Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa
File:                     19HYKJtpUf78x42YOEJ9n0SNRpo.roa (raw, json)
Hash identifier:          52Ze+bKEPwG9RX9zcONJ0I1+DrRJyWKqr3ByeUcLR2Q=
Subject key identifier:   D7:D1:D8:28:9B:69:51:FE:FC:C7:8D:98:38:42:7D:9F:44:8D:46:9A
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       018570027D86C63032E4CADCF04029988A54
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa
Signing time:             Mon 02 Jan 2023 01:04:49 +0000
ROA not before:           Mon 02 Jan 2023 01:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210019
IP address blocks:        93.105.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:7d:86:c6:30:32:e4:ca:dc:f0:40:29:98:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  2 01:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7d1d8289b6951fefcc78d9838427d9f448d469a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:1b:8c:5b:2d:b9:97:38:7d:fd:3f:a4:22:
                    af:93:bc:f8:8c:4b:fc:fb:fc:64:65:b3:2e:08:91:
                    00:30:ea:a6:df:5e:a4:b6:1b:63:a9:08:92:25:9b:
                    24:8a:4c:7d:6a:e3:8e:96:02:58:66:f0:1f:0a:53:
                    2e:00:c3:58:2a:1b:cd:10:42:5f:e0:f2:e5:4f:11:
                    3c:99:9f:82:26:0e:bb:ef:47:9f:40:74:92:00:aa:
                    9d:e5:b4:b5:a8:6d:bb:ef:e5:50:5c:a3:2a:0b:4c:
                    b4:24:64:d2:42:b5:0a:57:77:82:b1:0f:b3:5e:c6:
                    9b:12:1e:f5:0a:5b:da:03:63:12:0d:53:dd:a6:cb:
                    66:00:01:b2:7d:03:f8:77:d5:95:7a:93:67:82:67:
                    f2:f3:b7:64:57:74:ab:a3:3b:ab:82:f1:5a:dc:1e:
                    a3:d8:e0:d6:2d:9a:d8:15:94:ed:5e:dd:a5:fe:c7:
                    7a:0a:fa:60:31:3d:8e:12:66:86:8d:99:0f:d4:10:
                    27:af:99:bb:92:09:4b:ee:c6:6d:b9:1d:bd:b0:2b:
                    90:8a:f8:fb:4f:c8:6c:c4:23:df:12:66:25:5f:e0:
                    7f:04:80:3b:2b:92:90:fa:3f:8c:2c:1d:af:a0:d4:
                    8e:83:c7:b0:d5:93:09:07:a2:57:ce:08:6a:83:35:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:D8:28:9B:69:51:FE:FC:C7:8D:98:38:42:7D:9F:44:8D:46:9A
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/19HYKJtpUf78x42YOEJ9n0SNRpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.105.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ea:18:7b:8f:06:8a:f0:a7:82:fa:f7:5d:5c:6d:75:25:89:
         5c:44:a4:1d:23:75:99:68:1a:07:0a:21:ab:b5:08:5f:82:50:
         05:3b:35:e9:bc:74:c1:3b:a4:3c:ad:9b:1f:30:6c:f7:0e:08:
         25:ec:52:f0:bd:c3:76:96:12:40:15:d0:17:bd:1b:ab:1c:b2:
         5e:c0:0e:9f:c4:d5:d5:82:5c:58:e3:ee:49:56:b7:e1:fd:39:
         93:28:49:8f:21:21:ca:11:aa:88:dc:d5:30:93:de:dd:da:4b:
         e3:38:6d:8e:b0:ec:ed:43:4d:90:b6:ea:af:58:45:69:f5:64:
         05:6a:c1:b2:5c:85:f9:77:3a:31:5a:b2:83:19:83:2a:23:9d:
         21:1d:f5:89:dd:e5:ae:d5:8f:ff:b6:ed:ca:31:72:55:a3:41:
         1a:74:08:b6:55:e9:56:08:63:91:e2:c0:82:3a:a8:b3:95:b0:
         89:cd:06:69:14:5c:23:39:27:14:ea:53:4a:fc:d9:37:03:45:
         56:dc:51:cd:2f:67:87:5f:e8:2d:6b:cd:96:93:12:0b:08:2c:
         1e:eb:67:c3:bf:34:2f:2c:58:13:09:01:77:0d:17:4b:70:81:
         ac:32:a5:2f:76:d5:fc:6d:08:5c:59:bf:a7:74:dc:df:9b:6d:
         3e:f4:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org