Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5u18cIL9jxaneViP3Vml6P2s2x4.roa
File:                     5u18cIL9jxaneViP3Vml6P2s2x4.roa (raw, json)
Hash identifier:          kSOfeVBHZ6QjdX8elVrvBVB0ILYruGyCOvw94paUSa4=
Subject key identifier:   E6:ED:7C:70:82:FD:8F:16:A7:79:58:8F:DD:59:A5:E8:FD:AC:DB:1E
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       0189720DAE5271EB3F36EB5FE80DF1E2CC79
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5u18cIL9jxaneViP3Vml6P2s2x4.roa
Signing time:             Thu 20 Jul 2023 06:47:26 +0000
ROA not before:           Thu 20 Jul 2023 06:47:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13335
IP address blocks:        93.119.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jul 2023 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:0d:ae:52:71:eb:3f:36:eb:5f:e8:0d:f1:e2:cc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul 20 06:47:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6ed7c7082fd8f16a779588fdd59a5e8fdacdb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:49:b3:ce:2c:c4:b4:50:6f:8f:80:25:5a:
                    cd:38:60:4b:7a:b7:d2:8a:16:8a:a9:ef:56:58:a1:
                    99:00:87:31:03:4b:1f:a6:53:6b:7b:b5:2f:cf:b6:
                    ea:03:37:0b:c4:16:b3:ce:69:46:c6:06:9b:3a:f0:
                    f3:43:aa:20:98:69:25:9e:90:e6:71:29:34:1a:b0:
                    75:cd:19:3d:34:91:65:72:bb:79:84:f2:4f:22:49:
                    8e:2c:07:fa:34:e8:ee:98:48:18:00:20:86:d0:97:
                    78:fb:e0:60:34:27:6f:12:ea:c6:c7:ef:5f:d9:77:
                    1f:4b:9a:00:cc:99:62:5c:88:d2:ba:49:0e:52:03:
                    61:cd:d5:97:0d:17:f7:79:7e:14:79:1d:c6:e2:10:
                    bb:bf:ee:92:53:c1:e1:d1:b5:c2:7f:61:94:77:71:
                    9c:42:10:cc:e4:73:e6:9b:1a:8f:d2:05:45:93:1e:
                    a2:d3:4a:24:77:c7:09:0c:30:ed:a3:dd:5f:c8:85:
                    9a:15:53:5f:82:76:fa:04:61:a0:76:54:82:a4:7d:
                    33:64:9c:4f:dd:b0:ed:3c:fb:fc:bb:62:9e:51:67:
                    3d:7b:49:ec:5d:05:00:c2:1b:bf:96:f2:47:59:dc:
                    8a:38:a4:dc:81:87:f2:fd:60:55:ac:d6:7e:8a:b3:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:ED:7C:70:82:FD:8F:16:A7:79:58:8F:DD:59:A5:E8:FD:AC:DB:1E
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/5u18cIL9jxaneViP3Vml6P2s2x4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:44:93:89:bb:ff:52:37:85:d2:4c:f7:7b:e9:1e:5f:37:
         5d:42:83:43:ce:ba:23:e2:e2:83:65:62:9d:ae:48:6e:19:a6:
         cd:4f:c0:ba:77:d8:cd:4a:ed:62:d7:b8:18:09:b6:4b:06:7b:
         5d:70:a8:60:67:65:ee:87:71:6c:97:39:e9:1c:69:90:8c:3f:
         3f:d2:0c:b1:e6:ef:d6:82:c2:85:ac:ce:74:20:e0:6b:5b:ca:
         56:14:d9:bc:6e:aa:d6:3e:7b:6a:3a:a1:47:3c:99:15:5e:ab:
         b8:0b:7b:ca:84:3c:87:43:f9:4e:14:c3:d8:59:fe:8c:30:3c:
         77:e4:77:d1:5b:21:52:ca:1f:a5:fc:52:64:ce:ba:b8:19:64:
         df:b9:32:37:e5:bd:4a:51:32:ed:90:06:a6:3c:70:ff:29:39:
         ee:15:d5:fe:da:14:b8:52:7e:d1:56:86:a4:fd:36:ab:e8:82:
         9f:37:c3:48:ab:b1:79:d1:bf:ae:56:17:f1:3d:d7:50:de:b9:
         e6:49:8f:49:c9:bb:85:1c:0c:bb:a0:1e:64:f8:4d:ad:22:f9:
         05:71:44:95:99:55:ff:db:33:c2:c6:9b:2f:ec:23:0f:da:94:
         11:f1:09:4c:3e:61:41:da:b7:91:19:1a:04:bd:94:8c:cb:7b:
         7a:3a:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:18 2024 by rpki-client on console-fra.rpki-client.org