Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x4wWY5SyJODdAPdhtSUuvE_tA08.roa
File:                     x4wWY5SyJODdAPdhtSUuvE_tA08.roa (raw, json)
Hash identifier:          ZCTN5S0FAjm5SGRH38D8KAXAM3kQkZXCAXZDcncGoCg=
Subject key identifier:   C7:8C:16:63:94:B2:24:E0:DD:00:F7:61:B5:25:2E:BC:4F:ED:03:4F
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       01867FB38919252FDD299245BE519C39A4A9
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x4wWY5SyJODdAPdhtSUuvE_tA08.roa
Signing time:             Thu 23 Feb 2023 19:15:17 +0000
ROA not before:           Thu 23 Feb 2023 19:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        93.89.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 Feb 2023 12:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7f:b3:89:19:25:2f:dd:29:92:45:be:51:9c:39:a4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Feb 23 19:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c78c166394b224e0dd00f761b5252ebc4fed034f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:62:9b:62:ab:ea:13:0a:0c:d8:a2:ea:5c:
                    93:d6:39:f4:9b:c3:34:6d:0a:e0:3d:c1:20:31:58:
                    de:8d:bb:62:f1:8d:6b:45:cd:1e:d4:98:c8:9c:9f:
                    70:2b:29:cc:1e:19:e6:c5:ed:06:54:ce:9b:47:e8:
                    0b:33:16:fe:ce:17:ca:93:d6:1b:c8:0e:02:b8:b0:
                    a3:d3:69:f7:c8:0c:f5:4a:71:f7:a6:db:63:eb:6f:
                    19:32:76:5a:af:a5:fa:e8:e8:e5:b1:0d:a6:f6:3e:
                    9f:df:16:b2:a7:df:4e:6b:f1:26:e9:6a:46:14:95:
                    ca:40:4a:ee:f5:51:c0:c9:f2:8b:36:97:12:9a:7f:
                    76:23:7f:99:b3:ad:4a:7c:56:8e:de:9b:77:b2:b4:
                    97:fb:f0:7e:95:16:dd:ff:6f:2e:39:9a:0c:5e:8a:
                    9d:51:a5:ee:00:d2:4d:c9:5f:bc:ca:6c:68:85:e3:
                    1c:8e:de:71:48:b7:b4:90:d5:63:00:30:35:08:8e:
                    22:ee:e6:d0:d1:5b:c1:aa:31:61:50:9e:b2:c9:ab:
                    e8:e5:02:d9:bb:64:e6:eb:01:f5:03:54:39:96:80:
                    c0:b7:b1:a7:5b:9f:e9:46:88:96:8f:69:eb:54:bc:
                    09:53:75:82:78:93:b7:c9:2d:96:44:20:0a:1c:81:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:16:63:94:B2:24:E0:DD:00:F7:61:B5:25:2E:BC:4F:ED:03:4F
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/x4wWY5SyJODdAPdhtSUuvE_tA08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.89.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:95:12:5b:e3:56:20:6d:27:1d:58:c8:2d:0c:72:88:77:c1:
         df:06:32:6b:c2:df:71:ef:b9:38:04:73:5b:32:43:e5:5e:75:
         d4:e5:03:5a:65:b9:4a:3d:ef:36:5b:a9:c7:e5:57:fb:94:df:
         f4:ab:94:b1:d6:4d:9c:02:04:a8:05:46:40:ec:c6:92:f0:8f:
         6e:38:a1:39:a4:59:34:45:9c:fa:19:ce:11:11:12:46:7a:98:
         0d:75:15:95:8b:94:21:4b:4a:b1:61:fe:44:7f:00:c8:c7:85:
         de:1e:34:9b:76:b2:98:ef:0b:7f:76:e4:7e:e8:db:b1:7d:55:
         28:a7:df:f8:fd:8f:e5:ac:28:56:9f:75:5c:1c:cc:8a:25:6e:
         6d:4a:ac:95:ad:5d:10:ae:44:5f:6d:c0:9e:6e:3a:c2:06:03:
         dd:65:28:b2:ef:70:8d:0c:36:41:a9:5f:5f:12:ed:b4:c4:c5:
         5b:c0:64:14:d2:b0:05:fd:64:14:6c:ac:42:a1:cb:c1:a0:f0:
         83:de:9b:e2:b1:b6:c9:20:85:c9:b8:ba:66:79:ba:c6:b4:3c:
         39:e9:4c:fb:70:d3:a4:d0:23:d6:a6:b3:94:9c:65:81:5b:e5:
         4a:c2:ae:0a:06:dd:7d:54:b4:0f:c9:e0:2e:37:fb:a5:c2:c7:
         5d:18:e5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org