Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7KsFnjuE9EAOfPFHu4k8K13Vrcw.roa
File:                     7KsFnjuE9EAOfPFHu4k8K13Vrcw.roa (raw, json)
Hash identifier:          KtPfqwC7LjJeJ4nt8Y4yXM5kRlcMvnSZ6nsD/rI5x2k=
Subject key identifier:   EC:AB:05:9E:3B:84:F4:40:0E:7C:F1:47:BB:89:3C:2B:5D:D5:AD:CC
Certificate issuer:       /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial:       018712F4D20F412E9A67D0D737395FC3539E
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7KsFnjuE9EAOfPFHu4k8K13Vrcw.roa
Signing time:             Fri 24 Mar 2023 09:30:46 +0000
ROA not before:           Fri 24 Mar 2023 09:30:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212249
IP address blocks:        193.164.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 07 Aug 2023 14:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:12:f4:d2:0f:41:2e:9a:67:d0:d7:37:39:5f:c3:53:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
        Validity
            Not Before: Mar 24 09:30:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecab059e3b84f4400e7cf147bb893c2b5dd5adcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:2d:6f:42:6d:aa:88:7b:f5:73:2c:4a:3c:
                    14:8d:ab:99:30:ea:36:da:ca:33:69:a2:88:a6:c5:
                    3e:4d:02:5b:04:56:5d:e0:36:7c:cf:13:96:39:e6:
                    f6:ba:0d:7b:4c:28:f3:6d:9f:92:78:12:9b:6f:13:
                    5e:9f:5a:30:b9:af:0f:43:1b:1e:4c:21:71:46:e8:
                    a0:aa:7c:ef:ba:a2:b1:8f:63:99:42:a9:e7:70:ad:
                    c4:7d:fa:49:f5:f6:f8:72:97:23:7f:bc:e8:1d:96:
                    c0:a6:00:0b:b9:75:18:79:ee:8d:cc:59:97:4c:60:
                    bb:cf:ef:a7:ce:f0:d8:a9:7d:08:58:8b:39:2a:6c:
                    d8:97:bd:e3:33:01:7d:ea:0a:5f:0e:71:b5:b7:b7:
                    49:80:9d:cc:ac:43:9e:0e:e9:5e:7c:7e:32:b1:64:
                    ff:c7:0e:4c:06:ec:6c:92:89:36:1f:e7:21:02:12:
                    a0:60:ee:03:9b:8a:f7:24:5a:76:13:e9:cf:69:88:
                    30:ff:bd:61:e3:e7:2a:a1:29:10:89:c3:07:5e:c9:
                    5e:21:d8:ea:35:9d:2a:e3:a3:c3:b8:44:45:56:33:
                    ae:10:ad:4c:6a:07:50:08:d9:84:33:16:6b:75:dc:
                    a4:e8:a7:6a:8a:b9:f8:9f:b6:2d:65:30:a7:63:a5:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:05:9E:3B:84:F4:40:0E:7C:F1:47:BB:89:3C:2B:5D:D5:AD:CC
            X509v3 Authority Key Identifier:
                keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/7KsFnjuE9EAOfPFHu4k8K13Vrcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:77:cd:6a:6e:f4:f5:31:60:b8:2c:cf:d8:d5:6d:92:87:f5:
         3f:b4:b6:72:e6:2d:b6:bf:17:7f:63:88:d8:2b:4f:3b:cf:2c:
         38:72:1a:77:a7:8b:c5:1b:20:06:84:7b:4a:cc:3d:ef:92:29:
         4f:ad:43:96:35:b3:0c:b6:af:d6:f0:6e:32:8c:39:38:07:b5:
         1b:1a:4d:60:f1:d8:af:30:8f:79:5d:53:0a:cc:72:52:0a:33:
         83:fc:d6:bc:08:97:62:46:f3:7e:5f:92:fa:6b:9b:1b:a1:26:
         37:f7:6d:a6:2e:31:fc:f7:42:f6:18:e1:ca:ea:dc:35:d0:74:
         5c:d5:d6:5f:0c:2e:0c:23:0d:ed:de:16:6b:22:e6:7c:9c:41:
         a7:3e:c0:a5:43:68:84:56:e4:52:db:84:c8:a4:39:08:19:66:
         15:ff:31:68:73:75:48:a9:3b:6f:8a:d3:be:d6:a1:a4:35:ba:
         26:f7:37:0d:54:3c:8c:e9:be:73:29:c3:f6:1d:f6:a8:8b:4a:
         e1:31:5f:41:c0:92:c7:a2:6c:62:50:b1:63:fa:7b:02:3c:fa:
         ab:84:ef:55:b8:d7:48:2e:62:c9:cd:5d:a2:4e:01:51:ae:84:
         a1:42:f2:0b:90:e8:1a:91:25:c8:43:8c:b3:51:a3:c0:2c:3b:
         31:fa:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org