Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/F_TRS4rDSvkiwTYAiQ9nQiS8248.roa
File:                     F_TRS4rDSvkiwTYAiQ9nQiS8248.roa (raw, json)
Hash identifier:          5yS2OCDvKyu0o1pvmTWkjGeNMOAfgJoVfZPsfdLnPZI=
Subject key identifier:   17:F4:D1:4B:8A:C3:4A:F9:22:C1:36:00:89:0F:67:42:24:BC:DB:8F
Certificate issuer:       /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial:       01867DE703C4310D130042F6DC747F5C304C
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/F_TRS4rDSvkiwTYAiQ9nQiS8248.roa
Signing time:             Thu 23 Feb 2023 10:52:17 +0000
ROA not before:           Thu 23 Feb 2023 10:52:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47134
IP address blocks:        93.91.64.0/20 maxlen: 20
                          93.91.65.0/24 maxlen: 24
                          93.91.73.0/24 maxlen: 24
                          93.91.76.0/24 maxlen: 24
                          93.91.75.0/24 maxlen: 24
                          93.91.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 Feb 2023 10:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7d:e7:03:c4:31:0d:13:00:42:f6:dc:74:7f:5c:30:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
        Validity
            Not Before: Feb 23 10:52:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17f4d14b8ac34af922c13600890f674224bcdb8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:b2:5c:cf:ce:a8:eb:3f:1f:7f:aa:a9:60:
                    f2:f4:9e:39:4d:b9:9b:71:e6:fc:09:63:fb:43:5f:
                    be:ce:3c:f1:c3:83:32:fc:10:6e:db:08:ff:04:bf:
                    0f:45:3a:c6:3a:76:7f:6f:e4:20:99:33:0e:cb:b7:
                    c0:82:06:b7:a7:d9:2d:32:9e:c5:bf:64:fb:c7:0e:
                    cf:6e:07:df:32:db:80:d4:6c:9b:08:0b:7a:ff:8f:
                    70:b5:90:2b:07:4d:47:09:5c:ef:09:26:bb:43:93:
                    20:1e:17:d1:50:a6:d4:69:77:1e:fa:62:aa:a6:2c:
                    66:0e:c1:c5:09:9b:61:92:d6:09:29:03:b3:b6:b0:
                    1f:98:5f:e4:bd:5f:76:51:48:62:fb:4b:23:58:fb:
                    13:06:f3:82:ca:34:2f:46:9e:56:df:2c:8b:77:c7:
                    9a:df:5a:fb:e6:4c:a3:6b:39:27:4c:c0:08:aa:e6:
                    31:04:99:bf:1f:b0:85:4d:7e:9d:f6:b3:4e:48:c9:
                    8e:cc:60:b0:4e:f3:c3:a3:44:05:38:34:c0:2f:59:
                    da:1e:30:67:5b:9e:5e:8b:8f:cf:7c:b7:55:93:52:
                    83:88:ff:4f:9f:3c:57:57:b4:a8:5a:e5:75:20:87:
                    e2:d3:da:91:36:00:61:08:6d:e0:02:3a:ad:c0:23:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F4:D1:4B:8A:C3:4A:F9:22:C1:36:00:89:0F:67:42:24:BC:DB:8F
            X509v3 Authority Key Identifier:
                keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/F_TRS4rDSvkiwTYAiQ9nQiS8248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.91.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:59:0b:1c:d6:81:3b:dc:d1:af:63:ed:42:24:a6:5e:22:
         9b:e6:69:46:ac:69:49:69:54:56:4f:11:85:b9:80:fb:c9:ab:
         5d:a9:19:8b:d3:2e:aa:25:ff:f1:8b:13:9a:d7:10:0c:37:a9:
         b6:c7:c9:fa:7e:4c:74:d9:55:85:da:38:cd:db:ff:56:ed:b0:
         2e:b8:80:c6:e3:cf:c8:18:be:70:64:34:b6:9d:46:cd:d5:07:
         bf:07:e0:27:d9:e8:80:94:aa:97:62:08:82:b1:e9:87:c1:1d:
         a7:f5:92:97:e5:82:9f:77:18:84:19:83:6f:38:81:1c:d3:c9:
         55:ac:dd:31:e4:fd:9b:6d:8e:95:c2:06:dc:be:9f:87:dd:e8:
         a9:4f:d6:5c:ea:0f:81:4e:5d:ed:ea:f9:51:57:e0:db:61:62:
         23:86:1b:e2:b6:c2:2e:37:c3:e1:a5:b5:fb:03:9d:3d:4f:fc:
         bd:be:2c:4d:73:05:e1:61:e7:f1:0a:ae:e6:9d:09:9f:ae:75:
         2a:f3:b2:e5:28:94:da:2c:3d:85:f1:84:45:20:5d:97:c4:0c:
         a9:15:e6:43:94:06:f8:4e:d4:6b:47:ea:9f:28:3f:69:0c:fc:
         c2:3e:7e:a7:00:d4:ce:cd:c0:bd:71:12:92:68:6e:76:6d:7b:
         d3:91:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org