Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa
File:                     eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa (raw, json)
Hash identifier:          MNJcZBOgz8ZnJUQAAiPI5CUpfhTs+UTIo3TKDZ0vvkU=
Subject key identifier:   78:51:06:94:D2:74:BE:C9:C4:CB:98:DF:47:73:74:35:1E:A0:5C:2C
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       018CC2DB5674DF91C0D1D0AFD176A0C69E1C
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa
Signing time:             Mon 01 Jan 2024 02:30:03 +0000
ROA not before:           Mon 01 Jan 2024 02:30:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     23454
IP address blocks:        193.108.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jun 2024 10:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:56:74:df:91:c0:d1:d0:af:d1:76:a0:c6:9e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  1 02:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=78510694d274bec9c4cb98df477374351ea05c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:a0:23:bb:1e:18:5b:7d:67:56:ef:c3:2b:
                    b6:08:96:6f:de:37:9d:42:f2:27:ff:db:3d:df:c1:
                    5e:11:3b:a5:fc:f6:df:c2:7e:31:b4:4e:c0:f1:49:
                    ab:2b:e9:77:c3:75:fe:09:42:6b:b5:e9:18:0c:2f:
                    5e:b5:a7:8a:30:59:1b:bb:c5:f1:0a:62:2d:ca:f3:
                    57:2d:f3:69:08:b8:d0:fe:4d:19:ab:76:fe:96:a5:
                    d5:24:25:74:45:3b:97:f9:8d:ad:fc:2e:e6:4a:b0:
                    9b:9d:05:d6:52:ef:27:65:94:75:cc:87:cb:a7:2f:
                    b0:3f:02:53:dc:a6:b7:24:d2:86:0d:98:3c:ae:44:
                    94:e1:63:af:6d:6f:ce:33:73:60:10:87:c5:41:f1:
                    b0:95:66:23:2d:70:1a:89:dd:cf:12:b3:d1:16:0f:
                    70:b2:a1:46:43:b1:aa:7f:e3:9a:e5:d9:4c:f4:ce:
                    e7:a2:dd:6c:d3:67:62:52:23:33:b6:ad:b0:3e:9a:
                    43:b8:c2:71:5f:5c:e4:cf:ca:e8:16:11:13:80:59:
                    42:2b:03:65:ce:28:5f:68:61:f1:64:16:88:3f:09:
                    64:c1:75:21:bd:c1:f1:4a:5b:e4:f1:28:0b:68:b9:
                    c2:4f:0b:36:e1:6f:05:55:32:3d:08:d7:f3:29:22:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:51:06:94:D2:74:BE:C9:C4:CB:98:DF:47:73:74:35:1E:A0:5C:2C
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:ec:aa:2d:ff:6c:58:43:4b:b0:31:46:2b:56:9f:de:9d:
         71:8a:6c:63:55:5b:87:c3:57:08:5f:4d:09:8e:10:e1:bc:1e:
         fb:0b:4a:43:57:76:29:44:a2:37:9f:51:61:aa:53:d3:d9:56:
         23:21:55:29:87:04:50:52:00:e2:7e:e5:2d:f5:a3:bb:ff:78:
         d8:49:fb:fa:20:bc:e5:bd:c9:2d:0b:9b:56:78:b0:83:76:a5:
         0f:c2:42:a7:da:64:ed:e1:11:da:6c:66:ae:a7:7a:9b:f9:31:
         dc:cc:0d:ba:64:4c:e0:06:04:aa:d5:a6:2e:93:c5:1f:14:c6:
         61:27:72:2d:71:43:8c:60:53:b9:06:06:dc:b7:35:ab:71:6c:
         df:83:2a:58:36:df:ad:05:fa:2a:40:5b:73:ad:a7:69:7b:1b:
         fb:1f:7d:59:95:09:a0:fe:4f:08:6e:3e:e2:3e:18:f7:e7:64:
         fb:9d:1e:96:34:e9:cd:d2:9d:7e:ba:b9:fd:cf:8f:c6:14:6d:
         6f:d8:e6:3f:38:94:bd:1c:e6:04:a9:2a:f5:ed:53:3a:84:17:
         11:8f:4f:4b:4b:62:c6:f1:82:0e:5d:51:85:b9:e9:87:4b:30:
         f7:ca:70:9d:40:d7:54:7d:db:09:4e:06:52:8b:35:e0:12:c8:
         cf:14:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:45:57 2024 by rpki-client on console-ams.rpki-client.org