Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rJK6QIgv2QCqFqv4-YFzxvnJrYA.roa
File:                     rJK6QIgv2QCqFqv4-YFzxvnJrYA.roa (raw, json)
Hash identifier:          T/516dx7Jz+nEVMqBwDi6EsyO8WuoSNCOY9LK2Kd/D4=
Subject key identifier:   AC:92:BA:40:88:2F:D9:00:AA:16:AB:F8:F9:81:73:C6:F9:C9:AD:80
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0188043C2102626B18720C08703765C8A4E0
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rJK6QIgv2QCqFqv4-YFzxvnJrYA.roa
Signing time:             Wed 10 May 2023 05:57:09 +0000
ROA not before:           Wed 10 May 2023 05:57:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        93.89.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Jun 2023 08:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:04:3c:21:02:62:6b:18:72:0c:08:70:37:65:c8:a4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May 10 05:57:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac92ba40882fd900aa16abf8f98173c6f9c9ad80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:61:22:37:58:b8:9e:1a:30:ba:65:90:01:
                    c0:88:4b:bb:60:f8:39:10:23:69:91:98:db:af:b6:
                    c0:91:79:c2:d7:45:40:0e:35:eb:57:df:b8:b3:d4:
                    56:3e:77:c4:eb:0a:6f:79:7d:4a:0c:a5:66:45:fb:
                    16:7d:c1:05:4a:c6:bf:b2:2d:3d:c1:d2:40:ce:37:
                    e3:e5:a3:a0:1a:21:27:6a:27:2a:d4:c0:7c:d4:83:
                    ca:6c:1e:22:49:95:1e:93:a1:6a:d2:f9:d8:59:fa:
                    92:59:cc:09:ad:5c:b4:bc:ea:d6:a2:88:0c:5b:22:
                    ea:a5:b4:63:56:3e:3c:28:68:f7:f3:bb:df:c4:a4:
                    83:ac:ae:2d:ad:cf:d9:e3:bb:61:4b:b5:0f:10:ca:
                    f8:59:44:d3:16:94:f9:f2:8c:f1:1d:7f:f3:89:3a:
                    a6:54:74:01:8f:06:53:fe:f4:65:74:8f:2a:16:ca:
                    66:d3:59:d0:f5:8c:da:7b:b3:ce:24:5e:b2:ee:dd:
                    e4:75:cc:9a:49:77:87:39:a8:d4:70:9d:80:fd:8b:
                    5b:0c:c8:ec:52:cb:fc:e5:b5:1a:cb:75:05:e0:08:
                    50:d7:d6:c4:83:be:ed:5c:21:f9:41:6a:bf:d4:5e:
                    b8:56:02:ee:72:62:dc:92:b3:e4:85:39:c5:68:59:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:92:BA:40:88:2F:D9:00:AA:16:AB:F8:F9:81:73:C6:F9:C9:AD:80
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/rJK6QIgv2QCqFqv4-YFzxvnJrYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:e4:2d:d8:51:e0:0f:a4:66:67:06:68:8c:15:cc:54:81:
         a2:b5:b1:40:cc:fd:7d:fe:c8:39:05:9e:ba:d0:95:04:c5:6d:
         c7:c1:81:3d:30:cf:ed:84:48:01:c1:b1:ba:bb:59:7c:44:22:
         1f:37:6f:98:60:aa:d6:bc:54:45:71:92:b8:10:b5:ba:a4:24:
         41:d2:5f:88:72:87:a8:80:80:11:c2:6f:d8:05:18:c3:14:50:
         35:2b:e1:52:0a:5e:35:69:de:f2:ac:78:90:a1:f9:5d:03:e9:
         8a:46:0e:0f:b8:1c:b6:61:55:5b:b4:54:c6:98:2f:03:63:35:
         38:16:88:95:ec:ef:16:33:a0:b4:31:00:49:a5:4f:41:ff:eb:
         ff:1c:8a:d4:63:88:19:15:fd:bc:e5:e2:c2:cb:61:df:d4:02:
         13:69:59:cf:d8:33:59:e9:94:5c:1e:e7:25:8a:8d:73:5b:ac:
         29:fe:47:34:d4:95:d3:b7:bd:79:05:de:e8:e4:63:3d:e2:12:
         00:51:c6:25:8e:c9:0f:27:e5:7c:1e:25:80:ff:08:68:48:4f:
         55:66:94:6f:b2:69:07:83:7f:93:74:f6:e0:62:67:9a:8f:96:
         fe:4f:4b:7b:01:ab:2d:13:c4:45:e2:8f:00:0d:87:a1:e1:02:
         e7:a0:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org