Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LoObgAy-N_TsL7tHVj5qqvwYupk.roa
File:                     LoObgAy-N_TsL7tHVj5qqvwYupk.roa (raw, json)
Hash identifier:          xVayIZ2KtwSKrupW1o+ryDijem1D4nEP1jnNCnt2u6A=
Subject key identifier:   2E:83:9B:80:0C:BE:37:F4:EC:2F:BB:47:56:3E:6A:AA:FC:18:BA:99
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       018866BAC487AEB44A70C627FDD8A085B98A
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LoObgAy-N_TsL7tHVj5qqvwYupk.roa
Signing time:             Mon 29 May 2023 08:58:15 +0000
ROA not before:           Mon 29 May 2023 08:58:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        93.89.217.0/24 maxlen: 24
                          93.89.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Jun 2023 16:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:66:ba:c4:87:ae:b4:4a:70:c6:27:fd:d8:a0:85:b9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May 29 08:58:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e839b800cbe37f4ec2fbb47563e6aaafc18ba99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:bc:6f:4d:f1:c4:12:3c:30:0e:c9:1a:a4:
                    c3:1b:66:2c:9e:4d:3b:89:be:82:1a:bd:08:4a:2a:
                    fe:9e:da:7e:11:02:ba:28:d6:57:e5:cd:a8:41:88:
                    e5:e3:d4:d4:a5:ae:b1:e3:93:76:96:0b:94:89:b2:
                    1b:e4:44:99:4f:a1:c0:0e:cb:40:64:2c:1b:39:33:
                    6f:e3:f0:43:9c:26:c3:d6:d3:34:44:d4:b6:7b:0d:
                    fd:4a:4c:89:af:de:18:96:71:11:42:ea:9d:93:86:
                    dc:1f:c9:ba:56:3a:fa:04:a9:78:af:24:a8:24:e4:
                    a1:09:32:27:2d:0c:a8:7d:7e:23:5e:1a:18:7d:f9:
                    36:89:93:1a:f7:17:1a:23:4e:27:87:c3:81:64:61:
                    52:e0:ae:79:ff:40:83:63:f0:60:dc:db:65:13:53:
                    08:3a:3c:8e:a7:9d:cb:5d:a8:ad:ee:d6:84:26:16:
                    fc:f2:3c:1a:35:be:82:54:51:b6:35:09:72:6b:d1:
                    71:a6:67:a0:7d:9f:7a:39:eb:f5:19:d7:dc:72:b5:
                    99:97:a2:f0:d9:4f:80:a0:73:f7:f1:58:c3:3c:7b:
                    fd:35:95:82:c5:c1:2e:20:2c:2d:a9:30:05:d2:6a:
                    71:61:98:6d:ed:89:c2:53:b3:cd:12:3d:c5:65:cc:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:83:9B:80:0C:BE:37:F4:EC:2F:BB:47:56:3E:6A:AA:FC:18:BA:99
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/LoObgAy-N_TsL7tHVj5qqvwYupk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:c1:d0:e5:84:9d:05:24:14:3d:e4:28:25:f9:c4:2d:f5:
         2c:f9:83:71:2f:f3:d8:a8:32:38:e1:1e:a6:28:c9:57:aa:13:
         86:d4:22:78:f6:5d:35:9d:bb:87:89:4d:0d:97:66:5d:ca:fd:
         9d:da:2f:23:f8:18:93:44:2e:09:f5:24:da:fe:fb:06:ca:e3:
         12:f8:d2:97:8b:3d:3a:67:b8:fd:6b:41:f5:85:86:d5:7d:9a:
         b7:3d:4e:88:22:fa:89:91:b1:b2:2d:d8:ec:18:96:3f:8d:bb:
         ba:ad:7b:f2:e6:66:dc:09:41:4d:e5:bf:99:45:5b:3a:69:1c:
         5e:9e:e4:58:d7:08:ec:02:ac:05:19:fc:09:81:3f:93:21:6e:
         4e:74:be:c6:13:af:89:a3:7f:b0:85:ed:1d:33:76:10:75:65:
         22:35:c2:2a:e5:fd:c3:fc:99:a4:b7:91:d5:28:ae:7b:da:4b:
         20:b1:2c:59:49:34:e8:fb:bd:c7:2e:82:1d:d4:ab:b4:56:3f:
         25:c1:5c:df:5e:59:6f:5e:31:d6:df:55:dd:a9:16:d9:c2:4e:
         b9:3b:95:f0:76:9d:bc:bd:36:8e:c5:28:49:e8:ad:01:d1:93:
         d1:02:71:e9:57:d3:26:b5:d8:b3:ce:b6:33:ff:26:f7:25:fd:
         c6:80:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org