Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0HtzS1xg0DAMvWCuKcmUiq12pK0.roa
File:                     0HtzS1xg0DAMvWCuKcmUiq12pK0.roa (raw, json)
Hash identifier:          KGhrYiyC7ttSM6W1vuSe2o/8B/Ux4BdAK/jIEWQj/dg=
Subject key identifier:   D0:7B:73:4B:5C:60:D0:30:0C:BD:60:AE:29:C9:94:8A:AD:76:A4:AD
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018F0F783B8419C598BBF7D7B8A81A2A9B22
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0HtzS1xg0DAMvWCuKcmUiq12pK0.roa
Signing time:             Wed 24 Apr 2024 09:38:08 +0000
ROA not before:           Wed 24 Apr 2024 09:38:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212667
IP address blocks:        93.115.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 26 Apr 2024 04:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:78:3b:84:19:c5:98:bb:f7:d7:b8:a8:1a:2a:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Apr 24 09:38:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d07b734b5c60d0300cbd60ae29c9948aad76a4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:bc:f0:f8:7c:f9:ac:1d:dc:78:97:4f:1d:
                    a6:ec:71:ca:05:cc:a0:71:0b:3e:38:89:59:f5:ca:
                    6d:23:98:02:bc:4f:ac:cd:cc:4f:b6:2b:99:a9:ab:
                    28:c0:6a:a5:99:ff:30:d8:6d:5c:9c:25:2f:7a:44:
                    31:46:d7:70:5f:ac:c0:bb:aa:28:7e:9d:f1:3d:96:
                    87:5c:1d:a6:8e:0d:8d:44:5b:0d:51:01:d9:cd:71:
                    d2:de:1d:38:9a:f5:ad:d7:3f:01:24:79:d2:e7:46:
                    09:8c:f6:a5:95:95:7b:78:f9:ad:5d:3b:50:e0:ac:
                    47:81:08:0e:21:1a:ee:fc:85:2a:ec:f1:37:92:c9:
                    79:63:01:3a:a0:71:d6:67:4f:8d:d6:df:75:f1:ea:
                    6c:b3:84:3b:6a:cd:ba:63:24:d8:08:76:97:91:cf:
                    e0:a5:1b:f2:a9:6b:28:b9:41:d0:0e:08:4f:60:2b:
                    df:22:b1:09:70:68:a3:24:fe:fc:82:4c:c3:71:5a:
                    50:70:c2:8c:49:76:fa:77:0d:7b:54:1d:f6:ff:18:
                    41:e1:23:bc:ef:bb:07:30:51:7e:1c:a9:a0:24:c3:
                    a7:0f:93:6e:33:08:94:e9:70:7e:2d:84:6b:72:2f:
                    ea:ee:ba:44:49:d9:2f:24:72:6f:3b:d4:24:64:74:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:73:4B:5C:60:D0:30:0C:BD:60:AE:29:C9:94:8A:AD:76:A4:AD
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0HtzS1xg0DAMvWCuKcmUiq12pK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:29:a6:80:c6:60:6c:30:0e:4a:98:f8:98:c9:5d:64:25:
         4c:2a:29:aa:b5:9a:1b:11:d4:8a:92:78:e4:aa:23:f6:a7:a1:
         fe:2c:e3:9c:37:53:db:8f:42:73:22:ae:f7:80:33:67:1c:28:
         8f:04:a2:f1:dd:f8:31:07:d0:92:fa:94:44:3c:04:65:a3:29:
         91:c2:6f:2f:5d:67:74:58:84:32:27:3c:35:7c:9d:6b:c6:7a:
         f2:cc:99:42:04:f0:93:4b:46:a4:9e:a3:82:5b:3f:83:7e:e9:
         2a:02:42:d9:ec:e8:5b:97:cd:e0:12:1c:65:64:0a:34:f4:55:
         91:2b:3e:82:33:3d:7e:67:e9:0f:9f:c1:33:92:4a:bd:57:08:
         46:c0:97:7a:1b:72:f8:42:60:e5:08:4e:b5:12:39:d4:8b:35:
         22:f9:e4:e5:b2:00:4e:90:e8:1b:74:3a:10:b6:1c:fc:95:ba:
         a2:d3:03:35:8d:e8:d9:47:bd:52:49:b6:0d:cc:63:55:5e:74:
         20:9d:a7:fe:38:24:8e:68:5d:e7:c6:90:b6:54:07:3f:85:12:
         38:6d:b1:04:ea:8c:04:d9:a7:c6:6d:68:69:3d:fc:f7:78:14:
         d1:11:be:b2:50:82:0d:7b:0f:63:5b:f5:d0:23:bc:72:45:2a:
         a5:8d:44:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:05 2024 by rpki-client on console-fra.rpki-client.org