Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/9vKlboPVWdWikzHf0aZEAZ6pFV0.roa
File:                     9vKlboPVWdWikzHf0aZEAZ6pFV0.roa (raw, json)
Hash identifier:          JwJm+XojjhM7qnMIjmRQzsM5DzItmYQiGGBOeq9yzFA=
Subject key identifier:   F6:F2:A5:6E:83:D5:59:D5:A2:93:31:DF:D1:A6:44:01:9E:A9:15:5D
Certificate issuer:       /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial:       01856D53CC237CC604A15C13913D80C44C1F
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/9vKlboPVWdWikzHf0aZEAZ6pFV0.roa
Signing time:             Sun 01 Jan 2023 12:34:46 +0000
ROA not before:           Sun 01 Jan 2023 12:34:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49593
IP address blocks:        193.218.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:53:cc:23:7c:c6:04:a1:5c:13:91:3d:80:c4:4c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3646213198899edfa8b42add473ada218748e104
        Validity
            Not Before: Jan  1 12:34:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f6f2a56e83d559d5a29331dfd1a644019ea9155d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:8c:14:f2:99:a7:cf:94:5e:14:c5:a6:ca:
                    6a:26:75:90:a7:da:5b:c4:3e:4e:98:02:ed:89:8e:
                    9e:0b:cf:73:f4:d8:f0:44:8b:ed:c3:2d:c3:97:ce:
                    09:81:cb:cd:68:1d:34:d9:6d:61:68:ae:ae:ae:42:
                    f7:35:a6:c3:67:3b:67:d7:ff:2d:d0:43:57:e2:8c:
                    bf:09:10:65:34:8a:2f:5f:1e:39:d7:98:97:98:7d:
                    8a:a8:65:a3:4e:88:04:59:ec:5b:ae:4c:35:a1:b8:
                    be:8a:f4:93:74:88:81:47:6b:48:a9:a4:3d:1f:bc:
                    b0:f0:25:b5:dd:b6:ca:c6:cb:f2:0f:79:c3:82:76:
                    b7:b6:b2:2c:0c:a6:b7:28:23:5b:a9:4e:5d:06:04:
                    9f:5a:9e:0c:0c:ca:9c:0a:d9:4b:17:7f:0c:cc:9b:
                    22:0f:c2:c3:94:90:c8:4c:75:47:c5:98:c4:41:12:
                    2f:e7:c1:b3:4b:e0:56:c2:0d:44:29:53:3f:6b:ba:
                    19:9b:1d:76:1f:b3:b6:57:d5:23:03:f9:7c:da:be:
                    c6:ce:21:1a:ca:d7:71:b0:e0:58:2b:27:4f:58:5f:
                    01:0b:df:48:54:4e:62:b4:04:13:5b:54:f9:f9:b5:
                    75:09:ad:64:8c:3a:4d:a3:72:62:6c:5e:c8:87:22:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:A5:6E:83:D5:59:D5:A2:93:31:DF:D1:A6:44:01:9E:A9:15:5D
            X509v3 Authority Key Identifier:
                keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/9vKlboPVWdWikzHf0aZEAZ6pFV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.218.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:30:cf:25:03:f5:fc:3a:3f:65:ec:4d:c7:5d:88:c5:1e:3d:
         c3:60:5a:32:ad:9e:60:64:9a:bf:bb:69:73:ab:22:1b:29:b3:
         ce:7e:97:e6:4d:1c:00:36:32:fa:05:21:ba:40:a9:05:4f:e9:
         18:57:27:f7:60:6f:50:35:38:51:98:5a:45:bc:6c:a3:b4:3d:
         4b:51:55:57:11:05:93:af:ae:5d:74:84:a1:82:5f:66:bc:a3:
         72:77:b6:a5:81:fb:9b:19:81:be:38:ba:87:aa:5b:a9:17:a7:
         92:86:51:14:4e:00:8e:cd:a1:80:df:9d:df:78:10:d1:62:26:
         06:d3:52:e2:01:08:fb:11:2e:8f:10:a3:65:bd:e0:ba:98:36:
         50:39:00:8d:bc:42:da:48:64:1d:35:12:c1:4c:91:a7:e0:1c:
         e4:66:26:c0:5d:07:7d:3b:aa:7b:8c:bb:b9:3c:27:cf:c1:e4:
         14:0e:45:52:62:83:ac:dc:5e:99:d6:3f:12:22:a8:14:7c:f0:
         eb:32:70:3a:2a:9f:c8:ae:b9:95:dc:5f:b8:14:17:fc:0e:95:
         ba:7b:48:45:60:53:f8:6f:ca:7d:37:03:41:9b:ef:80:02:85:
         de:cd:1b:4b:64:29:dc:18:78:7e:ac:cd:38:78:47:19:0c:18:
         6e:0e:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:32 2024 by rpki-client on console-ams.rpki-client.org