Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dmDwOaPbpZQ9vsEMA0jveud35c.roa
File:                     5dmDwOaPbpZQ9vsEMA0jveud35c.roa (raw, json)
Hash identifier:          5ObI4piwJT70IlfI71AYMez+AB90Cm4lHqHmoAD0J5g=
Subject key identifier:   E5:D9:83:C0:E6:8F:6E:96:50:F6:FB:04:30:0D:23:BD:EB:9D:DF:97
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018A9E590AE4D0293823137B6C8FC63E8771
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dmDwOaPbpZQ9vsEMA0jveud35c.roa
Signing time:             Sat 16 Sep 2023 14:15:50 +0000
ROA not before:           Sat 16 Sep 2023 14:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399471
IP address blocks:        93.90.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 13:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9e:59:0a:e4:d0:29:38:23:13:7b:6c:8f:c6:3e:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep 16 14:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5d983c0e68f6e9650f6fb04300d23bdeb9ddf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:46:e2:a2:4e:5e:50:85:26:93:39:e7:7d:
                    8b:99:c2:29:49:22:46:0d:86:74:c8:76:d0:26:2c:
                    2c:b4:0b:38:d9:31:3d:b3:3b:77:4a:ea:9c:78:41:
                    0f:7d:32:66:20:86:c1:8d:1d:e3:ca:00:18:24:80:
                    3e:f4:26:d1:2d:48:13:32:26:ec:1d:f2:19:fc:84:
                    7b:8f:4f:7c:5d:d5:2e:55:0c:af:ac:96:c7:a4:e1:
                    1e:fa:0b:54:a1:58:8e:07:7c:e7:99:a8:c6:07:23:
                    bc:56:21:a1:a0:c4:1f:df:c5:f8:ee:6f:81:37:83:
                    59:6d:8e:c3:60:07:e1:de:42:d5:12:a4:bb:40:d3:
                    ea:9f:cc:1e:23:71:76:0f:b9:e0:92:55:eb:32:cb:
                    96:18:fe:67:72:bb:be:ae:2d:01:44:91:5e:3f:b1:
                    31:1b:1b:30:26:8c:5d:2e:6e:50:d4:ed:8f:b7:c2:
                    28:95:96:b2:3f:69:e3:84:e7:db:ff:b4:af:03:ec:
                    fb:4e:5c:61:78:cf:90:76:ac:14:40:f6:9d:0f:dd:
                    5a:50:04:8b:63:2f:32:28:5e:34:a3:22:c5:e2:3e:
                    b8:ae:f9:91:0f:c3:18:bf:4b:ac:f8:ae:82:8a:d3:
                    86:55:4e:bc:f4:1a:70:12:45:0c:1d:7a:20:c3:d3:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:83:C0:E6:8F:6E:96:50:F6:FB:04:30:0D:23:BD:EB:9D:DF:97
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5dmDwOaPbpZQ9vsEMA0jveud35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:88:3e:0b:0c:7a:d3:c7:c2:bf:6e:2f:c8:a3:38:8e:b6:
         26:bd:66:ca:5a:51:81:a8:70:fa:3f:4f:b1:b5:07:d3:34:4a:
         86:be:58:24:f8:1b:ad:31:a5:cb:f4:7b:ce:58:ca:a4:70:fd:
         ea:12:5b:74:28:50:c7:03:72:af:bb:8a:52:f8:d3:7e:86:3d:
         b6:a0:f3:3c:f4:c3:6c:f5:72:05:05:a8:d3:8b:20:40:be:fd:
         7f:0b:44:95:ca:6c:01:86:99:62:3d:89:9e:9f:d6:7f:bd:cd:
         eb:03:55:bc:a3:e4:49:50:eb:d3:13:d0:94:7b:07:21:00:a5:
         7f:d2:4d:89:a8:5e:c6:68:e6:4c:12:75:d7:bd:1c:99:8d:ca:
         71:c7:72:a0:e9:74:80:b2:42:5a:92:3e:21:94:e5:f9:e9:b0:
         af:2b:60:94:4b:60:54:48:17:38:6e:a4:d4:77:d1:b6:ff:96:
         8b:5a:5b:11:56:c4:4e:c9:c1:53:8c:fa:78:29:89:08:b6:2f:
         8c:9b:3a:e6:f1:ee:f4:c4:66:b6:e9:42:b2:6e:71:86:48:db:
         1d:6d:6f:a5:23:f3:8b:7f:03:5c:f6:68:6e:57:00:35:f8:e3:
         a0:0e:04:23:f1:8c:c5:fd:47:6e:81:53:3b:5b:23:73:70:d0:
         39:b1:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org