Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aUnUXYnHvS6sXL2ExIdvC7XexOs.roa
File:                     aUnUXYnHvS6sXL2ExIdvC7XexOs.roa (raw, json)
Hash identifier:          tRN+FlX1QXvckUREOPaKU9UyywVSQQMhhQGkxA5H1EQ=
Subject key identifier:   69:49:D4:5D:89:C7:BD:2E:AC:5C:BD:84:C4:87:6F:0B:B5:DE:C4:EB
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       0190E856DD48A2157C979C732B4D12FAEE7A
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aUnUXYnHvS6sXL2ExIdvC7XexOs.roa
Signing time:             Thu 25 Jul 2024 05:22:05 +0000
ROA not before:           Thu 25 Jul 2024 05:22:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215703
IP address blocks:        93.113.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 25 Aug 2024 14:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e8:56:dd:48:a2:15:7c:97:9c:73:2b:4d:12:fa:ee:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jul 25 05:22:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6949d45d89c7bd2eac5cbd84c4876f0bb5dec4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:89:7a:f0:4f:56:ae:7b:5d:68:08:65:cb:
                    92:75:42:a7:66:22:0d:93:11:e9:6d:8a:e9:76:83:
                    d6:c7:0c:a7:a6:5f:1a:0e:7e:11:e2:30:48:00:cf:
                    bb:de:aa:b0:da:88:bf:f4:32:9d:d3:6a:cd:d7:e9:
                    b6:cb:d0:68:5c:39:e4:78:30:70:3c:d2:fa:ee:61:
                    9c:40:3b:53:94:3e:5b:67:4f:4d:31:89:e6:a1:6d:
                    d4:e4:71:de:d2:06:55:ba:19:b8:37:f6:bc:b8:6c:
                    5e:60:bd:52:07:00:e0:9b:60:35:59:d2:6b:02:e4:
                    eb:27:12:f2:0f:75:8a:21:98:6f:d0:a5:57:be:95:
                    b4:f3:33:0d:4b:09:29:ad:fb:cf:9a:5f:6c:e5:92:
                    7b:4d:5d:fa:e0:e5:e0:13:e7:e8:a5:90:a6:cc:67:
                    28:96:95:61:9e:15:d1:e7:58:0e:26:13:00:a9:1e:
                    d2:1e:43:b5:1c:00:80:41:98:dd:86:4d:82:95:33:
                    29:61:bd:a0:a0:c1:bf:62:1f:45:20:d3:08:a0:8f:
                    a7:9a:d4:3b:8c:64:64:50:74:cb:4e:66:6b:b9:13:
                    d4:2e:6b:84:9b:6d:af:29:2b:82:23:51:bc:b7:85:
                    e4:8d:59:3d:6a:ff:fb:91:3a:69:bc:37:88:5b:8f:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:D4:5D:89:C7:BD:2E:AC:5C:BD:84:C4:87:6F:0B:B5:DE:C4:EB
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aUnUXYnHvS6sXL2ExIdvC7XexOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:e9:22:70:47:b0:26:1c:63:99:66:27:39:97:35:f9:69:
         7b:51:16:fd:0e:bf:85:f4:c1:36:f8:7b:14:73:6c:88:99:0f:
         23:10:3c:63:e2:62:67:c3:25:31:c0:4b:1c:c0:02:33:52:c9:
         93:85:3e:d3:14:b0:89:8a:1d:15:4c:49:95:0a:7e:13:40:fd:
         11:d3:88:a1:c3:bd:58:49:95:d6:4e:11:d2:cb:2b:c6:aa:69:
         07:35:6f:03:57:db:d3:e3:df:de:20:e0:16:fe:7b:30:7f:aa:
         9a:c9:cb:88:fc:c2:c1:e9:a4:3d:14:a9:59:f2:d9:47:81:02:
         61:b7:11:d6:08:94:90:0e:aa:1a:65:e5:03:d1:0a:0f:ad:11:
         21:24:d5:ea:82:77:18:86:2b:01:53:0f:a2:78:e8:85:7e:9f:
         14:90:28:4d:ab:fd:40:29:62:a9:c2:df:08:6c:f4:0d:50:ab:
         ea:1a:c1:17:86:67:36:7a:4e:89:68:0a:86:68:57:ac:d2:72:
         77:7f:81:eb:82:7c:b8:ef:ed:11:14:fa:45:90:80:f8:32:d0:
         f4:b4:aa:98:95:91:32:1a:5b:3f:af:b5:b3:6e:81:7f:8c:d0:
         53:8b:be:ec:7d:37:83:ef:e7:89:22:71:22:ea:85:63:99:79:
         ff:b0:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 17:13:54 2024 by rpki-client on console-fra.rpki-client.org