Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IHq5WVrwl6TVt4wLiC42JHVJ-Yg.roa
File:                     IHq5WVrwl6TVt4wLiC42JHVJ-Yg.roa (raw, json)
Hash identifier:          jzzYRmQtTCxD4V7SaNXNHho1cQcACbM6qUVDB3bFdhE=
Subject key identifier:   20:7A:B9:59:5A:F0:97:A4:D5:B7:8C:0B:88:2E:36:24:75:49:F9:88
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018BFBFB2417A24FD5AF7947318CC79F1430
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IHq5WVrwl6TVt4wLiC42JHVJ-Yg.roa
Signing time:             Thu 23 Nov 2023 11:40:21 +0000
ROA not before:           Thu 23 Nov 2023 11:40:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        93.114.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:fb:24:17:a2:4f:d5:af:79:47:31:8c:c7:9f:14:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Nov 23 11:40:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=207ab9595af097a4d5b78c0b882e36247549f988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:97:6e:3c:04:6b:7e:7b:06:c5:33:68:a2:
                    91:76:7a:6f:84:7d:b1:14:d0:a7:c1:f5:c7:0c:9f:
                    92:ef:15:82:d5:b2:71:15:9f:af:3a:67:a0:71:ce:
                    ab:81:30:a9:8d:26:19:2d:aa:3b:73:b4:60:07:67:
                    a4:aa:99:d5:77:5b:89:fa:56:9e:d1:22:30:ad:bc:
                    68:af:12:67:69:50:86:3a:a9:54:15:5d:81:ab:2d:
                    d4:e0:58:14:e4:bc:0e:dd:13:f2:5d:c6:06:27:9a:
                    a4:ae:93:7d:85:1a:f0:0f:18:62:22:fa:f6:aa:34:
                    e0:99:1c:69:be:8e:1b:a9:c1:bb:b3:67:6c:a2:f1:
                    18:f6:67:bf:10:67:d8:05:04:46:82:53:b0:92:95:
                    0f:5e:eb:d4:b2:0f:05:29:af:3e:03:c0:4a:90:39:
                    5a:eb:fe:c2:c7:c5:3f:c6:37:a6:91:7a:57:6e:8b:
                    60:bb:82:05:e3:13:59:1c:e8:e2:69:52:2a:54:2d:
                    be:ef:b3:ce:3d:c1:69:f8:b4:dd:cc:60:1b:83:2e:
                    e6:4d:97:12:66:90:da:15:fb:3a:fc:da:06:08:17:
                    db:c8:a9:38:da:70:ac:5c:4a:08:0f:fc:9b:70:a9:
                    3e:ec:12:6d:fa:71:e8:2d:6c:7c:d8:4d:42:f2:92:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:B9:59:5A:F0:97:A4:D5:B7:8C:0B:88:2E:36:24:75:49:F9:88
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IHq5WVrwl6TVt4wLiC42JHVJ-Yg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:9f:14:0d:43:5b:f4:3b:28:c0:ad:16:b3:e0:50:8d:ab:
         94:1e:5b:75:7b:5f:0b:0a:45:e7:2e:4f:bd:6d:98:82:04:b1:
         e4:d1:ee:85:02:b4:ff:e9:52:ad:64:3b:bb:dc:9a:a0:35:ab:
         49:fb:5c:f6:5e:b4:b6:53:05:0b:9f:dd:8c:fc:b8:0f:9c:e0:
         80:db:21:06:8c:87:e8:7c:66:8b:df:9d:43:90:e1:e9:b2:63:
         bd:1a:35:f1:ff:0d:11:0c:55:ab:6b:0d:6a:d4:20:97:52:6a:
         88:ce:10:29:f5:ef:0d:68:64:70:62:a6:44:d2:a7:23:61:c7:
         29:41:7c:a1:38:81:a0:4c:7b:4a:b1:4c:90:40:0e:da:08:be:
         78:96:70:02:4b:3e:41:d0:63:d2:0d:da:7c:09:02:fa:0b:56:
         79:45:26:59:0b:ef:31:0a:8b:67:d1:27:f7:26:22:0f:5d:98:
         b0:32:ed:28:68:01:9c:7d:9e:19:f5:6f:3e:23:9c:0f:e1:62:
         8f:83:b2:fb:60:5e:fc:b3:d8:c4:cf:ed:e9:66:ff:30:82:d3:
         44:38:96:a9:da:4b:62:03:9a:78:02:d0:c9:93:f1:c5:b7:27:
         2a:5e:61:7c:f6:36:96:64:b3:55:22:fa:dd:66:d0:65:ea:62:
         42:e8:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org