Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zlwm79-5MxKEIuYKtYCE1ZH_7_c.roa
File:                     Zlwm79-5MxKEIuYKtYCE1ZH_7_c.roa (raw, json)
Hash identifier:          F/X7PnrtqRd0MpVgvl2yAnj7DCekDe0ZSvEy61EWqfI=
Subject key identifier:   66:5C:26:EF:DF:B9:33:12:84:22:E6:0A:B5:80:84:D5:91:FF:EF:F7
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       01896CE1D77BF1F952DD937EC9A4243E277C
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zlwm79-5MxKEIuYKtYCE1ZH_7_c.roa
Signing time:             Wed 19 Jul 2023 06:41:27 +0000
ROA not before:           Wed 19 Jul 2023 06:41:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211180
IP address blocks:        93.119.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6c:e1:d7:7b:f1:f9:52:dd:93:7e:c9:a4:24:3e:27:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul 19 06:41:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=665c26efdfb933128422e60ab58084d591ffeff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:bb:ac:ea:4e:3c:6e:2b:e2:3d:c7:c1:e7:
                    59:19:7d:31:68:e8:41:14:aa:01:d6:15:1d:0b:c5:
                    97:f8:48:8b:d9:86:f8:71:5d:95:64:8d:ac:e5:df:
                    f4:9e:b0:64:25:a7:59:cc:a7:9e:57:ac:62:b2:da:
                    e0:c4:c4:0e:f6:39:c3:29:ae:8c:1c:68:19:ba:e3:
                    85:10:fd:e6:03:5c:2d:d3:c7:29:cb:2c:d2:37:56:
                    6b:97:4c:70:58:33:03:ca:16:ac:9e:17:28:45:3c:
                    f5:e9:5f:d2:12:08:90:93:8a:ef:37:90:95:eb:04:
                    80:2e:90:20:1f:47:3a:f2:b9:01:6b:4c:57:78:1c:
                    15:61:d1:25:f8:76:af:61:d0:8a:e1:1d:b6:90:3b:
                    af:c2:7a:d9:81:61:78:0b:be:86:5d:00:ee:92:81:
                    40:f7:af:68:22:ee:e4:af:78:a2:f9:17:ae:56:f2:
                    6c:a5:db:cc:c2:f8:66:1e:c2:7f:9b:a1:6b:17:d8:
                    e3:0d:09:10:86:6e:03:03:6b:08:f4:c5:4d:59:50:
                    af:1c:8a:92:cc:c4:dc:d5:e4:fc:84:3a:92:cd:3a:
                    88:7b:a9:62:5c:0f:69:ec:dd:f9:47:45:8c:a2:86:
                    bd:f0:d0:22:59:30:cf:44:23:6f:a4:af:ce:b8:bb:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5C:26:EF:DF:B9:33:12:84:22:E6:0A:B5:80:84:D5:91:FF:EF:F7
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Zlwm79-5MxKEIuYKtYCE1ZH_7_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:1a:56:7c:3b:23:34:a8:6d:53:ef:58:c2:ec:57:8e:b2:55:
         5c:23:c0:87:20:46:cb:52:29:52:ae:fe:44:aa:17:df:8c:f0:
         0f:8c:6a:58:e8:16:fc:ff:53:20:19:6d:0a:fe:06:f2:47:6d:
         30:20:a9:a0:8e:4e:d1:8e:09:ac:07:ee:8d:3d:92:bf:60:3d:
         69:d1:37:1f:78:ef:94:1e:b3:a8:a7:af:29:da:75:0d:96:2f:
         90:bc:59:2a:32:53:59:84:5b:8b:f4:af:8e:7d:58:d2:42:71:
         0d:6f:c6:8f:6c:68:6d:92:bc:96:8f:11:de:4d:6e:c2:e4:f7:
         87:91:30:94:37:3a:6a:0a:61:f4:f2:43:ed:70:a8:ec:bb:12:
         bc:5f:88:d9:4c:21:14:f4:b7:84:5a:b0:80:ed:f0:36:7e:20:
         64:64:ee:aa:fc:28:a0:0f:fa:5a:86:67:56:fd:4c:68:0a:56:
         0a:8f:48:c3:a4:d8:4c:41:8f:14:a8:d4:8f:47:95:10:96:68:
         c1:ca:b2:ca:62:5a:a8:12:cf:f3:91:c9:a7:71:83:c5:4b:de:
         8a:8d:fc:d3:47:2c:6d:b1:38:f9:08:c2:63:4d:d1:f1:36:14:
         06:e0:28:1b:8b:38:d1:54:f2:2d:83:75:11:fa:ce:95:f8:f2:
         29:11:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org