Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/biOyonA1RhtyBlLeIUnLMN2E5Jw.roa
File:                     biOyonA1RhtyBlLeIUnLMN2E5Jw.roa (raw, json)
Hash identifier:          uxSBia468RPlg6EKX9DW1XW+g8ysqgx3Hgmv6ur4qM8=
Subject key identifier:   6E:23:B2:A2:70:35:46:1B:72:06:52:DE:21:49:CB:30:DD:84:E4:9C
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0186DF0E2ED0AA167CF9CD396FB7E970BFD9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/biOyonA1RhtyBlLeIUnLMN2E5Jw.roa
Signing time:             Tue 14 Mar 2023 07:38:13 +0000
ROA not before:           Tue 14 Mar 2023 07:38:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        93.90.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 Mar 2023 09:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:df:0e:2e:d0:aa:16:7c:f9:cd:39:6f:b7:e9:70:bf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Mar 14 07:38:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6e23b2a27035461b720652de2149cb30dd84e49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:c0:aa:f2:f7:bc:d2:38:6a:e7:17:ab:4c:
                    cc:ea:94:bb:72:b1:b9:bb:17:a7:3e:cc:e9:3f:53:
                    0a:2f:28:ad:cc:d7:ad:1d:e3:6b:74:2c:f1:6e:7c:
                    b4:1d:3c:7a:7b:97:33:65:a8:06:3f:89:54:48:2b:
                    69:9f:59:da:01:06:e6:82:ff:3c:22:6f:38:1b:f8:
                    88:1a:90:b9:54:d9:8f:91:5b:13:e9:36:c7:58:a3:
                    a6:31:76:53:0d:a9:88:20:47:88:96:38:94:66:3c:
                    26:86:05:74:e6:03:7c:5e:eb:d2:de:5b:df:78:3e:
                    30:7b:c7:98:d4:13:8e:fc:fa:12:21:81:c7:7f:57:
                    3f:5d:90:22:f9:ea:22:cd:0e:84:90:5c:b8:1c:8f:
                    e3:70:88:18:78:54:72:e5:7a:b7:2e:e6:96:09:1b:
                    71:9e:fa:dd:0a:67:d8:ea:c5:42:c6:1f:83:f8:2c:
                    cb:11:19:80:84:d8:2b:19:55:7e:62:c7:3d:2f:9c:
                    98:27:6f:6a:2a:82:b9:fd:bc:c4:d3:37:9c:c4:46:
                    52:35:89:2a:f4:2d:e2:55:ab:89:cc:ba:50:e7:bc:
                    49:8a:56:93:36:f7:c4:70:8a:43:77:3d:e7:83:9b:
                    0e:2e:40:23:58:17:a4:11:01:50:9e:22:e7:2b:a0:
                    0c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:23:B2:A2:70:35:46:1B:72:06:52:DE:21:49:CB:30:DD:84:E4:9C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/biOyonA1RhtyBlLeIUnLMN2E5Jw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:71:62:eb:9c:21:9f:ec:c7:40:ac:9f:ab:7b:d6:4f:19:
         b5:07:ee:74:97:e0:c1:07:fd:0a:1c:6d:92:0a:ec:a4:a7:d5:
         df:04:49:7f:f8:18:18:65:c0:ad:99:9d:7a:41:ac:ed:9a:3e:
         a4:b5:1b:5f:15:db:f3:8f:b7:0a:b1:32:e1:58:fb:21:c0:ad:
         35:0b:65:1c:ff:72:81:d9:73:35:5f:5d:36:d9:fe:3a:1b:e0:
         10:43:ae:6e:82:45:9d:2a:41:6e:7f:3a:6f:53:18:38:43:62:
         7f:4e:f0:53:c9:46:cf:bc:29:b6:68:fd:f7:47:2b:cf:63:f3:
         78:c7:8e:c9:47:7e:be:eb:9d:3f:9f:bf:d9:ed:4a:49:fd:65:
         72:cb:e8:cf:31:f3:fa:ad:00:f3:a6:e0:db:f2:e4:43:62:83:
         45:0b:3b:f1:fd:71:50:98:6f:01:61:0a:b0:01:ae:a4:ff:ea:
         c5:7b:6c:36:c1:5f:43:b2:cf:e8:4f:23:be:aa:26:60:f2:ae:
         b3:94:79:f2:9f:3f:6c:b3:c7:c7:c9:f2:10:5a:6e:97:75:b8:
         3c:06:c1:67:0a:71:6a:10:e0:a3:2c:10:68:80:c3:f5:5e:1e:
         53:bf:48:4a:71:28:1c:ac:24:ba:0b:e8:56:20:60:2d:66:36:
         94:91:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org