Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa
File:                     0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa (raw, json)
Hash identifier:          HWUFmoDrgHczIZ2twKORbV3SjuHlNfRR+C00HCP7B+E=
Subject key identifier:   D1:91:E5:CC:B3:96:5F:BC:7B:A3:C9:0A:09:A7:E1:0F:59:ED:2F:FD
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       0186EE67D62F1C31371928EC749CD678EDDB
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa
Signing time:             Fri 17 Mar 2023 07:10:27 +0000
ROA not before:           Fri 17 Mar 2023 07:10:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211327
IP address blocks:        93.180.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ee:67:d6:2f:1c:31:37:19:28:ec:74:9c:d6:78:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Mar 17 07:10:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d191e5ccb3965fbc7ba3c90a09a7e10f59ed2ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:c9:ff:62:c0:17:58:b5:94:cd:c1:d8:25:
                    c7:ba:b0:d9:a8:ae:3b:40:60:da:b5:0f:53:8f:46:
                    3a:45:f0:cf:64:21:fe:06:cc:62:df:ad:5d:4d:ce:
                    a1:3d:20:db:db:2e:d2:af:43:99:69:8d:37:21:d9:
                    3b:67:a3:3c:7b:8a:ba:55:ba:47:a6:72:5a:c1:af:
                    10:88:73:23:e5:f9:34:07:9c:d4:f5:08:e8:f2:df:
                    a2:a0:8b:e6:18:50:8d:d6:b5:1d:6d:d5:f5:9a:ad:
                    fc:6b:b5:97:40:98:b7:0b:db:b0:f4:10:79:d8:6e:
                    75:76:4d:37:ea:67:e1:be:12:73:11:e8:6d:fc:a8:
                    75:a7:0f:5d:1d:f2:ab:67:d1:bf:f4:57:da:a2:85:
                    af:8e:23:f5:2b:98:17:c5:c7:96:9e:de:1b:4d:53:
                    54:b2:ba:b1:7b:c7:43:7c:97:2c:3e:e5:58:66:8f:
                    10:d6:f5:04:78:e0:d8:ed:b7:fe:01:83:a6:49:09:
                    28:7e:c3:4c:fe:fb:5a:fc:7c:51:63:b3:c3:a9:c6:
                    30:87:89:19:3e:b1:3d:1a:2c:1b:c2:e5:2a:0e:34:
                    d1:46:af:9a:10:48:f3:45:cc:af:49:80:6c:46:ac:
                    0d:52:59:85:70:b5:11:5b:d4:23:bd:58:74:03:75:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:91:E5:CC:B3:96:5F:BC:7B:A3:C9:0A:09:A7:E1:0F:59:ED:2F:FD
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/0ZHlzLOWX7x7o8kKCafhD1ntL_0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:67:4e:ba:0d:6f:8d:d3:22:80:2b:5c:d3:a1:f7:c8:73:
         6b:36:b2:6f:45:c3:0f:6b:ac:a9:b8:f8:7f:4c:31:b0:f8:5c:
         04:70:b9:a5:64:b5:45:c3:04:cd:2e:db:e3:ca:a2:32:21:44:
         32:79:01:04:d9:1c:51:99:49:8e:6f:0c:1b:0f:62:d7:4b:5e:
         70:8b:56:f2:22:90:fe:e0:6c:f3:ac:fc:48:cd:b7:7d:a1:60:
         28:25:df:56:c5:5a:77:1e:fd:46:f8:bb:6c:43:9e:76:63:3d:
         b1:28:a2:f7:4b:15:e9:19:ce:43:d8:79:84:9f:17:88:aa:a2:
         28:74:d7:7e:37:fb:79:ad:38:6b:21:ee:aa:31:f9:08:3e:41:
         d6:d8:72:c6:17:fe:ed:49:b2:7a:d2:e2:c6:e5:cc:be:16:c1:
         53:a6:04:6a:9a:5e:ef:83:cc:ae:93:87:36:97:6e:10:db:ec:
         42:30:2f:83:f7:b8:d4:8d:4b:bf:c8:4e:fc:38:26:ec:61:96:
         27:8c:6e:34:5f:9c:5c:4a:90:7d:92:76:02:76:ec:ac:d7:bd:
         8f:6e:7d:69:4e:fc:30:7e:a6:7e:d3:18:f1:bc:1d:0d:32:04:
         0a:b8:ac:9f:04:60:ee:2f:c1:ae:e2:53:7f:dc:8a:e9:22:8a:
         56:7f:26:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:33 2024 by rpki-client on console-fra.rpki-client.org