Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/FuZSBage465JPZhAcOz49hQInXY.roa
File:                     FuZSBage465JPZhAcOz49hQInXY.roa (raw, json)
Hash identifier:          gNghMnc2Xb78WDfjjzoeF9LMLZruG57hrsvt3vqPa9E=
Subject key identifier:   16:E6:52:05:A8:1E:E3:AE:49:3D:98:40:70:EC:F8:F6:14:08:9D:76
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       019252B9EB49E142744036A5EA8FF9ACF2E4
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/FuZSBage465JPZhAcOz49hQInXY.roa
Signing time:             Thu 03 Oct 2024 14:12:48 +0000
ROA not before:           Thu 03 Oct 2024 14:12:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206854
IP address blocks:        93.126.16.0/24 maxlen: 24
                          93.126.30.0/24 maxlen: 24
                          93.126.52.0/24 maxlen: 24
                          93.126.55.0/24 maxlen: 24
                          193.178.201.0/24 maxlen: 24
                          193.178.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 09:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:52:b9:eb:49:e1:42:74:40:36:a5:ea:8f:f9:ac:f2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Oct  3 14:12:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=16e65205a81ee3ae493d984070ecf8f614089d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:d1:a3:fd:19:b8:f3:70:53:0f:fc:06:10:
                    45:09:0c:2d:de:71:31:74:0e:3e:84:18:c2:ff:c0:
                    26:1d:35:98:5d:c8:75:cc:36:85:28:00:c1:36:ea:
                    1b:88:3f:46:d7:f1:0c:00:5a:d0:99:18:51:ee:77:
                    c6:31:fc:a8:98:fb:88:20:a2:db:66:eb:c5:11:ef:
                    59:d7:65:d5:93:67:b3:52:9c:65:3b:5a:73:d0:4e:
                    bd:69:70:84:4f:de:de:f8:39:5c:99:aa:f2:8b:81:
                    f8:cc:b2:63:93:d3:c3:c3:6d:b4:c7:78:83:c0:a2:
                    65:c8:87:7f:8b:04:db:b3:0e:fa:a2:c0:43:31:b0:
                    fb:b9:ef:72:32:30:ee:38:a9:5d:8c:53:1b:21:e3:
                    a2:b3:65:d2:06:e1:78:34:5f:db:5e:42:6d:fc:73:
                    e5:63:cf:c6:6f:e1:c0:51:b2:a5:5f:98:2a:47:d9:
                    ac:23:b3:11:74:9b:94:87:ef:b9:00:bd:3a:8f:da:
                    7a:dd:04:39:45:e7:ba:d8:5b:50:24:15:d6:cc:1b:
                    0f:cc:2b:60:08:61:24:e8:d7:78:7f:37:cb:60:b0:
                    90:c1:b3:24:93:ea:c4:3b:dd:8c:4e:b8:00:3d:c9:
                    d1:84:fd:2c:8c:21:de:ab:d4:ca:9a:be:b9:b9:33:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:52:05:A8:1E:E3:AE:49:3D:98:40:70:EC:F8:F6:14:08:9D:76
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/FuZSBage465JPZhAcOz49hQInXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.16.0/24
                  93.126.30.0/24
                  93.126.52.0/24
                  93.126.55.0/24
                  193.178.201.0-193.178.202.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:0c:c1:55:96:f3:88:59:85:23:c7:f8:00:7d:42:53:ab:ff:
         dc:6e:1f:a3:55:41:eb:a7:36:4e:25:91:28:ac:72:50:14:5f:
         8b:9c:8e:7d:76:28:c9:79:39:cf:27:c4:cb:88:4d:2d:54:8d:
         26:6c:11:5e:8d:d5:5d:73:6f:b1:e7:b8:1e:89:fb:23:90:b2:
         af:4e:45:8d:67:5c:55:92:89:64:58:da:bd:78:2a:4b:97:67:
         30:b7:1c:74:37:5c:5d:96:d7:77:0d:76:96:21:d1:af:41:1d:
         bb:52:a1:56:46:dc:33:37:ef:ea:ce:b2:ad:b1:39:1a:a1:21:
         7f:94:45:10:aa:8b:f9:61:49:e0:c7:ee:29:35:f6:5b:25:fe:
         cf:10:80:e7:25:f9:e1:4a:c7:af:a7:69:fa:b9:97:41:4d:82:
         5f:00:48:65:e6:ed:f1:ed:78:73:1a:d9:49:fe:9a:5a:d8:8d:
         56:df:f8:87:5c:25:33:9b:34:88:6c:38:d1:9c:ef:2a:70:56:
         a6:3c:67:79:11:b3:10:45:c9:ae:be:72:9e:57:af:7c:d8:2b:
         ee:d1:f6:1a:49:49:78:b8:7d:49:82:48:db:e3:43:45:e7:36:
         04:44:b7:8a:5b:5f:6e:12:48:e9:64:a7:c9:5d:52:15:bd:ad:
         3b:28:42:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 10:58:36 2024 by rpki-client on console-ams.rpki-client.org