Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JE_q3WEjmaKDRU3BXkJj4Sq5ZQk.roa
File:                     JE_q3WEjmaKDRU3BXkJj4Sq5ZQk.roa (raw, json)
Hash identifier:          8GuLX9pJPn9CTk+adsZWFoR+tvOWZY7K4yQlQ29Felk=
Subject key identifier:   24:4F:EA:DD:61:23:99:A2:83:45:4D:C1:5E:42:63:E1:2A:B9:65:09
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       0192CE48E74720066309541604C8702952AE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JE_q3WEjmaKDRU3BXkJj4Sq5ZQk.roa
Signing time:             Sun 27 Oct 2024 14:02:17 +0000
ROA not before:           Sun 27 Oct 2024 14:02:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199439
IP address blocks:        93.113.182.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ce:48:e7:47:20:06:63:09:54:16:04:c8:70:29:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Oct 27 14:02:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=244feadd612399a283454dc15e4263e12ab96509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:85:d3:25:9a:d6:2a:ed:5d:fd:8e:ff:76:
                    ec:7b:b6:7a:2b:75:9f:d2:3c:df:6c:61:0f:88:9d:
                    29:5c:79:28:8d:08:53:71:6d:56:c4:8f:d5:72:99:
                    5a:cb:40:7b:76:14:97:22:1e:cd:dc:bc:5a:27:d5:
                    7a:09:1d:06:a0:ea:b5:53:ad:54:6a:98:37:c8:a1:
                    30:aa:63:7c:d3:c0:06:d9:1a:e0:21:6c:a0:2b:d5:
                    72:ca:b2:d6:aa:c3:d4:20:5a:39:85:e4:a5:80:33:
                    de:53:6e:ab:ab:6b:e7:9a:65:be:b0:9f:0b:9b:c6:
                    b6:f8:36:6a:a7:22:8b:e6:ff:a2:16:a0:e3:b2:18:
                    8c:e3:44:51:7b:06:ad:fb:b4:c3:35:1e:57:03:4f:
                    29:4c:5c:1d:5d:70:e5:66:33:b3:61:4c:7d:f6:d1:
                    f1:d4:9b:e0:84:55:e0:41:cc:17:21:69:7d:ff:6c:
                    ed:a0:ae:c0:27:e7:8a:be:1c:54:b8:60:f9:5a:40:
                    eb:ab:31:36:55:41:18:ef:a0:7f:cc:b4:12:e2:86:
                    6e:db:71:85:78:f0:66:95:e8:d6:25:68:72:7c:c2:
                    d6:e8:c9:67:6a:0c:73:64:0b:38:1d:bf:63:94:2e:
                    3c:97:da:20:cb:bf:9d:9b:42:15:83:ad:dd:4c:47:
                    d6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4F:EA:DD:61:23:99:A2:83:45:4D:C1:5E:42:63:E1:2A:B9:65:09
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JE_q3WEjmaKDRU3BXkJj4Sq5ZQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:3c:88:3d:33:6b:41:6c:74:d7:a9:41:20:d3:b4:f3:5c:
         0f:91:d2:44:2f:0f:eb:fb:f2:54:c1:66:e2:e5:fd:c5:10:fd:
         92:d8:7e:35:16:a0:91:bf:ca:f5:54:69:ec:c3:ad:e1:8b:5d:
         f6:bd:33:c0:cb:9c:36:c3:fe:60:98:ae:15:58:1a:b2:56:eb:
         94:ef:8c:0c:f6:74:66:80:54:83:b6:9a:4e:13:ee:5f:d4:fd:
         70:c8:c1:18:69:09:ef:b5:76:f8:6e:59:3b:73:d5:12:c1:93:
         47:31:27:7e:28:fd:25:a8:ec:5f:ee:6d:ed:ad:d7:f7:96:b3:
         9e:18:36:ea:e2:dd:ed:5e:0d:ee:36:04:18:4b:7a:af:3b:66:
         0f:8d:95:25:1b:9f:f0:78:c7:fb:bf:d4:a6:5d:00:50:d6:a0:
         ca:b0:20:51:05:6f:a6:20:30:25:04:a3:10:71:f8:fb:40:ff:
         c8:24:32:a0:19:c1:52:3c:14:23:22:3b:38:bd:80:07:b0:97:
         cd:b6:f2:74:fa:33:6f:1b:74:16:41:9e:3f:95:ba:fd:ab:12:
         d4:37:b4:6b:65:09:65:56:8f:3f:03:0a:90:0b:d9:af:bb:c0:
         fa:99:b1:63:63:cf:af:b5:2d:2a:e5:d7:29:e8:f6:93:3c:b2:
         60:da:dd:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLOSOdHIAZjCVQWBMhwKVKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQxMDI3MTQwMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDRmZWFkZDYxMjM5OWEyODM0NTRkYzE1ZTQyNjNlMTJhYjk2NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT6F0yWa1irtXf2O/3bse7Z6K3Wf
0jzfbGEPiJ0pXHkojQhTcW1WxI/Vcplay0B7dhSXIh7N3LxaJ9V6CR0GoOq1U61U
apg3yKEwqmN808AG2RrgIWygK9VyyrLWqsPUIFo5heSlgDPeU26rq2vnmmW+sJ8L
m8a2+DZqpyKL5v+iFqDjshiM40RRewat+7TDNR5XA08pTFwdXXDlZjOzYUx99tHx
1JvghFXgQcwXIWl9/2ztoK7AJ+eKvhxUuGD5WkDrqzE2VUEY76B/zLQS4oZu23GF
ePBmlejWJWhyfMLW6MlnagxzZAs4Hb9jlC48l9ogy7+dm0IVg63dTEfWEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRP6t1hI5mig0VNwV5CY+EquWUJMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvSkVfcTNXRWptYUtEUlUzQlhrSmo0U3E1WlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXG2MA0G
CSqGSIb3DQEBCwUAA4IBAQArjzyIPTNrQWx016lBINO081wPkdJELw/r+/JUwWbi
5f3FEP2S2H41FqCRv8r1VGnsw63hi132vTPAy5w2w/5gmK4VWBqyVuuU74wM9nRm
gFSDtppOE+5f1P1wyMEYaQnvtXb4blk7c9USwZNHMSd+KP0lqOxf7m3trdf3lrOe
GDbq4t3tXg3uNgQYS3qvO2YPjZUlG5/weMf7v9SmXQBQ1qDKsCBRBW+mIDAlBKMQ
cfj7QP/IJDKgGcFSPBQjIjs4vYAHsJfNtvJ0+jNvG3QWQZ4/lbr9qxLUN7RrZQll
Vo8/AwqQC9mvu8D6mbFjY8+vtS0q5dcp6PaTPLJg2t2c
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:34 2025 by rpki-client