Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/O47mMx5Vbcv5uGnK8wKaXk0yeXw.roa
File:                     O47mMx5Vbcv5uGnK8wKaXk0yeXw.roa (raw, json)
Hash identifier:          mZbpQ+EncJnyKpKmxnUZU3MZE3yZbU60eYp1PO54yTA=
Subject key identifier:   3B:8E:E6:33:1E:55:6D:CB:F9:B8:69:CA:F3:02:9A:5E:4D:32:79:7C
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       018EA7F3EF07A774A29823DBEB9F9EC5ECBF
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/O47mMx5Vbcv5uGnK8wKaXk0yeXw.roa
Signing time:             Thu 04 Apr 2024 07:12:45 +0000
ROA not before:           Thu 04 Apr 2024 07:12:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44477
IP address blocks:        93.183.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 16:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a7:f3:ef:07:a7:74:a2:98:23:db:eb:9f:9e:c5:ec:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Apr  4 07:12:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3b8ee6331e556dcbf9b869caf3029a5e4d32797c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:32:89:62:31:e1:45:59:f9:c1:f5:42:96:
                    aa:cd:b0:09:6d:28:c6:a7:ee:45:69:29:91:fa:96:
                    09:67:f9:7f:77:92:e2:c7:5d:e0:1e:ae:9d:71:05:
                    5c:1e:51:26:4b:b0:6c:3b:56:eb:13:e2:4e:3b:7f:
                    a3:19:43:94:c0:c7:83:78:8a:8f:51:2c:2d:bc:a8:
                    87:9b:73:ca:99:d4:09:dc:83:ac:f2:ce:04:58:3a:
                    06:2a:f8:b1:4d:0c:c3:46:84:e9:7f:5c:c1:7c:f9:
                    6f:02:d8:7f:30:42:e4:98:f7:b3:88:3d:c4:1a:fb:
                    a1:3b:13:e0:0b:75:1a:3d:13:d7:25:cb:03:6f:b7:
                    ef:b3:05:e4:d9:71:b4:93:43:8c:5b:14:13:ed:fe:
                    a5:20:27:72:f3:f4:21:1c:7d:51:af:d3:1a:07:f6:
                    35:ad:63:eb:c5:ec:9c:98:2e:c0:b9:05:4c:c0:8b:
                    6e:7a:df:0c:bd:2f:59:ee:a5:6a:23:31:ce:e8:de:
                    89:14:76:85:39:71:71:de:06:cf:ea:c9:87:fa:91:
                    59:cc:67:68:69:24:7d:9e:09:ed:f1:8b:5a:8b:be:
                    e0:ef:8c:80:54:79:d8:28:f1:ff:c8:9b:3a:01:e9:
                    66:87:1e:56:48:3f:53:a0:cb:79:b4:28:ce:e8:64:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:E6:33:1E:55:6D:CB:F9:B8:69:CA:F3:02:9A:5E:4D:32:79:7C
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/O47mMx5Vbcv5uGnK8wKaXk0yeXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.183.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:ef:8e:f2:92:7f:21:e7:cb:c4:7f:7d:5d:ec:81:eb:37:
         f6:39:24:c3:07:13:81:03:79:fb:e9:88:d5:de:7c:ef:06:09:
         02:ae:79:63:17:89:98:0a:56:08:9a:8c:78:6f:59:24:5b:f3:
         a2:8a:aa:ee:8d:f8:98:7a:ae:0d:52:dd:c0:1d:73:4f:87:9a:
         82:d1:38:b9:96:40:36:ab:8f:0a:1f:32:57:29:60:0c:fc:48:
         e8:03:47:6f:c4:e8:20:cb:dc:4d:42:93:58:2d:f5:ad:94:eb:
         c3:69:aa:37:0b:d5:95:05:1d:a8:f3:de:e2:fe:c1:11:a6:95:
         8c:20:3a:2a:46:d1:98:04:d9:ea:88:d7:c9:f1:58:89:cc:a8:
         53:d4:86:36:e8:34:3d:b0:fd:2b:83:6f:7a:0c:90:93:49:56:
         32:97:eb:54:1d:92:ad:84:b2:60:bd:76:9b:c6:e8:c7:af:12:
         5b:09:51:c3:e5:4d:87:c4:89:0a:94:90:ab:94:15:e3:63:1a:
         bd:6e:4f:b2:59:9b:17:b2:3d:75:3e:6b:b4:ef:39:52:b5:7c:
         9c:24:9a:6e:c2:c5:14:80:8c:79:3f:ce:48:16:47:8e:8f:89:
         f6:22:8b:3d:92:a1:d1:33:5e:a2:00:c9:c6:d8:32:a3:93:8f:
         75:45:88:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-fra.rpki-client.org