Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wIVomgINrInKSZqUHRcotogkEic.roa
File:                     wIVomgINrInKSZqUHRcotogkEic.roa (raw, json)
Hash identifier:          c5vKsL84VdXRNMRlGiI+HcO6OB2BpKG/0byPHeQ6uGk=
Subject key identifier:   C0:85:68:9A:02:0D:AC:89:CA:49:9A:94:1D:17:28:B6:88:24:12:27
Certificate issuer:       /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial:       01856E41CA403F435E8BE4A194E1FB29EFDF
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wIVomgINrInKSZqUHRcotogkEic.roa
Signing time:             Sun 01 Jan 2023 16:54:43 +0000
ROA not before:           Sun 01 Jan 2023 16:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5483
IP address blocks:        93.114.97.0/24 maxlen: 24
                          86.104.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:41:ca:40:3f:43:5e:8b:e4:a1:94:e1:fb:29:ef:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
        Validity
            Not Before: Jan  1 16:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c085689a020dac89ca499a941d1728b688241227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e7:81:57:18:d2:4d:e8:40:37:39:24:e5:a3:
                    93:76:56:e7:46:20:8c:e1:f2:14:18:2d:02:c3:47:
                    c7:93:e2:7e:bc:33:14:29:09:30:d0:91:28:45:ee:
                    44:4e:9c:b3:a7:7d:a7:f4:09:87:9f:0f:c1:2a:ae:
                    3c:ff:fd:2f:21:71:e2:03:44:d4:5f:03:e4:14:7c:
                    b4:24:82:38:ca:ba:5a:59:92:4a:c3:a3:80:a3:01:
                    df:16:10:6a:6e:e2:8e:32:33:51:36:e9:6e:b6:cd:
                    27:14:ee:62:76:0d:0a:56:60:f2:68:ab:e4:b2:eb:
                    d5:16:03:63:58:a4:10:47:54:8e:47:2a:21:96:a3:
                    5c:49:52:2c:36:1f:49:82:4f:ad:19:4d:11:11:7a:
                    96:ea:bb:37:9f:af:00:4d:50:39:d3:cc:3d:b4:cf:
                    6b:de:49:73:a4:72:4c:69:78:39:c0:af:cd:fd:81:
                    52:66:72:2c:d7:1f:a0:4e:12:26:59:8a:71:7a:06:
                    cd:13:81:0d:91:3d:92:da:48:9a:69:82:f4:ad:f0:
                    72:ca:ea:e0:46:83:6a:23:49:41:62:78:8c:83:82:
                    a4:12:30:c0:66:39:13:a1:10:46:e0:d5:f3:01:54:
                    92:d7:da:75:d9:f4:46:33:76:15:61:04:04:9b:cf:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:68:9A:02:0D:AC:89:CA:49:9A:94:1D:17:28:B6:88:24:12:27
            X509v3 Authority Key Identifier:
                keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/wIVomgINrInKSZqUHRcotogkEic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.104.9.0/24
                  93.114.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:3f:88:7f:35:f0:87:37:3e:b2:5a:d0:44:a2:ae:45:b1:2a:
         c5:b5:aa:6a:e8:d0:a0:bd:89:65:9f:94:79:50:bd:67:ca:bb:
         64:24:fb:81:08:a3:87:ea:06:e8:de:ad:65:3d:3a:35:44:ef:
         11:50:62:9d:7f:99:ba:8a:f0:19:f9:48:c0:27:0e:5a:71:be:
         16:c4:ea:fb:83:91:17:88:f9:93:4c:81:95:0c:08:70:cb:ff:
         fb:1a:4c:f9:f9:4c:e7:cb:04:ba:c5:0c:38:45:2d:81:ca:d6:
         59:0e:77:73:8a:92:cd:e8:19:2c:a0:3f:8b:03:4c:e9:27:5c:
         6b:95:e7:21:2f:a8:c0:c9:b8:d5:75:7d:84:aa:e4:28:e3:97:
         c6:db:78:36:72:d9:a0:34:4c:1a:b7:c1:c0:f5:1e:f8:01:52:
         7f:02:44:f3:ae:76:b9:88:3c:2c:e4:fc:ef:44:76:20:f2:4b:
         ee:4a:d7:ef:67:36:3e:a6:29:bb:2a:bc:c9:58:87:8b:2f:f4:
         1b:1b:0f:7c:07:01:e6:33:44:42:99:a3:b8:8a:35:ac:ed:73:
         c0:9a:a8:bc:8f:35:57:82:fe:4e:98:70:79:10:46:fe:af:22:
         42:67:ef:17:21:57:2c:ef:0c:df:02:e6:32:8b:62:39:65:6d:
         cd:e8:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org