Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/5VchHS5YyTElwnUgtMsW3iBjTHU.roa
File:                     5VchHS5YyTElwnUgtMsW3iBjTHU.roa (raw, json)
Hash identifier:          BfJh5ySR0kPiKpPrfRZG5iPVk9xA1Qt50+CLp6mtcT4=
Subject key identifier:   E5:57:21:1D:2E:58:C9:31:25:C2:75:20:B4:CB:16:DE:20:63:4C:75
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       01895D4E2AD1FEDDD96FF0D65C0315D867BD
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/5VchHS5YyTElwnUgtMsW3iBjTHU.roa
Signing time:             Sun 16 Jul 2023 06:05:51 +0000
ROA not before:           Sun 16 Jul 2023 06:05:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        93.89.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 15 Aug 2023 05:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5d:4e:2a:d1:fe:dd:d9:6f:f0:d6:5c:03:15:d8:67:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jul 16 06:05:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e557211d2e58c93125c27520b4cb16de20634c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:30:22:5d:3e:91:5d:0f:f1:71:05:9d:2b:
                    88:ce:85:43:d5:c3:e3:07:c7:98:35:30:6b:d2:6a:
                    3c:eb:f3:f7:9b:9d:25:b8:f3:a1:b8:26:5d:2c:d7:
                    f6:09:fa:b4:0b:99:9a:a3:7b:1e:05:ea:39:bb:ab:
                    51:24:4d:32:52:f6:a2:76:d9:ee:bd:80:2f:41:41:
                    a3:90:87:3e:f6:7a:27:d1:bf:83:3a:8b:8e:52:b0:
                    30:54:cc:91:10:34:44:d3:48:c8:6c:58:b1:10:73:
                    26:4e:02:b1:3b:94:0d:6a:de:e8:da:20:b1:5a:60:
                    8e:20:2f:51:51:83:21:71:4b:13:a8:78:fc:13:01:
                    b6:cc:af:70:c2:de:18:81:f7:6e:46:8d:a5:58:c5:
                    61:89:87:4f:16:2f:a1:46:0a:fb:a1:41:f3:9b:af:
                    46:7f:bc:2f:87:c8:70:70:b1:f0:e3:09:1f:92:fc:
                    99:b3:b4:6c:f5:e6:fc:b3:77:c8:29:69:21:62:53:
                    ae:a8:2d:d1:61:fc:fa:54:38:6e:36:54:64:92:e5:
                    a7:f5:7e:ab:a8:b8:e9:54:29:0d:77:c2:0c:d9:d3:
                    f7:f0:15:65:df:e3:d2:5a:9b:86:a1:33:18:87:84:
                    f5:aa:65:b6:70:51:22:6f:89:91:d6:74:d4:59:84:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:21:1D:2E:58:C9:31:25:C2:75:20:B4:CB:16:DE:20:63:4C:75
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/5VchHS5YyTElwnUgtMsW3iBjTHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:16:f6:2b:c6:89:d7:e6:21:64:5e:d2:96:aa:fe:36:05:26:
         13:df:42:ea:5b:6e:08:3e:35:c8:69:68:a6:6b:e1:7e:71:df:
         99:32:2a:ea:46:5d:9a:14:d9:5d:43:b1:0d:f6:a4:a7:34:a7:
         2a:9f:50:1f:99:95:b1:c3:07:6c:ea:87:fe:5b:5f:13:e4:6e:
         0b:be:e6:b8:36:ae:09:76:f2:ba:35:6d:bb:4c:71:f9:04:cc:
         eb:44:db:f4:0d:92:ee:24:15:97:fa:fc:fb:22:d8:65:59:a5:
         cc:af:4b:bb:f8:2c:2c:b0:47:a2:9c:90:82:1d:ee:e7:ed:91:
         e0:18:cb:85:01:a2:e9:0b:31:52:dc:c9:d3:38:de:15:27:78:
         b2:63:0a:89:f7:d9:24:eb:40:1f:4c:43:5b:81:8b:c1:8d:bc:
         34:e8:36:96:bc:33:1b:a5:9b:65:3b:c7:75:60:bc:57:86:36:
         bf:2b:82:03:bc:c9:cd:1a:c3:79:01:e8:af:9c:79:32:8b:dd:
         2f:b0:31:c0:8b:67:b0:74:96:5a:66:e9:5f:9f:c5:3f:93:87:
         3a:70:5a:d6:33:af:5b:60:9f:93:6c:0f:9f:9a:aa:77:e0:b1:
         2e:50:80:c0:eb:b2:b5:09:a4:c4:33:c1:00:5e:a9:f5:0f:c8:
         0f:ed:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org