Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa
File:                     Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa (raw, json)
Hash identifier:          rtzFQxRqU7XB5BAH/kpLmytGTze1KTDf1XincIslw5I=
Subject key identifier:   26:DF:2D:70:CA:B0:73:7A:F7:C3:20:93:74:D3:BD:03:F5:A0:D7:DB
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       01856E2FBFB0691007CCA8913436AAABC702
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa
Signing time:             Sun 01 Jan 2023 16:35:01 +0000
ROA not before:           Sun 01 Jan 2023 16:35:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48763
IP address blocks:        194.28.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 20 Jul 2023 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:2f:bf:b0:69:10:07:cc:a8:91:34:36:aa:ab:c7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Jan  1 16:35:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26df2d70cab0737af7c3209374d3bd03f5a0d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:7a:ec:93:40:0e:f3:d7:17:c4:ff:2e:68:
                    9a:e7:c9:0b:ac:d0:2f:38:a9:fb:df:8d:93:6d:43:
                    22:ba:89:47:dc:06:e3:23:20:8b:52:b8:1f:7a:e5:
                    67:85:c7:40:d3:81:b7:09:2a:87:64:f1:a7:af:49:
                    0b:e1:24:8f:7f:f4:87:d2:68:2f:d4:a0:c4:bd:71:
                    89:44:78:f3:06:4e:a1:b5:10:2a:58:fa:2e:0a:ad:
                    f4:8c:09:6a:6e:c8:7b:85:4e:04:30:d8:ae:9e:6c:
                    45:8d:7a:a8:35:15:aa:dc:30:cc:5a:83:57:c5:a9:
                    21:6d:cb:ea:f4:b9:f9:d2:41:1e:fa:ec:a2:a5:07:
                    91:d5:18:22:c3:b6:aa:48:7c:23:67:e4:2b:dd:7a:
                    a8:b3:03:5b:32:a8:83:ce:b4:2b:d8:47:11:44:be:
                    13:9f:16:c0:51:03:cc:cb:88:4c:3f:6f:c5:84:65:
                    42:5c:ab:6b:12:8a:d6:0a:dc:3a:fc:fc:14:e2:12:
                    f0:fa:a9:ff:6e:0e:1d:c6:c3:69:ed:c7:f0:53:7f:
                    e9:d4:44:b4:09:ae:92:0b:0a:94:0c:da:38:56:ce:
                    a6:44:4c:1e:57:90:b7:d9:c8:6f:f7:b0:ed:71:38:
                    69:9d:2f:de:79:09:7b:52:1d:3d:44:b0:2b:c7:0a:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:2D:70:CA:B0:73:7A:F7:C3:20:93:74:D3:BD:03:F5:A0:D7:DB
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.28.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:e3:be:77:3b:b5:4b:31:b9:f9:ad:08:1b:39:44:e6:bc:
         ac:3f:3a:2c:87:02:58:54:19:b0:55:21:8f:73:08:c1:c4:b2:
         81:6e:80:d1:22:78:3d:47:15:70:a0:8f:02:ec:7e:53:6f:e1:
         5b:5b:f2:9b:39:93:0e:88:bf:f8:95:07:9d:29:6a:ef:a4:ff:
         92:6b:24:fc:e5:7a:6f:81:09:96:21:e4:c6:60:91:3d:a7:5c:
         e8:5b:a8:13:3b:d1:3b:eb:fb:26:a4:b4:76:74:ce:b9:ef:c9:
         88:b3:48:82:da:6d:5c:47:58:84:8b:8e:f4:d0:3e:64:72:28:
         f7:73:fc:ec:a1:77:28:92:f3:44:cf:36:00:1a:2a:7c:2f:9b:
         ac:97:bc:e0:a0:a8:d5:9d:9e:d0:fb:7e:e5:75:c6:f0:0e:c4:
         43:26:02:19:19:c3:9b:f1:83:1c:0a:84:a2:ed:bb:7d:1b:19:
         9c:de:69:92:d4:04:8a:4b:23:68:91:fe:2d:3e:90:d4:04:a5:
         c6:78:27:af:6a:bf:23:72:53:af:a5:8c:57:5d:25:87:33:08:
         05:00:a2:49:19:c4:39:ff:b2:80:f1:27:d4:71:ca:3a:3e:6c:
         c2:6a:a5:66:06:b3:a4:d5:e4:92:9c:59:5c:e4:ca:f1:c3:5d:
         43:5b:0f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org