Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S49ij99Opuins7GawJp6-c6sIjw.roa
File:                     S49ij99Opuins7GawJp6-c6sIjw.roa (raw, json)
Hash identifier:          HrR6QAgBwD2PjlHcgJTToVc4L/PGTNKM/08KogYkpRQ=
Subject key identifier:   4B:8F:62:8F:DF:4E:A6:E8:A7:B3:B1:9A:C0:9A:7A:F9:CE:AC:22:3C
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018CD9F47F3FB332FE62201EA2C03461C4A4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S49ij99Opuins7GawJp6-c6sIjw.roa
Signing time:             Fri 05 Jan 2024 14:08:48 +0000
ROA not before:           Fri 05 Jan 2024 14:08:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203446
IP address blocks:        93.90.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Jan 2024 17:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d9:f4:7f:3f:b3:32:fe:62:20:1e:a2:c0:34:61:c4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  5 14:08:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4b8f628fdf4ea6e8a7b3b19ac09a7af9ceac223c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:cc:c1:c1:3b:7f:46:3f:30:0f:d4:3b:3d:
                    c8:3a:fd:6e:ea:06:56:ec:3c:f0:21:ac:11:73:1d:
                    a4:d1:23:9b:38:8e:e8:55:cf:77:32:1e:6a:2b:20:
                    60:c0:ab:3d:e3:6b:7b:b8:63:57:0d:a2:89:12:f9:
                    f1:9e:6c:cc:b1:16:c2:9b:81:32:2c:5b:47:30:3a:
                    c0:a3:4c:65:42:c4:7f:41:96:a9:a5:f8:ca:36:a1:
                    87:f5:dc:79:ba:44:26:1f:03:63:0c:ac:1f:0e:9f:
                    4b:24:24:54:bf:d9:64:00:2b:33:79:05:50:2a:fc:
                    75:0b:1a:51:dd:c7:cc:ba:e2:c2:d4:5b:5c:74:76:
                    ff:c7:4d:ad:84:cf:ec:cf:9c:d6:cd:53:86:91:c2:
                    46:cf:87:7d:cd:67:4f:58:38:01:aa:40:a8:39:f2:
                    b4:f6:81:89:7e:73:7d:ec:ff:71:37:7f:c0:61:bf:
                    54:2b:b5:f6:8a:67:9b:89:e9:8d:57:6c:d0:d0:be:
                    8a:93:c3:e2:5c:70:2d:6d:2a:98:71:12:cc:ea:ca:
                    8c:aa:ad:88:cc:d4:db:a4:cc:0b:f2:52:2a:48:53:
                    d3:f0:30:63:27:9e:fe:9b:bc:6d:04:e3:e6:69:01:
                    d4:fb:92:7e:90:80:42:33:be:db:72:1d:2b:9b:be:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8F:62:8F:DF:4E:A6:E8:A7:B3:B1:9A:C0:9A:7A:F9:CE:AC:22:3C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S49ij99Opuins7GawJp6-c6sIjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:2e:08:30:48:f0:62:8e:86:9a:03:8a:74:eb:5f:75:61:
         68:ff:48:b9:ae:9e:2c:82:fb:64:ad:51:28:af:6d:e8:52:ad:
         20:0d:ac:92:56:b4:54:e6:f2:f0:0b:86:5c:1e:46:06:22:b7:
         a9:35:ff:f4:1a:bb:75:71:bc:fe:e8:e5:19:13:a2:44:9a:ef:
         32:61:a1:4c:7c:77:a7:2d:80:99:68:21:80:39:4b:d9:37:92:
         76:45:b4:de:65:77:51:83:4a:64:66:18:1b:f1:d4:94:28:dd:
         3a:b7:07:48:4f:f7:c6:ba:c5:4a:ba:34:08:20:bb:9b:19:2f:
         84:db:df:57:d1:b1:06:6e:4f:3d:ef:b6:4f:28:5a:19:24:a6:
         7c:64:10:cb:82:b3:11:46:ef:04:db:95:f1:d5:27:ed:16:4c:
         57:d0:e0:0d:81:63:8b:d3:fc:e5:02:84:11:fd:87:65:2a:27:
         99:17:4d:f4:8d:be:0b:60:f4:5f:01:d4:af:ed:d3:4a:4c:57:
         f2:75:d8:f6:b0:fb:ca:cc:e5:3a:47:33:99:31:86:35:0c:6f:
         04:75:95:72:c2:ee:79:18:a7:6c:1d:6d:33:e2:b5:9c:ac:e4:
         b3:a1:04:5c:e7:bd:c3:a3:52:3a:21:9a:3e:2f:5c:2f:55:04:
         9f:19:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org