Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/8fv35qr9m0WzUf1dIPeIJz1tWB8.roa
File:                     8fv35qr9m0WzUf1dIPeIJz1tWB8.roa (raw, json)
Hash identifier:          Fk3QOQOY2jKUiwRFKiseTbQEYTbnaXW8ZaHyNFB4MGQ=
Subject key identifier:   F1:FB:F7:E6:AA:FD:9B:45:B3:51:FD:5D:20:F7:88:27:3D:6D:58:1F
Certificate issuer:       /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial:       01856BC10EE9B6867AB0C6430E2D08E3A5FB
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/8fv35qr9m0WzUf1dIPeIJz1tWB8.roa
Signing time:             Sun 01 Jan 2023 05:14:52 +0000
ROA not before:           Sun 01 Jan 2023 05:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.16.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:c1:0e:e9:b6:86:7a:b0:c6:43:0e:2d:08:e3:a5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
        Validity
            Not Before: Jan  1 05:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1fbf7e6aafd9b45b351fd5d20f788273d6d581f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:e9:a8:b0:18:d8:d4:c1:e0:35:16:58:09:
                    88:76:d8:80:dc:a6:e7:8d:0b:70:28:e7:5a:1e:2e:
                    e2:8a:66:9e:9f:64:3f:f8:38:9d:8d:a9:3a:01:4f:
                    5d:b6:4a:04:6b:e0:e1:87:45:1b:d3:84:7b:02:e1:
                    e7:01:81:bd:90:c1:7e:ac:f6:d8:ab:28:7a:b6:43:
                    73:9b:44:17:be:66:bb:e4:58:eb:02:72:9b:39:cd:
                    32:72:69:48:ff:7f:18:e2:84:b1:cc:bf:8a:63:33:
                    b3:7a:62:d7:90:e8:0d:e7:e5:f9:e1:f4:53:de:24:
                    d4:50:97:9f:1c:97:0b:00:08:2a:63:e6:4a:9e:0e:
                    67:80:84:97:fe:07:ed:13:2e:52:80:59:8d:51:40:
                    04:fd:a3:62:9a:d9:99:81:45:6d:cd:e4:f7:63:51:
                    aa:e0:7f:8c:61:51:3b:26:24:df:1f:d1:54:54:a8:
                    ed:14:ea:e6:32:a2:95:79:f0:39:c5:f2:d3:b0:58:
                    1b:ad:24:27:da:03:c3:11:e4:eb:ea:a8:50:67:a4:
                    86:20:09:be:98:f5:52:27:bf:a3:17:ae:e2:28:10:
                    79:3a:6e:d4:eb:e9:b3:65:83:25:c9:fa:c5:7f:54:
                    7b:e6:5b:de:01:2a:65:72:6a:84:ac:d7:5f:c4:f3:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:F7:E6:AA:FD:9B:45:B3:51:FD:5D:20:F7:88:27:3D:6D:58:1F
            X509v3 Authority Key Identifier:
                keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/8fv35qr9m0WzUf1dIPeIJz1tWB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.16.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:49:9b:67:4a:23:9c:33:6e:86:3c:ce:dd:04:4b:91:8c:3a:
         53:c4:64:0d:04:91:55:9e:1e:3f:00:ea:11:f7:45:ac:a9:c3:
         25:2a:2b:df:90:a9:ee:eb:8c:45:6d:44:9e:3e:6d:96:2d:94:
         82:d5:28:c7:c1:c0:ef:33:89:6d:1f:e6:ba:f5:72:77:f2:05:
         71:40:0d:72:0b:17:11:ce:ed:92:2f:72:a6:be:bc:9e:ec:1f:
         dc:fb:9b:f3:65:3a:23:8d:65:de:cb:8e:d6:80:d5:62:d7:13:
         2c:05:9a:73:ef:3b:0e:03:46:5a:b4:1a:a1:46:1a:1e:40:db:
         20:64:a8:90:b5:dc:5a:b6:11:59:f0:64:dc:1c:52:a3:64:c7:
         46:a2:83:4e:0b:8d:27:30:7f:b4:95:24:6e:8d:9c:9f:5e:86:
         e7:23:e5:c5:93:5f:f6:2a:db:86:13:49:34:ea:4d:fa:a7:1d:
         f2:62:46:b0:d1:95:e9:91:18:51:6d:1b:f3:ee:44:60:54:6d:
         1d:0d:09:fa:84:4c:bc:32:77:21:d4:26:e2:2b:6c:c0:83:fc:
         85:7c:53:29:d3:38:98:66:e2:72:6d:e7:bc:2a:40:2b:3e:d5:
         a2:71:05:85:4a:53:53:e0:3a:07:7e:a2:c5:95:e4:bf:37:2d:
         54:34:32:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:44 2024 by rpki-client on console-ams.rpki-client.org