Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJB1pJniGAo59J5X10SdAVZaKpo.roa
File:                     IJB1pJniGAo59J5X10SdAVZaKpo.roa (raw, json)
Hash identifier:          dov7UuPJDaqcRkEkOk7Moefh0ugPWM2x03Yilxs0DMc=
Subject key identifier:   20:90:75:A4:99:E2:18:0A:39:F4:9E:57:D7:44:9D:01:56:5A:2A:9A
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018FD323C5CE7387FA0D46BDA2C09183F574
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJB1pJniGAo59J5X10SdAVZaKpo.roa
Signing time:             Sat 01 Jun 2024 09:31:27 +0000
ROA not before:           Sat 01 Jun 2024 09:31:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        93.115.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Aug 2024 06:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d3:23:c5:ce:73:87:fa:0d:46:bd:a2:c0:91:83:f5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jun  1 09:31:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=209075a499e2180a39f49e57d7449d01565a2a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:f4:e2:0d:07:37:14:fc:2f:37:ba:25:80:
                    15:d1:75:a4:ed:e5:8d:94:1f:ea:e8:1d:63:e2:42:
                    b1:b7:0a:d9:2b:61:49:64:75:c9:3e:28:b5:dd:c7:
                    06:fa:f2:16:17:1f:3e:dc:56:e2:29:0c:ec:54:5d:
                    c3:74:f9:d0:e1:98:69:89:cf:d4:1f:3b:2f:08:d7:
                    dd:37:26:82:1f:5d:c4:58:58:9b:34:37:88:a1:a5:
                    99:f9:9b:71:fe:33:55:b7:b5:fd:32:58:36:54:29:
                    a2:46:c2:7b:5a:88:6d:2c:c1:d7:5e:a8:78:40:f3:
                    1e:12:6a:f8:7f:fb:73:7a:62:a7:4f:aa:88:af:4a:
                    b8:7e:58:23:a0:2e:5f:eb:4f:b3:0d:3a:98:2c:2f:
                    1a:2a:10:8a:24:2f:c7:b3:09:81:8b:10:4b:b8:19:
                    88:79:bb:b1:79:25:e6:4d:0c:95:18:ab:38:72:6a:
                    9d:6f:0d:c5:b1:52:6b:d3:e5:07:32:e2:42:19:18:
                    c2:a3:4e:40:f3:43:30:ec:ce:03:3e:d0:f1:14:11:
                    ad:b9:22:af:55:10:ec:69:13:1f:3c:1c:62:c4:7d:
                    66:e8:b6:3b:51:1a:6a:82:3f:fb:d7:65:ef:44:e2:
                    67:e9:05:14:03:a7:0d:d3:c2:7d:d1:cf:b4:38:3d:
                    11:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:90:75:A4:99:E2:18:0A:39:F4:9E:57:D7:44:9D:01:56:5A:2A:9A
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IJB1pJniGAo59J5X10SdAVZaKpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ab:c6:e0:7c:63:68:e5:2a:ab:dc:0a:18:cc:e5:65:36:d9:
         60:ee:2b:ae:df:56:12:da:dd:76:19:3f:52:14:d2:b2:e4:45:
         40:4f:18:a5:e9:f8:cc:5f:05:60:f9:62:54:3d:73:5f:e4:ca:
         1b:16:95:34:3d:3f:e8:56:0b:be:0f:e6:59:c7:7c:25:14:dc:
         ce:60:b2:eb:81:0a:95:a5:73:bc:87:56:53:6e:ba:40:8a:f2:
         cc:e0:28:e0:27:37:e7:1c:b5:83:3e:ea:e6:85:4b:43:fa:3d:
         57:3e:83:d3:00:8f:ff:a4:94:e8:16:cb:db:e7:21:3e:c5:a8:
         d2:33:b9:2a:a8:ad:64:37:a3:87:6b:08:65:49:af:97:38:26:
         47:5b:cc:50:e7:c3:72:5b:fa:19:27:7f:32:82:57:fd:60:49:
         34:51:49:10:c4:c2:d6:29:d5:2a:ef:76:9a:0c:49:a2:b0:d5:
         26:c2:bc:dd:58:cc:76:4c:7a:da:b4:14:0d:36:1f:b8:8c:4b:
         8b:4f:2f:9e:f2:a2:ed:28:63:ff:be:73:4a:be:bc:e2:db:e6:
         2c:8a:96:38:33:64:22:51:23:86:20:43:8e:50:60:73:12:e1:
         d0:97:4b:8a:66:28:26:30:2f:99:de:5c:5d:e9:45:eb:76:94:
         6b:8d:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 10:01:35 2024 by rpki-client on console-ams.rpki-client.org