Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/UO_H9MABGjKXaZy1Ax8tJ0Lsiug.roa
File:                     UO_H9MABGjKXaZy1Ax8tJ0Lsiug.roa (raw, json)
Hash identifier:          Si3TyRUSakgQ1fGXLxU/Nhg6KhyhzbnStYEuQyYNH74=
Subject key identifier:   50:EF:C7:F4:C0:01:1A:32:97:69:9C:B5:03:1F:2D:27:42:EC:8A:E8
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       018BCD5760156693118C4141BCF04CAD382B
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/UO_H9MABGjKXaZy1Ax8tJ0Lsiug.roa
Signing time:             Tue 14 Nov 2023 10:18:57 +0000
ROA not before:           Tue 14 Nov 2023 10:18:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199017
IP address blocks:        93.114.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cd:57:60:15:66:93:11:8c:41:41:bc:f0:4c:ad:38:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Nov 14 10:18:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50efc7f4c0011a3297699cb5031f2d2742ec8ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:e7:ba:f5:bb:db:0b:ab:8a:26:9a:48:f3:
                    59:e6:81:3a:26:3a:3c:ec:af:23:79:e4:f2:b3:98:
                    66:86:cb:5a:6c:9c:74:e3:b1:a4:46:7f:bc:14:d5:
                    27:1e:0d:88:f5:b2:0b:67:9d:18:d1:3d:59:53:93:
                    67:22:dd:59:03:b4:98:f8:ae:ec:8f:f0:da:b7:b5:
                    3b:64:62:88:14:81:f5:a7:e8:f9:13:d7:85:4d:a9:
                    3a:2b:09:d4:8d:e6:3d:21:ff:f8:2f:0c:72:e5:61:
                    39:41:72:62:cc:c3:72:2d:36:d0:1b:10:8f:a9:12:
                    ec:11:6f:b5:b2:81:34:64:90:1e:19:bf:bc:7e:0d:
                    3a:74:fc:31:0c:7f:f3:b2:a6:06:0c:85:ea:28:47:
                    d2:82:e8:db:60:81:70:44:e3:45:fb:22:14:5e:23:
                    51:99:78:ec:90:0f:78:1f:63:4b:aa:6e:6a:8e:62:
                    0f:59:69:04:6a:66:b0:c8:9c:d6:ab:5a:51:75:b6:
                    0d:6e:40:de:bb:5d:15:fd:2c:f3:1e:ae:bf:91:a1:
                    8c:e0:f7:73:7b:e0:7b:aa:34:a2:85:21:c1:9f:46:
                    7f:51:5f:22:06:98:f1:95:3a:23:6c:8c:8e:34:13:
                    38:de:06:3f:97:76:da:5b:46:1b:b4:82:74:ac:49:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:C7:F4:C0:01:1A:32:97:69:9C:B5:03:1F:2D:27:42:EC:8A:E8
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/UO_H9MABGjKXaZy1Ax8tJ0Lsiug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c0:c8:c1:7a:fa:f4:f3:f6:5b:d5:67:78:95:37:cc:e0:bb:
         a0:4b:7d:f9:b3:55:9e:48:18:34:0c:98:c3:6f:25:66:52:3e:
         b3:10:3d:fb:50:2a:8e:80:86:76:a4:4a:1f:be:32:4c:11:29:
         23:9f:14:f2:b6:11:12:9e:ee:76:99:ae:ec:da:02:47:95:d1:
         22:83:55:25:5a:4c:f6:d5:b0:68:e1:bf:e6:dd:bb:dc:dc:7e:
         52:7e:3b:dd:ec:7b:4d:1e:f8:9d:6a:6a:c9:aa:8e:83:c8:6c:
         f6:4b:4f:f5:4d:4c:93:50:c7:e5:7e:87:9c:26:28:d4:77:c1:
         ab:1d:c4:01:d5:d5:d0:2f:fe:7e:02:6b:f0:79:b4:95:27:ce:
         44:4f:27:cc:86:7f:d7:8e:54:2b:e3:e3:e0:75:d0:7a:66:56:
         0b:03:2c:e7:7e:b7:da:3f:93:2a:94:83:9d:35:24:3b:f3:0e:
         b6:b2:9f:53:3d:f6:0e:9f:26:5d:64:72:2b:31:65:76:a9:00:
         2a:c2:67:1c:99:33:e3:12:7a:28:4a:2b:73:05:59:85:ef:9f:
         2f:32:10:70:4b:77:d1:68:f8:6b:e1:67:9b:d3:c6:d5:09:28:
         05:10:b2:0e:d5:80:9e:20:e4:f5:96:5a:3b:9b:aa:c1:7a:d2:
         71:bb:e7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org