Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/jnk_C2_9yzNVyShZCfWd60TXQ7A.roa
File:                     jnk_C2_9yzNVyShZCfWd60TXQ7A.roa (raw, json)
Hash identifier:          jrsfm/aa/IB9jbt4Cmn27mEPeeDltaRZIzK2/FpQe1g=
Subject key identifier:   8E:79:3F:0B:6F:FD:CB:33:55:C9:28:59:09:F5:9D:EB:44:D7:43:B0
Certificate issuer:       /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial:       018B14AA6FE1CFA08FDB0906B030D4AB2A6A
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/jnk_C2_9yzNVyShZCfWd60TXQ7A.roa
Signing time:             Mon 09 Oct 2023 13:39:55 +0000
ROA not before:           Mon 09 Oct 2023 13:39:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        195.93.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:14:aa:6f:e1:cf:a0:8f:db:09:06:b0:30:d4:ab:2a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
        Validity
            Not Before: Oct  9 13:39:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e793f0b6ffdcb3355c9285909f59deb44d743b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:ec:7d:04:67:70:f9:9d:af:80:7e:39:f6:
                    dc:4e:41:5d:35:00:b8:91:1e:e7:d8:32:73:33:0e:
                    f1:a0:c2:4d:ec:f0:db:50:3a:cf:52:5a:24:14:84:
                    9e:74:19:d1:32:db:6f:76:b4:d0:7f:7b:83:8a:8a:
                    ee:97:d3:7c:2a:73:68:66:22:31:96:84:26:73:10:
                    aa:47:6b:13:0f:52:94:02:c6:fe:2b:51:d1:d9:81:
                    e8:cd:ef:1d:80:3c:83:df:1c:e2:a5:ad:b2:bc:8f:
                    85:5c:b3:b0:31:26:9d:2b:34:fc:4f:e3:90:f5:64:
                    00:3b:40:77:96:f7:76:55:50:90:86:b3:9b:f4:7a:
                    98:00:67:4c:d1:69:93:f7:99:60:d3:16:e4:f0:15:
                    69:13:a9:02:7f:b1:22:7c:c6:c8:cf:8a:9f:b7:5e:
                    02:0c:15:61:54:47:a7:04:90:4f:f8:c1:9f:17:4c:
                    3e:1d:bc:cc:1b:90:c6:cc:49:a7:b1:2d:1d:1d:95:
                    57:ae:fe:62:f1:8f:e1:69:58:a8:80:fc:a6:88:ea:
                    48:ad:39:8a:d0:75:69:38:03:6b:ae:0a:71:d3:3c:
                    0d:1c:00:22:95:91:7a:8e:40:94:d6:ba:bc:24:7e:
                    a5:82:92:8e:ad:0c:7d:83:12:e2:57:1a:73:3d:df:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:3F:0B:6F:FD:CB:33:55:C9:28:59:09:F5:9D:EB:44:D7:43:B0
            X509v3 Authority Key Identifier:
                keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/jnk_C2_9yzNVyShZCfWd60TXQ7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:28:ef:29:e3:65:fe:98:02:60:25:bf:83:4c:bf:bd:9b:
         ed:ee:b8:61:bd:cb:be:bf:54:a1:87:ab:42:8c:05:a0:59:6e:
         35:9a:87:98:5c:e1:48:66:e3:dd:d1:e6:d0:73:26:f0:d5:38:
         1d:39:cc:91:c9:68:bb:73:bb:26:ab:6f:48:4b:8c:08:74:34:
         3f:b2:0c:33:72:3e:6b:32:7c:42:21:c1:7b:84:3d:6c:8b:e2:
         20:71:92:74:c2:84:45:43:f9:99:de:c5:e0:af:df:88:46:ad:
         33:1c:97:5d:85:fe:e2:90:01:6b:85:6f:ef:34:8b:09:3b:93:
         77:d5:88:97:9d:e3:05:74:a0:60:86:d0:5f:05:42:82:3a:a0:
         85:2a:3b:98:d8:c3:0c:24:fd:71:1a:04:53:b3:b7:63:0c:ac:
         b1:4d:4c:6b:2c:6e:b4:c0:7e:24:2f:be:d9:cf:40:41:10:2a:
         e4:d9:fa:c3:fa:4b:d4:99:0e:e6:d9:a2:33:30:82:4d:59:e5:
         a7:be:3b:53:19:0e:29:11:ad:79:88:98:69:58:32:dd:46:b7:
         a1:9d:11:47:2e:eb:bd:ec:8c:a9:2f:6b:f8:69:2d:ca:e1:ac:
         49:df:9d:6e:65:34:1e:01:ce:c9:ec:2b:16:4a:dc:61:7b:eb:
         ca:bd:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:50 2024 by rpki-client on console-ams.rpki-client.org