Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/LiiblyudnxecdZQAUwM-TXsodsE.roa
File:                     LiiblyudnxecdZQAUwM-TXsodsE.roa (raw, json)
Hash identifier:          LINnfA8TPEAk1lfBmI0dWPJ8pqE8FyaBVEFZKfCjkV0=
Subject key identifier:   2E:28:9B:97:2B:9D:9F:17:9C:75:94:00:53:03:3E:4D:7B:28:76:C1
Certificate issuer:       /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial:       0186DC93BA388BAF0520356BEEFD9A13BB88
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/LiiblyudnxecdZQAUwM-TXsodsE.roa
Signing time:             Mon 13 Mar 2023 20:05:14 +0000
ROA not before:           Mon 13 Mar 2023 20:05:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        193.38.34.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dc:93:ba:38:8b:af:05:20:35:6b:ee:fd:9a:13:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
        Validity
            Not Before: Mar 13 20:05:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e289b972b9d9f179c75940053033e4d7b2876c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b7:d4:45:7d:53:59:d0:f8:d8:5f:4b:7e:1d:
                    f0:f6:d3:ed:ec:38:c6:a4:ad:66:44:bd:43:da:33:
                    3f:32:1c:63:a0:f8:b6:42:f2:cf:66:ca:62:b3:d9:
                    ef:51:4c:39:1a:c3:dc:6b:2f:4d:8f:51:66:3b:fc:
                    3d:3c:bf:0c:a7:76:22:ec:97:9e:ef:59:3c:f4:61:
                    a5:98:51:40:28:c0:3b:ed:37:ae:6d:f7:00:b0:ae:
                    a9:09:f6:d4:1a:dd:df:24:ac:ab:3a:5e:26:01:8b:
                    00:dd:58:d2:5d:30:8b:9b:ee:fc:63:2d:c9:b1:b7:
                    ff:0f:9e:2d:16:70:28:13:54:fe:e6:d5:de:86:ef:
                    37:77:86:03:5e:b2:a9:cf:62:e5:02:80:5e:b8:e9:
                    1d:e6:37:15:cc:04:26:b9:b4:45:1e:b4:e9:7e:22:
                    b9:8d:4a:1b:c2:c4:a0:60:bb:e8:f2:ee:3c:a7:05:
                    ef:93:ed:2d:98:85:80:84:76:21:bf:53:ff:7b:66:
                    3f:5b:dd:79:ea:e3:75:47:29:83:e5:77:25:f6:33:
                    fa:e7:80:42:92:ec:e7:a2:59:7e:4e:ef:b7:ae:8f:
                    00:7b:f1:14:5a:af:80:45:20:83:2c:63:33:96:68:
                    47:81:b0:31:5a:d6:fb:48:2f:36:b1:1b:2b:83:e7:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:9B:97:2B:9D:9F:17:9C:75:94:00:53:03:3E:4D:7B:28:76:C1
            X509v3 Authority Key Identifier:
                keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/LiiblyudnxecdZQAUwM-TXsodsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:76:38:3b:05:36:07:36:f3:0e:81:95:29:22:04:8c:60:5f:
         26:1a:aa:07:5a:4d:c6:bf:65:2e:f2:2f:9f:6f:3a:b3:d3:3a:
         80:7c:3f:98:2e:67:e6:03:5b:e4:be:08:a7:d0:c7:33:a6:b9:
         eb:b0:df:52:31:a2:98:78:99:59:d1:7e:2a:d4:73:70:db:79:
         a8:79:5f:c6:bd:be:fb:11:b0:c4:ae:b7:23:2a:5a:d7:95:fc:
         47:5f:20:99:06:61:95:85:fc:32:c2:4e:f5:81:c0:64:31:a8:
         e7:b6:32:2a:38:db:42:18:76:10:0a:69:52:f1:33:2b:e3:eb:
         73:51:25:e7:1c:41:f1:c4:41:90:51:b6:e5:76:72:de:44:f7:
         6d:9b:a4:06:fc:f0:bd:fd:3a:3f:98:d0:a6:50:06:39:ac:b1:
         dc:7a:ac:7c:3d:ad:07:d7:25:08:d3:97:be:ba:47:89:85:f0:
         d5:ec:80:c2:99:4b:10:28:3d:9e:d3:fb:f7:94:ca:d0:27:72:
         26:45:ce:5b:c2:05:74:40:c2:ce:1e:75:c5:27:0e:ac:1b:10:
         22:0a:ee:d2:7e:08:e0:42:c3:c4:01:38:3f:a7:d1:32:2e:36:
         db:e0:d7:1e:15:f4:f1:2f:a4:54:a3:5a:35:13:26:86:76:bf:
         a0:a9:dd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:00 2024 by rpki-client on console-fra.rpki-client.org