Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/IsdlpRqddgwdrqjr8QzUeDM0q_A.roa
File:                     IsdlpRqddgwdrqjr8QzUeDM0q_A.roa (raw, json)
Hash identifier:          qzLyQoH9gVtQn/PB8zzIQ29K54qi8f/uy1S4Uvam2bk=
Subject key identifier:   22:C7:65:A5:1A:9D:76:0C:1D:AE:A8:EB:F1:0C:D4:78:33:34:AB:F0
Certificate issuer:       /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial:       0185719E70AAD6E9EE72FAAA7C27E134BFD0
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/IsdlpRqddgwdrqjr8QzUeDM0q_A.roa
Signing time:             Mon 02 Jan 2023 08:34:47 +0000
ROA not before:           Mon 02 Jan 2023 08:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     196971
IP address blocks:        193.105.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:70:aa:d6:e9:ee:72:fa:aa:7c:27:e1:34:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
        Validity
            Not Before: Jan  2 08:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22c765a51a9d760c1daea8ebf10cd4783334abf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:dd:9d:c7:d3:ab:de:76:c1:57:26:b6:f9:
                    92:95:39:90:29:84:1e:01:91:24:00:e4:58:68:35:
                    1e:d5:29:83:7c:66:06:73:e2:f7:2e:c5:d8:c4:9b:
                    fb:42:fe:16:d4:2f:52:e5:62:6e:c4:fb:97:4d:80:
                    c8:d5:8e:4e:f1:b5:ac:f3:ff:b9:02:8b:c4:c2:c7:
                    2c:a9:07:ed:ff:ed:9e:c8:1e:04:c6:78:7f:1d:2e:
                    54:93:09:3d:4d:df:15:41:25:01:53:c6:35:91:f6:
                    95:89:44:da:cc:1b:0d:6b:ce:1d:80:07:51:e8:84:
                    24:87:e2:b6:41:51:e5:37:0a:11:ef:d8:79:b3:16:
                    c0:58:48:6f:91:21:8c:e4:b0:e0:a5:dd:6a:82:b2:
                    a2:b4:f8:13:5a:7b:95:08:c4:0c:c1:7a:88:9f:9b:
                    53:cb:3b:3b:02:bc:25:b8:a5:6d:42:9f:be:27:b1:
                    f1:0d:e0:86:9c:72:58:78:2a:a2:5f:ea:ab:ef:fa:
                    7e:cd:02:d1:6a:65:75:fb:9a:d6:bb:cd:a8:c6:af:
                    51:f3:9d:87:3e:c0:8f:d3:01:1d:5a:83:e1:e7:48:
                    4b:56:39:92:b1:b2:07:3d:16:0d:3c:6a:86:88:1b:
                    e6:69:f3:68:70:d5:dd:e9:b9:98:2b:fc:a3:71:c7:
                    13:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C7:65:A5:1A:9D:76:0C:1D:AE:A8:EB:F1:0C:D4:78:33:34:AB:F0
            X509v3 Authority Key Identifier:
                keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/IsdlpRqddgwdrqjr8QzUeDM0q_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:28:c9:10:ad:fd:bf:6e:8a:bf:29:3a:53:29:1e:49:1b:92:
         3d:c1:67:16:1b:7a:b2:6b:9c:d8:80:d1:43:ad:30:76:ea:a5:
         ed:80:de:07:cd:4c:40:92:0f:a4:60:76:2f:fb:eb:6a:7a:f0:
         df:aa:8a:d8:9e:d1:1c:fd:bc:fa:50:e0:90:a6:6e:8a:4a:53:
         22:59:38:7a:db:80:85:4e:37:ab:70:27:6e:de:17:2f:4f:3a:
         e3:a7:23:8d:ae:aa:e3:4f:f3:59:4a:8e:9c:58:6f:6e:a6:6b:
         a2:af:de:74:4d:7e:44:e4:4d:44:45:48:d8:56:f3:af:03:dc:
         af:19:45:1e:e8:0c:9f:23:7d:21:de:62:a6:7e:39:2a:21:be:
         1d:ec:6a:2e:3f:a7:8d:e3:56:98:92:6c:a8:e4:86:7e:63:f3:
         d3:87:01:14:02:5d:1a:39:dc:b9:1b:1b:12:c4:3e:4a:ef:f0:
         1a:82:b6:5e:75:56:32:db:78:dc:18:55:f8:ae:c7:1d:d1:c0:
         4a:f8:e0:53:4c:f8:7c:f5:c0:04:54:82:7c:1c:67:3d:44:8b:
         22:c2:08:df:2c:46:6f:4d:b3:58:17:8a:a7:d6:ee:2c:9b:62:
         09:e1:89:87:a9:06:b7:3a:5a:af:71:d0:5d:b4:fc:14:22:03:
         a9:95:5f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:58 2024 by rpki-client on console-fra.rpki-client.org