Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa
File:                     X77Jvu5PCZZM6bPzm8SKilCV8_k.roa (raw, json)
Hash identifier:          OOTj5JJwFKpiA7vBi2Iuqf7amRowcOAU3vLq3gEP+Fc=
Subject key identifier:   5F:BE:C9:BE:EE:4F:09:96:4C:E9:B3:F3:9B:C4:8A:8A:50:95:F3:F9
Certificate issuer:       /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial:       018CCA2B29201E3CC4C0707769833A656045
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa
Signing time:             Tue 02 Jan 2024 12:34:35 +0000
ROA not before:           Tue 02 Jan 2024 12:34:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        193.218.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 09:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:29:20:1e:3c:c4:c0:70:77:69:83:3a:65:60:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
        Validity
            Not Before: Jan  2 12:34:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5fbec9beee4f09964ce9b3f39bc48a8a5095f3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:73:f4:9f:2c:48:51:c7:59:d3:c0:86:09:88:
                    3a:e9:5f:8f:09:2f:50:23:5e:b5:f7:d5:ef:e6:30:
                    c7:22:6a:87:f2:87:34:6b:07:10:b9:73:e0:e3:34:
                    8b:71:4b:cb:0a:6d:82:61:b9:f6:64:4b:11:9b:69:
                    0c:41:ec:e7:63:04:6b:a5:5a:9f:c6:d0:a9:27:2c:
                    f8:89:d3:41:ef:01:55:e6:13:43:75:69:b2:b2:7e:
                    f6:b6:8b:2e:a7:d0:f0:91:6c:a3:f9:e5:5b:7f:15:
                    dd:65:08:e9:0f:b5:a3:93:6e:08:3e:71:f5:23:21:
                    2b:4e:c4:93:88:d8:70:4a:44:25:f5:6d:c5:72:51:
                    48:50:12:63:5d:d7:1b:83:10:12:74:12:9d:10:46:
                    ea:2d:e1:8a:23:aa:d5:e9:20:64:ab:8d:aa:e3:f5:
                    c8:ce:30:4c:1c:f5:40:f3:40:55:45:a0:4b:76:91:
                    ca:8a:6e:48:7d:a6:c1:48:bc:ce:ac:da:a2:e6:0a:
                    7c:4b:13:f8:a5:ed:d4:63:8a:37:4a:77:0f:12:10:
                    66:03:3c:e3:0f:94:e3:aa:83:8d:5c:3e:d0:e0:db:
                    0e:bb:d1:e3:b8:e7:05:ba:4f:8b:d9:bb:98:38:17:
                    dd:db:c4:e0:34:0f:ee:77:f3:df:ff:0e:07:71:23:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BE:C9:BE:EE:4F:09:96:4C:E9:B3:F3:9B:C4:8A:8A:50:95:F3:F9
            X509v3 Authority Key Identifier:
                keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/X77Jvu5PCZZM6bPzm8SKilCV8_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:20:df:c8:4a:bf:57:2b:32:6c:dc:8a:ac:79:6b:81:c6:
         b1:e2:37:56:63:1c:6e:62:ac:af:2a:c2:00:42:a3:a1:bc:7b:
         d2:45:89:84:87:ff:9d:90:6e:9d:38:c2:1c:ee:c4:74:6f:b5:
         d0:95:9b:c1:bf:55:fb:bf:aa:8c:f1:c8:d8:70:94:fd:61:62:
         82:0f:7e:b0:46:8e:1c:95:71:ab:7d:b6:9f:8a:33:97:03:8a:
         21:ed:31:57:a0:49:df:30:7f:3e:5a:b8:b2:0b:6d:cd:45:df:
         f5:c9:35:cd:c3:48:ef:3f:a0:80:fd:6c:15:70:6d:85:c3:59:
         e1:46:c6:f0:cb:4a:ff:4d:2a:a6:8a:b2:9e:45:83:3d:19:09:
         af:29:0d:bc:6b:52:05:5e:58:2d:42:82:f4:2b:e7:67:c7:b4:
         7f:c3:ec:44:e0:66:55:a5:48:55:1c:04:20:ad:b0:5e:6f:f6:
         fd:64:ff:94:74:ab:53:43:b0:23:8d:4d:bf:62:d1:f8:da:2e:
         ad:55:3d:a7:10:37:18:23:c1:50:79:e5:63:d5:3a:ec:3b:a9:
         60:4b:98:bf:d5:07:d7:c1:35:71:f4:56:95:53:1d:0f:18:99:
         d2:bc:e2:9e:a2:4a:cf:40:b5:83:cf:c3:22:17:f5:9b:31:19:
         ba:ef:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org