6e:e9:b1:31:91:bf:9d:47:63:6f:35:
         32:b0:89:e4:5e:af:33:08:20:f8:63:46:f0:23:97:ce:6f:6d:
         bf:f9:46:26:8b:c9:db:4b:4e:f5:3c:f9:34:34:d3:0a:b8:60:
         3f:6b:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org