Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/RnmRnJ6PVy765nBv-1HsxboWmzI.roa
File:                     RnmRnJ6PVy765nBv-1HsxboWmzI.roa (raw, json)
Hash identifier:          6BZDDeNHjmJFBelJiEfb+v8pus7lF6dL6u0oaa49Pys=
Subject key identifier:   46:79:91:9C:9E:8F:57:2E:FA:E6:70:6F:FB:51:EC:C5:BA:16:9B:32
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       018881E338CDA56EB4B26DA36C8961FECC05
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/RnmRnJ6PVy765nBv-1HsxboWmzI.roa
Signing time:             Sat 03 Jun 2023 15:32:11 +0000
ROA not before:           Sat 03 Jun 2023 15:32:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198652
IP address blocks:        93.89.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Jun 2023 16:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:81:e3:38:cd:a5:6e:b4:b2:6d:a3:6c:89:61:fe:cc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jun  3 15:32:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4679919c9e8f572efae6706ffb51ecc5ba169b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:77:e9:4f:39:56:cc:0d:ba:5c:a4:c3:09:
                    a7:b0:9c:c6:99:b4:8a:32:02:f1:e6:d3:56:d9:62:
                    68:a6:d2:78:9c:b0:44:04:8c:56:13:15:86:6b:b8:
                    d4:b9:f2:ba:5d:cd:2b:b2:07:3a:53:24:3e:c2:84:
                    ba:03:10:72:c5:bb:15:fe:70:1f:cd:ec:ed:64:f8:
                    21:6d:a4:fe:a5:07:62:f1:e1:c0:b3:e0:5e:c6:9e:
                    46:9a:64:61:12:81:a2:06:b1:8f:cc:83:a8:16:55:
                    83:6c:6c:d3:7a:72:4c:33:a7:ce:d5:e5:35:09:d2:
                    75:28:2b:7a:2c:e5:c5:32:c4:d1:90:df:2c:76:de:
                    e7:2b:63:cd:3c:27:c2:63:be:15:17:54:b7:1a:17:
                    83:02:c4:3b:47:0b:c2:e1:62:25:61:ae:79:a9:2f:
                    27:88:46:02:5f:db:ac:5f:e2:1d:55:10:60:c2:d3:
                    aa:3b:f7:e4:98:33:fa:4c:01:d5:5f:10:f1:94:a6:
                    21:6d:eb:c7:9c:ed:37:0b:1a:17:ba:d1:15:65:a4:
                    2f:c7:98:20:0e:6b:fb:1e:d0:b7:73:c0:22:65:94:
                    ef:b9:97:08:0c:4d:eb:65:da:dd:51:07:d1:2d:df:
                    59:dc:12:bc:a3:7a:f5:fc:86:c9:6d:5a:f0:d9:eb:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:79:91:9C:9E:8F:57:2E:FA:E6:70:6F:FB:51:EC:C5:BA:16:9B:32
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/RnmRnJ6PVy765nBv-1HsxboWmzI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:c2:8f:48:97:36:ed:ae:19:c0:0d:0c:2e:5a:ce:12:9a:
         6f:65:27:ce:e1:e1:66:22:76:06:30:aa:ad:fb:4c:22:a5:87:
         7f:9d:19:53:61:e9:e1:df:13:ea:a8:05:bd:ba:27:30:67:ae:
         29:0d:9c:4d:30:1b:56:a1:6e:84:7b:ab:5f:46:1a:d3:44:01:
         dc:48:03:d5:19:0b:da:af:87:ff:06:cc:a6:3d:8d:f2:a0:54:
         09:75:54:2e:2c:d2:8c:a7:3e:14:ee:7b:73:50:bb:6e:b2:a0:
         c6:73:e5:7f:ad:9c:97:66:c9:c7:ab:c7:f1:88:72:36:90:a2:
         a6:51:e7:0f:8d:9d:1f:cd:29:6a:b5:94:28:c3:bf:ec:aa:18:
         ce:1a:3e:10:45:59:d3:46:d7:70:4f:1d:25:e2:3d:23:18:f4:
         c5:b1:2b:c0:05:ea:1e:0b:a8:ac:34:28:2b:f6:5c:cb:ce:a9:
         5b:5d:4a:60:bf:05:ff:58:5c:90:df:1b:23:e1:91:ce:74:fb:
         d6:c0:ca:09:5a:75:c4:30:85:ea:be:0e:8e:33:aa:e4:91:23:
         dd:3a:d0:e6:a2:06:57:0b:f3:cb:7b:62:4f:fd:89:87:ae:9b:
         62:a7:23:7e:83:c1:be:74:0f:6c:38:32:f7:17:ea:e2:6f:b7:
         a2:d7:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org