Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/SVZI2ZfkM6CQL-3f1fS5yQxYBZg.roa
File:                     SVZI2ZfkM6CQL-3f1fS5yQxYBZg.roa (raw, json)
Hash identifier:          MdEqhJZF6ZHxoqQt5SzXSjMf0AszmY6647NKQbezJ4o=
Subject key identifier:   49:56:48:D9:97:E4:33:A0:90:2F:ED:DF:D5:F4:B9:C9:0C:58:05:98
Certificate issuer:       /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial:       018DC2A6B5AACA715897D25899F2126C8622
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/SVZI2ZfkM6CQL-3f1fS5yQxYBZg.roa
Signing time:             Mon 19 Feb 2024 18:35:21 +0000
ROA not before:           Mon 19 Feb 2024 18:35:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        193.242.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 06:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c2:a6:b5:aa:ca:71:58:97:d2:58:99:f2:12:6c:86:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
        Validity
            Not Before: Feb 19 18:35:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=495648d997e433a0902feddfd5f4b9c90c580598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:71:e4:47:a0:01:87:7c:d8:77:76:15:ee:
                    5c:a0:d6:70:f5:1e:c6:ee:8f:ec:bc:29:f0:52:11:
                    98:6b:76:de:2d:3d:03:68:50:a2:80:98:84:58:91:
                    ac:f8:5e:f5:d4:89:b0:79:6b:ef:cf:67:fb:d4:1c:
                    f5:f1:88:d5:b2:92:12:65:0d:6b:be:50:3d:f2:95:
                    89:0b:e4:35:b9:56:9a:1b:97:cc:e1:d2:ca:f1:2d:
                    51:c5:9f:bb:3b:49:91:c6:5c:29:32:02:b8:2c:39:
                    ec:fd:a2:ac:00:39:d4:6a:f7:02:57:78:0b:88:a8:
                    1c:88:4d:aa:65:66:c2:de:8b:ed:81:96:af:9a:b6:
                    a4:3c:ea:71:96:00:1b:45:86:d8:40:5c:35:80:06:
                    07:14:1a:87:81:f2:2c:08:3b:c6:a6:24:e3:cc:12:
                    c4:75:c2:b9:e7:2e:1f:25:df:84:74:01:f9:20:08:
                    0b:61:b4:10:9e:8e:90:04:28:8f:ff:82:53:ba:09:
                    e7:dc:f3:78:6c:57:87:a8:ea:47:07:42:d1:39:56:
                    91:85:e0:64:a8:17:71:55:04:51:ee:d4:2c:07:21:
                    74:c1:e8:81:75:15:e1:08:d3:5a:28:3c:5c:e0:91:
                    9a:e3:67:b7:6e:c8:6a:fe:d8:16:1a:15:ba:64:00:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:48:D9:97:E4:33:A0:90:2F:ED:DF:D5:F4:B9:C9:0C:58:05:98
            X509v3 Authority Key Identifier:
                keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/SVZI2ZfkM6CQL-3f1fS5yQxYBZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.242.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:8c:86:ce:61:fd:d6:1c:e0:5b:0a:78:d8:b2:41:ab:d5:
         b3:7a:2f:72:05:07:f9:d2:b4:ba:53:ba:8a:d1:45:2d:77:da:
         43:29:ca:6e:37:14:ab:3a:85:ee:00:ce:97:53:9f:3e:4a:59:
         68:23:6c:4f:f4:dc:06:d0:97:88:fe:04:92:ee:5c:e2:1f:c1:
         19:b3:2e:83:b5:cd:32:8b:cb:3a:ab:32:4b:1a:c7:ac:0d:c2:
         68:e8:7e:32:41:48:47:b2:e3:d5:27:4d:8e:4f:d2:88:6b:3b:
         fd:3f:ee:96:20:da:fd:af:39:58:e5:16:a1:c6:a4:5a:fc:5b:
         8b:a6:b5:ed:af:fb:e1:e1:1d:56:a4:1b:a2:8e:2a:a4:91:d8:
         2f:b8:3c:fc:99:59:90:09:79:b6:50:2c:f6:16:d2:4a:ab:e9:
         c3:7a:ab:46:d8:c4:ad:2a:b6:a6:83:a1:d8:5c:d1:ca:0f:d4:
         1f:30:b8:57:66:fe:96:b3:7a:44:45:bd:02:c6:1b:93:8c:df:
         c6:e3:ce:5b:94:d5:ed:16:9e:a3:08:a1:0b:78:3f:e0:53:27:
         0d:f8:f0:e1:e1:dd:ed:06:14:5a:41:a9:af:87:93:0f:02:04:
         56:95:c1:de:25:94:01:5b:62:d5:ad:08:05:a7:19:aa:1b:10:
         d6:6d:9e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:24 2024 by rpki-client on console-fra.rpki-client.org