Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crZHJVhqypGz9skyRicr8zRPN8I.roa
File:                     crZHJVhqypGz9skyRicr8zRPN8I.roa (raw, json)
Hash identifier:          Adeb0u4RkkPIHR0fpc7R4UXd9Cn4rfn6mNXnzsYdDNU=
Subject key identifier:   72:B6:47:25:58:6A:CA:91:B3:F6:C9:32:46:27:2B:F3:34:4F:37:C2
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018B902AA5AD34078DEC6DB35BEB2CADAB61
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crZHJVhqypGz9skyRicr8zRPN8I.roa
Signing time:             Thu 02 Nov 2023 13:13:15 +0000
ROA not before:           Thu 02 Nov 2023 13:13:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399471
IP address blocks:        93.90.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Nov 2023 09:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:2a:a5:ad:34:07:8d:ec:6d:b3:5b:eb:2c:ad:ab:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Nov  2 13:13:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72b64725586aca91b3f6c93246272bf3344f37c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:84:b5:4e:70:78:5d:29:a2:44:82:40:d3:
                    d9:a8:2c:4c:91:98:7d:98:f1:7d:64:b0:76:47:52:
                    af:ff:ba:9b:1f:0f:f1:b7:d1:c2:67:37:b8:3a:20:
                    ac:4b:3c:70:5e:01:2b:cb:b7:41:42:d0:d7:d4:f1:
                    7e:5d:50:5a:f3:6e:23:3f:67:48:7c:6a:2b:51:ba:
                    40:34:07:f8:26:b6:66:e5:b4:f2:89:c4:4f:0c:68:
                    26:49:ce:7b:19:5a:77:6b:09:31:36:5a:c8:fb:bd:
                    3b:79:2a:98:ff:56:06:25:e7:58:a9:30:b8:e9:62:
                    10:fa:e3:1f:0b:e1:dc:3d:d3:4e:1a:57:80:ec:29:
                    d5:cd:24:1a:3c:4f:21:55:48:0f:28:20:d5:38:4f:
                    15:f8:c8:3e:12:df:e1:64:f7:da:a3:d1:b3:73:e9:
                    e5:eb:80:2d:5c:9f:44:98:e2:f3:99:ca:83:e7:f9:
                    09:af:70:e0:c3:4b:a2:b4:65:17:11:30:de:8c:0a:
                    8e:7e:27:bc:87:e2:79:de:a7:67:f7:3d:af:14:5d:
                    ee:2c:64:f9:17:11:ec:af:d5:c6:6f:b0:61:aa:01:
                    8f:bf:9d:fa:02:f1:c7:9d:7d:12:09:ac:3e:b2:ad:
                    36:de:b0:81:65:7b:bb:af:ed:0e:52:39:01:ba:bb:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B6:47:25:58:6A:CA:91:B3:F6:C9:32:46:27:2B:F3:34:4F:37:C2
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/crZHJVhqypGz9skyRicr8zRPN8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:43:8e:70:ef:88:7f:42:ba:c2:76:95:17:15:3b:cc:88:
         75:7b:e6:f8:ad:f1:9e:53:11:ce:2d:b4:a4:31:11:9d:7d:b9:
         72:8a:01:64:cb:ef:bd:f3:e7:74:d8:75:5f:e0:60:fd:91:c9:
         20:2a:36:5b:1f:88:d3:1a:1c:c4:95:80:f3:61:50:10:3a:1c:
         69:b2:cc:2c:6a:df:e4:75:2b:18:32:5b:db:7c:a8:37:1f:90:
         f1:0b:e2:5b:b4:c6:fc:b8:5f:87:bc:70:9d:42:f3:4b:47:fb:
         c2:6c:cb:57:a7:ed:62:fe:ed:5e:35:69:ed:82:b9:46:57:cc:
         8e:e0:73:ef:34:8c:88:ba:12:80:cc:1f:00:5d:d2:93:c2:58:
         55:39:08:38:d2:69:f2:95:b7:63:c6:ed:a3:b9:86:39:8b:c9:
         a3:c3:97:5f:33:55:29:5b:d0:e8:12:37:5f:04:66:bd:15:42:
         07:5e:32:9d:cc:79:fa:7f:f8:a7:cd:ba:00:b3:4f:e5:d0:86:
         e3:41:f6:57:91:9a:64:6a:88:68:49:93:65:67:39:14:43:58:
         e4:32:01:ee:26:d6:f0:9c:bd:6a:5b:15:13:e9:49:f5:4e:cb:
         4b:0d:67:cf:f5:ce:35:0c:9f:fd:19:c5:cc:dc:ae:2f:75:56:
         36:51:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org