Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/1-Jj355DiAWE07_8N6jQ3A6kUX3Y.roa
File:                     1-Jj355DiAWE07_8N6jQ3A6kUX3Y.roa (raw, json)
Hash identifier:          NiuBFF+y594xTVBpRo7uQvqSv0Zksr4mhdYO+neS0rA=
Subject key identifier:   F8:98:F7:E7:90:E2:01:61:34:EF:FF:0D:EA:34:37:03:A9:14:5F:76
Certificate issuer:       /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial:       01857169C01141D0773A1026751765A5F10B
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/1-Jj355DiAWE07_8N6jQ3A6kUX3Y.roa
Signing time:             Mon 02 Jan 2023 07:37:13 +0000
ROA not before:           Mon 02 Jan 2023 07:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12502
IP address blocks:        193.105.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:c0:11:41:d0:77:3a:10:26:75:17:65:a5:f1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
        Validity
            Not Before: Jan  2 07:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f898f7e790e2016134efff0dea343703a9145f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:79:8f:b7:c9:7b:37:a0:69:7f:16:4c:67:
                    46:26:ad:74:fe:dd:89:14:a9:9a:ec:1a:6d:53:b8:
                    ce:4e:7f:e2:ed:f8:fe:e9:98:69:03:34:73:75:b3:
                    6e:ea:23:c1:2d:ad:65:80:50:93:b8:78:ac:a0:06:
                    88:e3:c3:97:99:24:2c:0c:38:69:55:3e:04:9a:0b:
                    c3:12:4c:0a:8c:87:c0:ec:d5:62:11:07:98:db:09:
                    53:95:9d:63:04:df:7a:02:24:29:ea:d9:07:21:ec:
                    d1:c3:cd:69:39:56:7c:a7:a5:2c:1d:59:0d:fb:b3:
                    03:1b:16:56:e5:35:03:b1:43:78:20:34:c6:52:74:
                    71:4e:88:51:f5:51:b2:a0:36:22:6a:12:e0:e9:3b:
                    71:e6:19:1d:a7:c1:84:6b:b3:50:a8:5e:2e:57:d1:
                    06:71:cb:fc:96:d8:b2:19:44:3b:6b:19:ef:6f:07:
                    25:52:37:e1:42:05:0d:d3:96:c7:1e:4b:15:76:67:
                    aa:09:6a:5e:02:ba:f0:fb:71:57:ab:0a:02:4d:43:
                    6b:17:76:d8:da:a7:47:5e:30:37:fb:35:cd:ce:ac:
                    5f:4c:ef:19:f8:be:13:f8:49:c8:30:b7:a8:c4:2e:
                    19:4e:60:57:6a:8c:62:fa:d3:c5:ba:b7:4b:ff:0f:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:F7:E7:90:E2:01:61:34:EF:FF:0D:EA:34:37:03:A9:14:5F:76
            X509v3 Authority Key Identifier:
                keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/1-Jj355DiAWE07_8N6jQ3A6kUX3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:48:9f:3b:cc:2c:7a:98:c8:06:2b:bd:1c:01:8a:93:94:
         03:db:8e:3b:0f:68:04:af:8d:b4:d9:c7:70:35:bc:54:59:da:
         f0:18:0a:57:68:c3:86:ba:44:bf:f4:34:87:29:b9:c9:4a:96:
         11:2c:7e:0e:ef:72:7a:cf:c8:bc:5c:62:37:f1:f5:58:f2:b1:
         8c:fb:05:30:8a:c9:18:b3:a2:77:c2:ce:d4:94:8e:6f:bd:ad:
         e1:b1:08:2b:ec:c9:08:b6:3b:56:03:a7:cd:de:00:d6:e8:41:
         a3:54:5d:00:66:8d:61:b6:58:f7:1c:10:e1:9b:d2:7c:62:be:
         7b:60:d0:e8:a6:17:dc:b7:50:6b:34:b8:54:41:1f:64:93:6a:
         f4:46:49:fa:24:34:8c:8b:73:9d:69:02:13:3e:2f:c1:f4:62:
         78:02:ea:45:67:91:15:6e:b0:cc:9c:f4:8d:e7:07:4c:ee:12:
         93:7d:9e:72:3d:5c:fb:0d:e4:bd:17:93:cb:d5:37:c2:f1:3b:
         d1:07:a6:20:84:b8:98:0c:41:93:6c:7b:d2:22:ec:f6:3a:b2:
         4c:de:88:63:79:3b:78:65:58:6f:5e:03:e1:0f:34:38:9a:11:
         c8:f5:cd:31:e6:56:b9:8f:2e:b6:73:50:ba:25:05:76:61:53:
         5c:5c:1a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:21 2024 by rpki-client on console-fra.rpki-client.org