Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dMaJ8TXsxPcxzmBbDAsnyBfZ8Uc.roa
File:                     dMaJ8TXsxPcxzmBbDAsnyBfZ8Uc.roa (raw, json)
Hash identifier:          RzAHdSDTix2xM97+GgqbZUVxFOEXqQkxvftLBBoBVqI=
Subject key identifier:   74:C6:89:F1:35:EC:C4:F7:31:CE:60:5B:0C:0B:27:C8:17:D9:F1:47
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       018C821D9600CD6B2AB9F93FAD0B40838FAB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dMaJ8TXsxPcxzmBbDAsnyBfZ8Uc.roa
Signing time:             Tue 19 Dec 2023 12:47:06 +0000
ROA not before:           Tue 19 Dec 2023 12:47:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51832
IP address blocks:        93.119.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Dec 2023 14:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:82:1d:96:00:cd:6b:2a:b9:f9:3f:ad:0b:40:83:8f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Dec 19 12:47:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=74c689f135ecc4f731ce605b0c0b27c817d9f147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f3:00:a1:f1:b2:34:89:b2:d3:32:e9:af:60:
                    a9:bb:28:72:a4:ae:c3:df:3e:fd:fb:48:b1:2d:20:
                    9f:3c:56:50:67:07:8b:92:92:7b:a5:29:34:13:6e:
                    1d:7c:3f:30:67:6e:71:92:d5:7d:f4:96:e8:9e:0c:
                    f3:56:13:3d:78:50:ee:57:b8:ae:25:24:4f:e6:84:
                    31:31:9f:5e:6f:19:49:1f:02:a0:44:bb:1f:8b:3d:
                    d6:36:2e:f0:70:f6:60:0c:a1:6d:a6:b0:33:c3:3a:
                    98:f5:ae:cc:18:6d:1f:87:d0:9b:85:94:d8:48:6d:
                    f9:4b:65:85:6c:50:3e:ad:20:ef:6e:fe:e6:52:fc:
                    45:8c:da:05:de:a8:67:20:5d:f9:5f:e8:2d:2e:39:
                    3b:92:7f:f0:d0:6e:5d:56:03:b8:21:c6:d6:a6:89:
                    80:ae:2e:44:56:b8:5a:44:19:51:be:e7:d8:8a:b8:
                    dc:b4:4f:1d:19:e2:ed:ae:db:c3:f2:a6:1b:d4:93:
                    7e:2e:5b:cf:1c:a2:d5:bc:32:a1:9a:ad:b8:11:13:
                    ab:9e:e5:da:2c:cf:cf:63:d1:fe:71:84:76:d8:19:
                    84:8a:11:a3:2f:28:fa:fd:88:19:15:51:9b:1e:86:
                    33:3d:b5:a4:d9:8a:c8:97:d4:51:68:4d:a3:e7:8c:
                    b2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:89:F1:35:EC:C4:F7:31:CE:60:5B:0C:0B:27:C8:17:D9:F1:47
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dMaJ8TXsxPcxzmBbDAsnyBfZ8Uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7e:e1:12:0b:ff:cb:d1:ef:34:04:85:ab:fe:66:7b:87:30:
         11:5f:32:83:83:70:c7:61:dc:17:8e:42:a6:8a:5a:41:0a:1f:
         d7:85:80:a5:68:4d:b7:f0:fd:e9:91:68:4f:33:dd:07:98:c0:
         ed:d9:d0:df:5a:12:41:e7:2a:ea:e1:5f:72:e8:ed:c1:0e:85:
         35:5c:24:77:0c:db:7e:61:59:e0:f5:c4:05:36:03:01:5e:79:
         c4:3f:c8:3b:96:cf:f3:34:e2:fc:7e:7e:d8:21:36:4e:f2:d4:
         30:bb:84:9c:3e:72:95:9b:ff:da:74:7e:3c:6c:cd:79:ba:07:
         94:d4:49:4f:8c:0b:f3:83:e6:e0:2f:03:fd:ee:5b:5b:36:6d:
         1c:a3:ca:c5:fc:85:69:4f:b7:81:17:51:fa:2c:96:90:64:9d:
         95:4f:8b:54:03:f8:c8:bc:82:7d:d7:7d:a9:d1:a8:aa:0a:61:
         07:39:3a:db:d6:4f:d2:bc:c8:e5:90:8a:41:a9:6c:30:62:da:
         4d:b2:f3:37:b6:f9:3c:17:7a:6b:94:53:7a:dd:f8:4a:aa:04:
         9c:d1:6c:5f:49:b7:1e:5d:60:55:ac:02:4c:6c:cc:8c:11:7e:
         8e:0d:d1:d8:37:47:0d:39:00:96:69:cb:50:78:93:90:a5:25:
         83:3e:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org