Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa
File:                     Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa (raw, json)
Hash identifier:          pVIxMQpp/r6yokttQFjINAvzzQO0ERg27G0qqYhiNh4=
Subject key identifier:   5A:AD:52:01:9D:29:F4:ED:A3:1A:B4:BD:6D:FA:9F:44:EA:F7:A7:CB
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       018570F0B3FBA6008DFAAFAD9017202E4636
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa
Signing time:             Mon 02 Jan 2023 05:25:00 +0000
ROA not before:           Mon 02 Jan 2023 05:25:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400040
IP address blocks:        193.37.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:b3:fb:a6:00:8d:fa:af:ad:90:17:20:2e:46:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jan  2 05:25:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5aad52019d29f4eda31ab4bd6dfa9f44eaf7a7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:d4:1f:4a:9d:b6:a4:dd:a0:eb:bf:fe:a5:
                    7e:1a:99:c2:14:91:15:af:16:ae:58:2b:84:e2:e3:
                    b8:fe:7a:87:83:9e:26:85:22:fa:55:19:e7:a2:c4:
                    47:c6:a9:38:f8:b6:46:33:f7:2a:dd:3e:28:ab:ad:
                    42:59:55:2d:38:3c:ee:00:a1:21:f1:26:e1:d7:c0:
                    83:7d:b8:14:61:ef:2b:98:14:c1:38:a9:a8:4f:91:
                    c3:25:f4:99:09:53:b9:4f:c0:10:3e:49:40:d1:4b:
                    d4:dc:ab:1e:dc:77:52:b2:34:f7:9f:ed:9c:3c:85:
                    47:7e:dd:fe:88:7e:00:4d:79:45:50:c6:fd:27:39:
                    d8:b7:82:b2:a1:e8:8d:93:8e:d3:4c:b5:58:8c:dd:
                    1d:d0:d5:8b:39:a2:68:7b:7b:51:4f:b7:5c:b3:a1:
                    b4:fc:cf:80:10:c6:01:ec:e9:79:43:1d:81:7d:e6:
                    02:d1:b9:0a:da:5b:cc:60:1a:b6:f1:bc:6e:97:78:
                    21:7a:fc:dc:08:7e:0d:87:7f:9f:07:15:a4:fb:10:
                    91:01:7c:2d:e7:a9:aa:f6:6a:2d:cf:ce:12:d4:4e:
                    3a:f3:cd:4a:f0:0f:a2:88:5a:09:5c:3b:40:6c:3d:
                    49:42:9d:b8:ba:38:63:57:e8:d4:c8:2c:0a:00:8a:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AD:52:01:9D:29:F4:ED:A3:1A:B4:BD:6D:FA:9F:44:EA:F7:A7:CB
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Wq1SAZ0p9O2jGrS9bfqfROr3p8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:30:81:ec:ab:25:b9:29:d3:ab:c1:7f:03:55:66:10:06:c2:
         ff:a0:2b:43:9c:13:db:a8:92:e4:4f:5a:8f:55:0b:fd:b9:ac:
         97:61:d9:ee:34:40:c8:d1:24:f1:e1:64:a1:1e:3b:3c:86:a2:
         c9:23:65:f3:fd:74:4b:3e:7f:d4:5c:6a:43:11:0b:cd:df:17:
         34:8d:e3:6a:47:b0:70:9c:91:50:f6:70:eb:37:0b:54:f1:90:
         7d:42:57:47:fe:cb:0c:2f:56:f3:9e:43:8f:18:61:21:2f:5c:
         aa:28:d0:0c:69:54:ff:a8:f9:63:04:38:c1:8c:91:b5:ab:92:
         e2:cb:e1:10:74:c5:14:96:f4:c8:49:45:98:b3:a8:e1:7b:5b:
         a0:c3:9c:c0:c3:34:a9:c1:38:a4:3f:8f:fd:b8:4f:db:43:8a:
         45:b5:2d:d7:1c:45:24:a0:a2:6d:55:6c:96:51:ca:69:bb:b0:
         2b:06:c0:84:35:0c:73:34:63:dc:67:02:07:2a:47:77:62:35:
         12:fa:51:1c:82:df:c7:78:6b:27:ab:a5:d9:35:b8:5d:03:93:
         c4:32:5d:e6:78:d8:ff:64:60:0f:a2:b9:a2:d7:81:02:2f:7c:
         c6:fa:4b:f0:9b:95:46:6e:8c:a3:49:6c:30:39:77:8c:cd:a3:
         b6:05:12:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org