Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Qy_UDl6wiWham_ycOheoWaX_30U.roa
File:                     Qy_UDl6wiWham_ycOheoWaX_30U.roa (raw, json)
Hash identifier:          Xi79/aGOvoM1d5f8mnKom4c0HmEiCzIrkA62/FXg4lQ=
Subject key identifier:   43:2F:D4:0E:5E:B0:89:68:5A:9B:FC:9C:3A:17:A8:59:A5:FF:DF:45
Certificate issuer:       /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial:       018CC8DF1F09BA7CA1253452895E6C27E733
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Qy_UDl6wiWham_ycOheoWaX_30U.roa
Signing time:             Tue 02 Jan 2024 06:31:54 +0000
ROA not before:           Tue 02 Jan 2024 06:31:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199964
IP address blocks:        185.93.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:1f:09:ba:7c:a1:25:34:52:89:5e:6c:27:e7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
        Validity
            Not Before: Jan  2 06:31:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=432fd40e5eb089685a9bfc9c3a17a859a5ffdf45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:ea:6b:b4:8b:0c:25:ad:96:04:43:a8:8f:
                    c1:07:1e:35:df:cc:c2:63:7b:44:82:48:13:51:a3:
                    a2:b3:0c:3b:8a:31:b1:35:ff:f5:ff:ee:ae:68:12:
                    26:d6:fe:94:65:b8:97:5b:3e:9c:c4:db:a3:c7:0a:
                    e8:42:69:f2:3f:ed:83:c4:6f:83:2b:a6:28:9f:88:
                    3f:49:99:af:6f:bb:99:ea:d9:80:25:bb:a0:fe:a3:
                    8a:e1:6a:b3:33:49:4d:9f:f4:a5:b7:78:f1:20:a0:
                    91:a2:77:d0:29:dc:e0:1e:d2:4d:ba:f2:85:9a:d9:
                    38:75:93:bc:a8:3f:e4:d7:e2:cc:ea:55:0c:ab:9c:
                    d9:b4:a9:6b:7b:a2:77:2c:0b:fe:b4:4e:64:e5:ac:
                    28:ce:32:ab:79:f3:8c:bc:b9:8c:5d:09:90:c9:98:
                    4e:c4:d1:97:df:5e:56:f9:e1:83:92:86:e4:15:48:
                    ff:98:48:09:85:48:3a:f1:fa:16:14:91:c7:d6:08:
                    51:39:1e:ae:2d:27:4c:30:14:97:f2:47:b5:67:a3:
                    74:bd:64:5e:76:60:48:81:cd:b3:70:dd:34:ea:db:
                    1c:00:7c:e5:76:37:9d:35:2e:03:dd:92:8f:a1:df:
                    f7:3c:cb:9b:56:e0:49:c5:9d:21:54:62:49:08:a8:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2F:D4:0E:5E:B0:89:68:5A:9B:FC:9C:3A:17:A8:59:A5:FF:DF:45
            X509v3 Authority Key Identifier:
                keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/Qy_UDl6wiWham_ycOheoWaX_30U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ec:ad:a1:1a:63:14:f0:3c:1c:0b:6c:46:62:dc:5d:ff:3b:
         01:d1:4e:8b:2b:e7:12:69:7f:14:a1:fb:7f:4d:19:1d:20:68:
         d5:17:c6:b5:30:45:56:75:e5:a5:96:b6:ca:76:45:f1:fa:37:
         db:45:36:46:5b:bb:42:85:cc:5c:67:ea:b0:d7:c0:af:09:c6:
         58:8e:07:44:52:e9:97:17:3f:63:26:8d:ea:75:0c:8c:6b:88:
         70:2f:71:e4:25:24:4d:b5:49:d3:93:7a:9e:39:01:f2:bb:20:
         a1:25:a7:26:36:8a:f4:06:9c:8b:f2:17:4c:0f:a6:a2:bc:0c:
         7d:28:1e:73:d6:de:97:07:32:40:e4:a2:87:0e:57:3c:54:72:
         b4:3e:01:fb:4a:d4:9f:74:fe:7e:ff:9c:4d:bf:3c:09:11:eb:
         6e:4a:d6:d6:3c:a4:3a:53:d6:b6:95:26:19:90:27:33:2d:3d:
         79:96:46:42:46:88:46:07:ea:bf:62:92:33:ef:f8:8f:8c:0e:
         b3:6c:f1:be:6d:fe:dd:76:80:23:84:01:dc:a3:bf:0f:76:c5:
         bd:cb:ee:31:19:ee:a9:b2:d5:bf:88:a0:a0:8e:12:ee:5f:7a:
         8c:ea:db:82:ba:e6:6f:2a:08:47:54:5c:79:c4:7c:c0:87:73:
         49:65:88:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3x8JunyhJTRSiV5sJ+czMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjQwMTAyMDYzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzJmZDQwZTVlYjA4OTY4NWE5YmZjOWMzYTE3YTg1OWE1ZmZkZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiTqa7SLDCWtlgRDqI/BBx4138zC
Y3tEgkgTUaOisww7ijGxNf/1/+6uaBIm1v6UZbiXWz6cxNujxwroQmnyP+2DxG+D
K6Yon4g/SZmvb7uZ6tmAJbug/qOK4WqzM0lNn/Slt3jxIKCRonfQKdzgHtJNuvKF
mtk4dZO8qD/k1+LM6lUMq5zZtKlre6J3LAv+tE5k5awozjKrefOMvLmMXQmQyZhO
xNGX315W+eGDkobkFUj/mEgJhUg68foWFJHH1ghROR6uLSdMMBSX8ke1Z6N0vWRe
dmBIgc2zcN006tscAHzldjedNS4D3ZKPod/3PMubVuBJxZ0hVGJJCKjvuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMv1A5esIloWpv8nDoXqFml/99FMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvUXlfVURsNndpV2hhbV95Y09oZW9XYVhfMzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV1HMA0G
CSqGSIb3DQEBCwUAA4IBAQA47K2hGmMU8DwcC2xGYtxd/zsB0U6LK+cSaX8Uoft/
TRkdIGjVF8a1MEVWdeWllrbKdkXx+jfbRTZGW7tChcxcZ+qw18CvCcZYjgdEUumX
Fz9jJo3qdQyMa4hwL3HkJSRNtUnTk3qeOQHyuyChJacmNor0BpyL8hdMD6aivAx9
KB5z1t6XBzJA5KKHDlc8VHK0PgH7StSfdP5+/5xNvzwJEetuStbWPKQ6U9a2lSYZ
kCczLT15lkZCRohGB+q/YpIz7/iPjA6zbPG+bf7ddoAjhAHco78PdsW9y+4xGe6p
stW/iKCgjhLuX3qM6tuCuuZvKghHVFx5xHzAh3NJZYhP
-----END CERTIFICATE-----
Generated at Fri Nov 1 19:38:52 2024 by rpki-client on console-fra.rpki-client.org