Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/1-mDAGTEeuU1VILwDi0JQwDjZY8Q.roa
File:                     1-mDAGTEeuU1VILwDi0JQwDjZY8Q.roa (raw, json)
Hash identifier:          5fbVaO/P/VkynvtGZAZoYPXHq/gOLHCO6ec3ctjVCBk=
Subject key identifier:   FA:60:C0:19:31:1E:B9:4D:55:20:BC:03:8B:42:50:C0:38:D9:63:C4
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       01856D13D9A9AE9F239B78060F676DC5E365
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/1-mDAGTEeuU1VILwDi0JQwDjZY8Q.roa
Signing time:             Sun 01 Jan 2023 11:24:55 +0000
ROA not before:           Sun 01 Jan 2023 11:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48391
IP address blocks:        93.126.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:13:d9:a9:ae:9f:23:9b:78:06:0f:67:6d:c5:e3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 11:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa60c019311eb94d5520bc038b4250c038d963c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:af:57:ca:ba:e0:78:72:5f:f4:34:9e:02:
                    88:b6:9f:3e:aa:42:e3:f7:30:2b:60:e6:e1:33:28:
                    4b:d8:32:ea:4c:21:b5:8e:8a:99:2d:db:0f:c3:7a:
                    a5:75:f1:ea:9d:d9:1a:d5:66:1a:57:ad:03:e9:66:
                    fd:76:32:56:c7:df:6f:9f:18:44:61:a5:e4:f4:f2:
                    ef:c1:3a:34:6d:29:73:9d:ba:ef:3e:da:b2:4c:73:
                    0a:8f:97:a2:e3:4c:d6:5d:b9:77:e8:85:ab:cc:0c:
                    8f:5e:75:65:a3:79:fa:65:b9:83:8c:24:78:6d:43:
                    1b:4f:bd:a0:c4:2e:a5:68:d2:a2:6d:99:83:fd:e3:
                    48:bf:27:8a:9b:58:24:42:fe:1e:6e:94:4f:9f:42:
                    28:0b:d9:77:d2:15:d3:77:aa:af:f4:c0:b0:03:4c:
                    b2:80:1a:b5:c8:07:8d:55:00:99:60:c8:76:20:19:
                    13:63:80:f4:58:70:7a:4f:cc:54:f6:d6:1a:8b:db:
                    0b:8c:50:a5:35:58:66:c0:54:04:fd:3f:e2:05:6f:
                    08:b2:7c:9f:25:ed:23:27:70:28:2a:7a:72:05:70:
                    7b:db:88:ff:53:44:95:4b:fe:3f:cd:21:00:dd:3a:
                    f2:33:92:56:1d:46:be:e7:6a:9c:74:29:03:a0:59:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:C0:19:31:1E:B9:4D:55:20:BC:03:8B:42:50:C0:38:D9:63:C4
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/1-mDAGTEeuU1VILwDi0JQwDjZY8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:0e:ca:dd:23:f5:29:57:9e:cd:f3:4a:74:21:6d:27:73:
         d1:82:77:f7:6c:2a:d0:dc:f5:78:37:04:e7:8b:1f:b9:9f:ff:
         dd:b3:a5:5a:6e:37:92:91:37:00:0a:fa:51:21:99:03:bb:6e:
         21:9a:62:55:03:01:c2:46:68:0f:97:c0:ba:98:88:08:18:69:
         d7:f2:d3:78:86:88:0c:5c:7c:ae:eb:f0:29:e2:cc:38:28:23:
         5c:0a:53:b0:7b:ac:50:6e:57:3c:09:15:db:58:6c:63:21:dc:
         d8:df:b8:a0:81:b4:5e:c6:d5:a0:ad:96:69:5c:59:2f:d5:3a:
         f2:0c:0e:ef:8f:9b:2b:52:81:fd:ec:18:60:ce:18:4f:31:f1:
         0c:d6:4b:74:30:b4:80:b0:74:4d:42:1d:53:c7:85:83:95:26:
         87:b6:62:3d:bc:99:c8:d3:87:cc:d2:61:65:27:6b:75:be:c5:
         53:6a:b0:76:fd:af:18:7e:a2:c4:1f:9b:d4:5e:7b:49:6e:84:
         a5:76:2d:d4:08:ea:67:8f:26:4f:58:c4:82:02:01:06:97:fd:
         44:76:9f:a8:51:ea:f9:e0:b9:c8:93:fd:9c:dc:a3:24:b8:f2:
         f2:44:3c:ce:5f:ff:4e:a7:9a:a5:88:77:93:04:db:3b:19:1a:
         33:08:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org