Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ABkg2gjMQgtmmmkzeVOa1jFMCx4.roa
File:                     ABkg2gjMQgtmmmkzeVOa1jFMCx4.roa (raw, json)
Hash identifier:          e6GR0389mWe5B3Rjh7Z0eomamRxt4LxbvL4AixBCopI=
Subject key identifier:   00:19:20:DA:08:CC:42:0B:66:9A:69:33:79:53:9A:D6:31:4C:0B:1E
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018CC8026E3A7474827EB9D95257BC8AE559
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ABkg2gjMQgtmmmkzeVOa1jFMCx4.roa
Signing time:             Tue 02 Jan 2024 02:30:51 +0000
ROA not before:           Tue 02 Jan 2024 02:30:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8100
IP address blocks:        193.58.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 18 Feb 2024 11:18:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:6e:3a:74:74:82:7e:b9:d9:52:57:bc:8a:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 02:30:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=001920da08cc420b669a693379539ad6314c0b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:c6:cf:ce:93:9f:31:af:8c:1d:45:65:5d:
                    ad:4d:1d:7e:f8:66:ea:1c:e5:4b:8b:28:f7:89:09:
                    d9:af:62:8c:e9:34:db:a8:f8:8f:03:0e:fc:de:75:
                    bc:f6:6c:c7:6f:2e:f5:38:ab:fb:74:da:20:41:54:
                    f5:e9:34:fc:aa:9b:13:f7:d0:c2:42:42:3f:ea:fc:
                    08:a5:d7:0d:f9:d2:bc:b9:70:bc:93:78:10:af:01:
                    9d:eb:7b:7d:18:de:8c:34:13:d1:38:ae:d7:54:2a:
                    77:d8:85:51:78:d9:7a:3e:5e:da:d3:d5:11:fe:56:
                    d1:c1:db:86:dd:77:76:67:18:f9:21:90:80:f9:8d:
                    a2:85:8b:c6:bf:a6:10:09:9d:73:bf:7e:d2:c6:f3:
                    da:20:da:77:50:f6:7c:b6:23:fc:e7:90:2f:e6:1c:
                    9f:62:45:3b:7c:52:88:b5:c8:6e:c2:dd:8d:61:07:
                    ae:5d:66:d9:c2:2d:31:64:11:2b:31:b3:4a:50:88:
                    ef:8e:67:65:75:47:71:f5:18:f2:ea:98:d3:79:90:
                    dd:99:1d:4d:46:fc:db:79:dd:db:f2:6a:38:6c:c2:
                    c4:40:91:45:87:11:cd:e3:0a:ac:78:8f:af:8f:49:
                    4e:3f:73:42:c2:4a:6d:ba:6b:0b:0f:85:2a:7f:28:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:19:20:DA:08:CC:42:0B:66:9A:69:33:79:53:9A:D6:31:4C:0B:1E
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ABkg2gjMQgtmmmkzeVOa1jFMCx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:31:2d:de:7d:7d:dc:e5:82:7f:bb:cd:83:b1:8d:61:30:
         4e:6e:cc:e5:13:f2:a1:9e:99:23:a6:b6:ef:94:61:75:d1:72:
         c3:94:68:b5:04:2f:ed:30:63:09:4a:76:62:9a:e9:3f:20:3d:
         4e:b5:fd:e2:9e:dd:11:99:d1:c5:a5:51:51:70:26:b5:62:86:
         80:b2:fb:f7:c8:e4:5d:2e:46:9f:85:d8:70:b1:ee:42:78:d5:
         c7:55:a0:98:fd:14:1e:44:47:25:7a:33:38:ef:aa:af:9f:d8:
         a6:f4:d8:2d:5e:ba:a2:4e:be:1a:cc:bd:64:13:37:29:0c:77:
         6e:7e:55:3c:89:3f:59:90:ec:09:7f:87:1a:c9:56:31:f9:4e:
         60:7d:63:b2:0e:82:94:3f:b1:a5:79:35:9a:76:db:c4:46:86:
         a1:02:19:e0:a5:5e:ea:04:89:38:7c:e2:59:52:86:96:51:be:
         7a:3b:77:54:64:15:74:50:43:50:3b:8c:b6:e2:8a:b7:8b:21:
         9e:8c:62:91:6d:d4:97:3a:df:55:01:ce:25:e8:e6:6d:b8:0e:
         0d:34:58:3c:c7:ab:8f:1b:a7:4c:3e:03:88:bc:17:d8:a2:88:
         4b:7a:52:af:ec:f0:82:b1:3a:c0:d4:f8:8e:b6:73:42:0b:31:
         17:b9:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org