Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/3C32TWuDnmPe-ygGXaxcgKh1zuE.roa
File:                     3C32TWuDnmPe-ygGXaxcgKh1zuE.roa (raw, json)
Hash identifier:          eBmGiTJL57wBQ+BPR13CcM7LQuX8erUsdeii9kosvtI=
Subject key identifier:   DC:2D:F6:4D:6B:83:9E:63:DE:FB:28:06:5D:AC:5C:80:A8:75:CE:E1
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       0186E503A6544992E339BC7F748F6768F814
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/3C32TWuDnmPe-ygGXaxcgKh1zuE.roa
Signing time:             Wed 15 Mar 2023 11:24:27 +0000
ROA not before:           Wed 15 Mar 2023 11:24:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212626
IP address blocks:        93.175.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e5:03:a6:54:49:92:e3:39:bc:7f:74:8f:67:68:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Mar 15 11:24:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc2df64d6b839e63defb28065dac5c80a875cee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:14:a1:fe:30:dd:2d:fd:2f:b7:8b:ef:d8:
                    75:ec:58:b3:71:f8:b8:43:40:c6:85:63:11:39:c0:
                    58:6e:72:b3:a1:2a:b3:60:89:60:25:b2:28:50:90:
                    bd:df:a1:97:b2:bc:f8:d4:f0:e6:22:dc:5f:29:7c:
                    60:bd:8d:cc:dc:f8:18:3c:08:af:85:42:ee:26:d4:
                    c3:20:8d:85:63:60:2f:6f:2a:d2:e1:f1:e5:65:d1:
                    63:64:d1:ba:08:ee:19:05:aa:68:cc:2c:6b:b8:e3:
                    2a:ef:37:52:4f:2e:c9:be:23:54:39:63:bb:6f:d5:
                    59:0a:6c:a8:aa:b7:4c:1b:84:f0:7c:0b:d8:02:41:
                    4c:f1:71:1b:5e:2b:b6:e9:de:5a:ed:31:46:c6:e3:
                    77:5f:45:55:7c:02:b2:aa:fe:8b:40:41:91:3c:14:
                    e2:c0:91:97:88:fd:62:53:86:ea:af:e7:65:44:de:
                    95:b4:24:23:20:f6:9b:33:3d:c8:18:92:1c:e5:40:
                    88:d8:1d:62:15:88:34:51:ff:0f:e2:b1:06:fa:13:
                    0d:d5:d7:21:9f:a9:e1:e1:53:76:ff:30:40:f0:41:
                    62:28:99:f7:1e:a2:b5:41:ea:38:cd:47:3f:65:ad:
                    e6:52:45:9f:98:57:7c:a7:a7:05:34:b0:ee:c1:7b:
                    90:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:F6:4D:6B:83:9E:63:DE:FB:28:06:5D:AC:5C:80:A8:75:CE:E1
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/3C32TWuDnmPe-ygGXaxcgKh1zuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.175.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:22:15:bb:72:b6:2a:7a:1e:13:64:c7:21:6c:ce:73:01:aa:
         f9:ed:17:dd:a9:8b:04:83:4e:df:0f:27:7c:8a:33:0f:a8:b1:
         ed:6e:1c:00:81:70:7d:7b:2f:b7:b3:c6:b9:86:7b:54:f7:c1:
         3e:2e:f2:71:78:df:b7:cf:e2:37:e8:e6:14:de:60:01:28:35:
         45:07:91:bd:78:f1:ed:3a:e1:bb:a9:23:38:9e:9e:5b:e7:3c:
         47:2e:98:ec:09:a9:e5:51:ed:5a:9a:7c:c4:a0:b5:14:60:0d:
         75:ee:2a:21:71:0a:a8:af:77:b4:b5:37:7c:5e:55:09:1b:9b:
         42:77:20:e0:64:16:eb:04:89:4e:e5:b2:34:56:5f:9b:76:f0:
         f1:9b:c7:76:88:e5:b1:83:01:97:3d:d9:92:a6:d9:fe:05:ec:
         02:c8:db:0f:e1:48:3a:c2:41:db:49:2b:3b:60:4d:71:61:aa:
         e3:c6:a1:42:8e:0c:1e:09:38:ef:e9:0d:81:1b:0a:ce:b7:e2:
         57:bc:ac:9e:31:83:31:cc:4c:8f:02:1f:82:fa:68:5c:fd:0f:
         6c:58:8d:bf:b8:d5:3e:64:7d:15:3f:bd:33:91:14:5a:39:47:
         dc:ee:cc:3d:6d:09:6e:99:a0:3a:78:5a:80:24:4d:e2:ed:d1:
         f7:5a:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org