Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3d0sOT1-lkajav5JJr2-gb1Kar4.roa
File:                     3d0sOT1-lkajav5JJr2-gb1Kar4.roa (raw, json)
Hash identifier:          gQeWGmy5V772i7Ea9n/Au38eV4EM97HqWExRO8f7HzA=
Subject key identifier:   DD:DD:2C:39:3D:7E:96:46:A3:6A:FE:49:26:BD:BE:81:BD:4A:6A:BE
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018B46B2D38C1025577F1203BE25338D37AA
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3d0sOT1-lkajav5JJr2-gb1Kar4.roa
Signing time:             Thu 19 Oct 2023 06:50:06 +0000
ROA not before:           Thu 19 Oct 2023 06:50:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198468
IP address blocks:        93.185.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:46:b2:d3:8c:10:25:57:7f:12:03:be:25:33:8d:37:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Oct 19 06:50:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dddd2c393d7e9646a36afe4926bdbe81bd4a6abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f5:e2:f6:48:20:44:3f:fc:02:12:5b:d6:9b:
                    f5:a6:14:6c:6e:17:ad:d2:53:e4:1a:7d:8b:b4:68:
                    85:69:61:af:90:0d:d4:c2:9c:fb:62:73:11:d2:d4:
                    8d:8a:fd:1b:44:68:8c:a7:b6:26:5e:37:4b:a1:bb:
                    2f:c8:56:2f:ac:3e:9e:96:de:4c:ab:45:43:82:b0:
                    8f:8a:6f:20:c7:bc:88:97:1d:5b:b5:79:f5:48:3c:
                    1c:54:83:2a:6f:e8:b4:a5:e1:a9:5b:c8:60:07:94:
                    e1:10:21:83:d0:59:8a:c3:fe:f3:08:48:0e:54:9c:
                    18:ee:f3:2b:5d:bf:a6:3f:2c:88:48:3e:01:b8:72:
                    5a:9f:1d:53:8e:19:eb:4a:ba:f4:ac:0a:55:bc:de:
                    16:87:8e:cb:e4:c9:93:d8:32:5e:5e:68:19:4f:e5:
                    34:a1:73:69:82:b1:fb:2d:ff:23:76:ae:0a:f3:a3:
                    f9:ff:74:74:d9:dd:7d:aa:0f:d8:27:00:d0:a5:4e:
                    19:00:eb:ae:98:76:b4:12:91:00:5b:c5:12:ac:b5:
                    a0:68:e8:1b:0a:12:e0:7d:ea:59:8b:60:7c:9b:29:
                    cc:8d:5d:0d:8b:c3:81:95:9b:09:be:4b:02:76:c1:
                    f7:d1:7b:ec:52:fd:5b:3f:3b:63:d0:16:b2:c7:4e:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DD:2C:39:3D:7E:96:46:A3:6A:FE:49:26:BD:BE:81:BD:4A:6A:BE
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/3d0sOT1-lkajav5JJr2-gb1Kar4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.185.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:92:ad:fc:a4:6a:a6:7b:04:39:14:49:f5:9f:13:3d:13:23:
         16:c3:9d:db:58:40:7d:08:be:51:34:00:d4:95:7f:bc:59:22:
         1f:63:ca:c8:39:72:e3:bd:3b:42:d6:3a:55:cf:6d:17:9d:71:
         e1:4f:9e:68:14:4d:d4:65:aa:77:4d:5a:a2:f6:f9:de:45:a5:
         85:34:b5:a2:1f:6b:fb:1f:10:28:78:27:eb:08:c1:20:ce:f7:
         7e:4c:5e:4d:e4:07:9c:7d:a3:a7:67:77:2b:a8:bc:28:db:e4:
         22:e3:1c:22:be:a2:df:dd:f2:9d:b9:19:ea:7a:62:dc:9d:21:
         21:2e:70:57:07:8e:a5:f2:70:28:2c:00:c8:09:93:eb:af:3e:
         29:82:2b:a5:c2:fb:f8:f7:4c:25:76:08:14:d0:cf:34:a5:41:
         74:c2:61:3d:cc:90:aa:ff:e7:79:af:92:5d:7a:74:22:be:45:
         a6:d7:49:a9:2f:0c:a9:ad:5f:df:3e:97:ed:8c:15:4a:7f:fb:
         7f:67:75:85:93:78:16:46:d3:a1:40:d4:af:8d:bc:49:78:13:
         34:90:d0:48:eb:c7:e7:c2:67:de:d0:1f:e3:49:2b:f7:a6:78:
         5d:8d:7b:3d:6a:09:94:c5:42:9f:76:97:26:34:b0:70:6e:4b:
         e1:70:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org