Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pkonPB6VZokr9zQRxoDnaO2Zhx0.roa
File:                     pkonPB6VZokr9zQRxoDnaO2Zhx0.roa (raw, json)
Hash identifier:          2ZeVlBq8hKKQR8lDM1ABE/hhq35q+BT4IV9KER2GZGM=
Subject key identifier:   A6:4A:27:3C:1E:95:66:89:2B:F7:34:11:C6:80:E7:68:ED:99:87:1D
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018D7EF84278C6A2742130471357DE72308E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pkonPB6VZokr9zQRxoDnaO2Zhx0.roa
Signing time:             Tue 06 Feb 2024 15:10:15 +0000
ROA not before:           Tue 06 Feb 2024 15:10:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209604
IP address blocks:        93.114.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 13:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7e:f8:42:78:c6:a2:74:21:30:47:13:57:de:72:30:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Feb  6 15:10:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a64a273c1e9566892bf73411c680e768ed99871d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:5e:62:e0:fb:26:00:92:4b:1e:c4:f8:b5:
                    68:6d:5b:60:74:ee:67:96:30:45:e1:84:42:e8:7e:
                    f9:e6:d8:0f:a6:b7:0f:32:1a:64:0f:9f:81:07:46:
                    a2:75:3e:bb:17:a9:2e:ca:c7:56:fb:b7:a2:2a:af:
                    1d:f2:4d:b3:17:0b:8a:36:cc:07:b4:d5:59:b7:09:
                    a5:b1:30:19:b3:1d:2e:55:d3:d5:75:55:2b:09:70:
                    fb:3f:e7:3b:a2:ee:d1:90:fe:1c:08:c9:d5:5a:18:
                    8c:dd:bb:96:1e:39:00:c1:30:ca:94:23:a2:36:4a:
                    d5:a5:82:78:49:8a:89:ee:74:cb:75:69:5b:b2:d9:
                    15:ab:80:a2:84:8d:3d:db:35:3b:36:11:dc:5c:1c:
                    87:3a:3c:8c:22:04:9d:a7:fb:49:70:a6:79:93:21:
                    5c:da:8b:bd:54:97:a1:3f:46:44:46:15:51:45:54:
                    53:ba:51:4b:13:a5:91:8f:2b:31:63:3c:21:94:5e:
                    82:4a:ea:7f:04:4a:b4:d8:3f:16:7a:9c:f9:1d:5c:
                    6f:38:ff:59:74:37:ac:89:67:ec:37:3f:0e:98:60:
                    ae:8b:5b:61:a4:6c:00:d2:36:e6:58:5b:42:60:ee:
                    cb:62:85:23:52:63:b2:af:b3:9b:4f:59:b4:9a:35:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:27:3C:1E:95:66:89:2B:F7:34:11:C6:80:E7:68:ED:99:87:1D
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/pkonPB6VZokr9zQRxoDnaO2Zhx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:e7:53:e6:cc:a8:ca:6a:9e:21:31:9b:3b:a3:fb:e6:1f:62:
         3c:9c:1e:a7:b0:a2:3b:ef:36:ac:d4:83:22:b4:5a:63:06:99:
         1e:e5:dd:6d:03:9f:32:2f:83:6f:2a:f8:e0:af:5f:fa:db:7c:
         20:fc:7a:f0:07:13:6d:e4:e2:ee:7d:36:11:78:46:37:39:59:
         27:68:03:65:1a:e1:27:c2:90:ca:a3:4a:24:c2:10:85:86:19:
         63:ce:3f:50:bb:e0:95:58:61:ae:d4:9d:07:52:46:c5:9d:5c:
         33:ad:5a:d7:46:7d:4f:67:04:fd:b6:11:c4:ea:51:77:9a:cf:
         e7:09:ef:5c:f2:8c:c2:15:71:e5:c1:61:56:e5:9a:7f:39:99:
         3a:63:36:a9:0f:32:9c:4e:f7:fe:88:d0:47:54:b5:4e:86:c8:
         bd:31:e9:7b:da:91:ce:15:a6:28:8e:36:c1:39:1b:f7:6d:8f:
         38:72:e0:f4:7d:f7:9d:e6:db:48:ca:75:18:41:fb:a2:96:f7:
         e2:9c:66:8e:e5:30:82:65:b6:7a:63:2f:ee:74:fd:34:94:ba:
         e2:e0:78:23:47:d6:ac:58:7e:1e:14:d2:17:c7:40:ff:a6:74:
         a2:0a:08:22:f0:6f:c2:3e:25:36:28:2a:6c:c0:b2:eb:dd:e6:
         f7:90:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org