Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/1-_E9-thI7uytrBZjBcWpryjV0jg.roa
File:                     1-_E9-thI7uytrBZjBcWpryjV0jg.roa (raw, json)
Hash identifier:          cOhfITZR82aSOXV2VDZHnL6iSTRrtQmgF8g0hMjtq0Q=
Subject key identifier:   FB:F1:3D:FA:D8:48:EE:EC:AD:AC:16:63:05:C5:A9:AF:28:D5:D2:38
Certificate issuer:       /CN=8b92c55e8b35950775df763e74930d5229c9fa00
Certificate serial:       018BD32370E314CEF972BD2D6AFCAC433B62
Authority key identifier: 8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/1-_E9-thI7uytrBZjBcWpryjV0jg.roa
Signing time:             Wed 15 Nov 2023 13:19:57 +0000
ROA not before:           Wed 15 Nov 2023 13:19:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30801
IP address blocks:        193.93.112.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 13:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d3:23:70:e3:14:ce:f9:72:bd:2d:6a:fc:ac:43:3b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b92c55e8b35950775df763e74930d5229c9fa00
        Validity
            Not Before: Nov 15 13:19:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbf13dfad848eeecadac166305c5a9af28d5d238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:01:9a:ab:7b:bf:78:f4:1b:61:d0:6d:4e:
                    c9:0b:2f:7e:24:2f:df:b3:55:d5:5a:c3:ef:96:32:
                    b1:e8:d6:f9:f9:46:c5:ff:1b:f0:7f:66:82:e5:70:
                    68:ed:ba:31:62:48:ef:ac:83:22:98:26:e6:65:c3:
                    37:32:6d:d4:39:5d:c1:88:00:31:5b:86:2b:d1:ac:
                    b0:f2:99:4f:d8:63:75:48:03:d2:32:5c:d4:15:c7:
                    00:55:e0:5a:9b:65:96:e6:f6:fc:f1:fa:0a:1a:e7:
                    ac:89:9b:06:32:a9:3b:16:29:35:9d:0b:e3:4c:30:
                    ec:ef:32:9a:cf:6c:1c:0d:b3:cd:ad:4e:30:19:af:
                    1b:3a:4c:36:53:1b:c1:ae:45:ad:bc:87:9b:2c:92:
                    de:d7:21:30:bc:9a:5d:25:d9:91:1c:d5:2e:a0:aa:
                    54:1b:9d:94:06:58:31:18:ee:51:7a:f5:40:89:85:
                    3c:0d:d6:40:35:5e:69:09:d9:f9:14:7a:e0:7c:eb:
                    38:5b:6f:17:32:89:a5:58:83:18:a6:36:2b:e1:34:
                    a5:3c:c8:58:5c:11:40:49:dd:26:f6:4c:0d:d5:d5:
                    a8:14:ac:05:38:38:79:bb:60:2a:60:cc:90:2a:c8:
                    0b:32:c2:2e:8d:40:69:e3:7b:c6:4f:d6:ac:90:64:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F1:3D:FA:D8:48:EE:EC:AD:AC:16:63:05:C5:A9:AF:28:D5:D2:38
            X509v3 Authority Key Identifier:
                keyid:8B:92:C5:5E:8B:35:95:07:75:DF:76:3E:74:93:0D:52:29:C9:FA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5LFXos1lQd133Y-dJMNUinJ-gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/1-_E9-thI7uytrBZjBcWpryjV0jg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/30f7a4-36c8-499d-8d43-bebbe4aa7cab/1/i5LFXos1lQd133Y-dJMNUinJ-gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:04:0c:87:cd:1f:95:ae:7a:87:d9:ee:19:7f:4f:fa:83:29:
         ec:9c:a3:25:38:f6:4f:46:f2:e3:d4:6c:4f:e3:da:1f:3b:99:
         34:8e:f9:49:1e:ab:d7:29:88:e5:d0:d9:a8:93:a2:99:54:b9:
         8f:99:ca:88:eb:43:75:ed:96:c5:c9:e6:59:ea:ac:7a:1d:94:
         b7:f9:a8:32:6f:23:d6:29:45:17:a3:29:f4:7c:ff:78:da:c1:
         c0:8b:5b:37:37:1c:7c:07:44:7c:34:8f:96:e2:9e:42:73:de:
         f3:ce:11:8a:7e:ba:26:3d:8a:e0:42:1f:d9:e7:2d:bb:8c:75:
         11:64:3e:61:04:10:93:32:83:5b:d0:c7:cf:6d:86:7c:58:9e:
         d7:d7:e4:e5:1b:73:46:88:de:aa:cb:91:aa:d0:f0:23:2c:91:
         38:d9:49:c6:24:3d:6e:fc:5b:fe:0a:1d:1b:99:95:82:6c:b9:
         81:1c:62:40:fc:d5:d5:37:ca:b8:44:5e:ff:99:6d:3e:e7:07:
         72:42:9a:76:b6:e7:d8:e8:eb:ac:a1:b6:4f:32:e8:89:fc:27:
         f4:65:05:ba:eb:8e:f4:05:58:5a:fe:42:1a:b3:c2:99:68:8c:
         c0:3f:7e:3e:9a:72:69:bc:76:1b:f5:a2:ac:41:10:fb:af:48:
         47:65:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-fra.rpki-client.org