Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WZdWB2cytK5rpiHKLBzSAQBVCR4.roa
File:                     WZdWB2cytK5rpiHKLBzSAQBVCR4.roa (raw, json)
Hash identifier:          li90Hr20PDe47Zu5DXeg/HSpTeQIaGUuhN4o0mreWk4=
Subject key identifier:   59:97:56:07:67:32:B4:AE:6B:A6:21:CA:2C:1C:D2:01:00:55:09:1E
Certificate issuer:       /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial:       0186359257337271651246EAC4B72012AB4F
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WZdWB2cytK5rpiHKLBzSAQBVCR4.roa
Signing time:             Thu 09 Feb 2023 09:47:08 +0000
ROA not before:           Thu 09 Feb 2023 09:47:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199964
IP address blocks:        185.93.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 30 Apr 2023 17:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:35:92:57:33:72:71:65:12:46:ea:c4:b7:20:12:ab:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
        Validity
            Not Before: Feb  9 09:47:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=599756076732b4ae6ba621ca2c1cd2010055091e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:4c:00:02:48:0e:77:35:8e:fd:bc:cd:82:
                    02:a2:a1:61:b0:d2:74:91:17:87:e9:83:57:19:98:
                    35:5f:e0:95:f5:72:63:46:41:e6:d2:a0:7e:fd:db:
                    39:ec:03:f5:3d:9d:f4:a5:fa:26:4c:89:a2:fa:71:
                    33:79:84:ed:31:30:eb:3d:51:43:25:e4:40:c1:e5:
                    d9:e6:4a:21:52:15:57:d6:a5:56:91:f8:a9:34:20:
                    e0:42:4a:c8:cd:59:c3:92:05:a7:90:8f:58:18:7a:
                    5e:c4:7c:7f:89:58:d5:b4:97:02:6c:77:07:92:50:
                    5f:4b:2d:ce:71:6d:bf:74:7c:7f:bb:8e:c4:00:e2:
                    af:74:2d:d9:f5:5b:16:13:d8:be:c3:17:37:88:b4:
                    3a:85:b4:22:01:e2:1b:f7:d2:e0:f7:60:80:b6:c3:
                    78:74:70:9b:d3:81:7f:26:74:ec:6c:69:84:8e:d5:
                    30:7d:41:9f:00:0f:71:5a:1e:c7:97:59:fc:fc:bf:
                    ab:d7:a3:2e:f3:db:75:41:27:ba:d6:08:37:e5:d5:
                    f2:43:6b:a4:43:06:7d:61:7b:ba:4a:6b:5f:bd:b8:
                    9e:00:86:26:4e:a6:f3:71:54:93:70:02:a4:ee:f1:
                    ad:83:f9:0c:99:c8:b0:02:0f:48:54:d2:c8:64:98:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:56:07:67:32:B4:AE:6B:A6:21:CA:2C:1C:D2:01:00:55:09:1E
            X509v3 Authority Key Identifier:
                keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WZdWB2cytK5rpiHKLBzSAQBVCR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:2e:72:1e:78:27:2f:d0:71:8a:34:51:92:d0:ad:bd:56:
         77:24:2f:aa:81:b8:a6:2a:99:af:aa:dc:6d:4f:a2:db:21:28:
         60:4e:2b:69:c1:3e:be:92:0e:6b:6f:ef:dd:65:2d:20:68:67:
         aa:92:fe:5c:cf:4d:4d:a4:9a:1f:70:2d:20:98:32:29:ea:62:
         99:52:8d:26:f8:59:73:cd:4f:93:d8:07:7e:be:82:2c:9e:30:
         c8:ea:20:9b:6d:53:b8:5f:5e:71:82:ed:e3:c2:66:9f:cc:83:
         41:d3:c4:05:92:5e:c7:47:70:61:0b:b3:5d:41:01:a8:6a:3e:
         76:e6:a3:45:dc:1f:4b:46:22:45:7b:b7:a4:91:a1:4e:1b:6c:
         0f:24:c8:e4:e2:aa:38:2f:f5:f6:90:7f:a6:b2:a5:13:06:8b:
         c2:d2:43:83:4c:4c:b3:da:6f:21:df:56:1e:b1:10:58:b6:af:
         ec:b2:5e:d1:05:9a:ce:ae:3c:ad:aa:12:fd:26:92:1c:4a:22:
         e3:41:ee:48:24:29:7a:d4:e8:95:db:c3:a2:1c:63:e0:55:bb:
         d5:a6:ac:76:89:8f:c2:07:9e:91:b6:65:86:7f:ed:c6:53:86:
         25:fc:d6:26:bb:33:29:5b:dc:55:ad:8a:ec:35:87:7d:f2:0a:
         f0:eb:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org