Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tsb8b8dTym77cD6cBjhM-Rqaeaw.roa
File:                     Tsb8b8dTym77cD6cBjhM-Rqaeaw.roa (raw, json)
Hash identifier:          OgLKHbPrlgdnb6ndf5P3+VuzS86cbdAoxUofLOZueiE=
Subject key identifier:   4E:C6:FC:6F:C7:53:CA:6E:FB:70:3E:9C:06:38:4C:F9:1A:9A:79:AC
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0190A7629789876AB5C92369B9D3D0A96753
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tsb8b8dTym77cD6cBjhM-Rqaeaw.roa
Signing time:             Fri 12 Jul 2024 14:39:34 +0000
ROA not before:           Fri 12 Jul 2024 14:39:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197737
IP address blocks:        193.8.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 07:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a7:62:97:89:87:6a:b5:c9:23:69:b9:d3:d0:a9:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jul 12 14:39:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4ec6fc6fc753ca6efb703e9c06384cf91a9a79ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:00:51:bb:6f:74:8a:79:64:76:f2:32:70:
                    e3:44:5f:f9:4b:b4:35:14:bf:f9:e2:8c:e3:a6:74:
                    9d:1a:ab:4e:fa:d1:13:d8:f8:1e:7e:8c:6d:6b:7d:
                    90:5d:1f:76:9b:f3:86:85:f7:39:6d:dd:0b:e7:80:
                    10:9d:13:2d:5c:3a:ad:53:2f:4c:9f:fe:94:2e:0d:
                    0b:86:09:b1:47:20:68:b3:25:c6:0c:c2:80:f6:21:
                    e5:f2:91:92:91:2e:9c:00:c7:fa:4d:b5:23:f8:99:
                    9d:47:11:67:93:5f:e5:fb:91:14:cb:cf:52:2e:75:
                    71:51:e1:ee:35:46:f4:b1:c4:dd:25:62:ec:3d:94:
                    0f:4a:70:2e:1b:be:d5:3a:1f:77:91:e9:4f:2d:2e:
                    5b:3c:3e:9f:6b:0e:94:e8:50:8b:07:d9:8a:d3:63:
                    86:7d:b9:03:3a:e7:99:d3:26:37:bb:97:dd:bf:17:
                    8c:68:83:c1:db:ad:7c:4c:9c:31:c8:09:96:8f:e7:
                    c1:00:8e:3f:90:5c:bf:c7:10:9c:34:1b:bc:dd:bf:
                    2d:b2:c4:02:05:5d:74:83:2d:a5:3e:64:c3:c9:ce:
                    60:6c:e4:f5:0e:fd:3c:e2:9f:d0:21:d0:5b:4e:71:
                    94:9f:14:e0:69:2e:14:42:cd:42:bf:52:1f:59:75:
                    70:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:FC:6F:C7:53:CA:6E:FB:70:3E:9C:06:38:4C:F9:1A:9A:79:AC
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Tsb8b8dTym77cD6cBjhM-Rqaeaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:aa:d9:ad:92:f4:f4:45:19:0d:be:81:bd:a9:65:a9:c3:
         c6:24:32:1e:aa:fe:dc:93:42:02:80:6c:be:f7:24:9c:cf:1e:
         be:89:36:c1:e5:3a:b8:d0:e5:7d:30:33:16:25:a1:00:18:d3:
         02:0f:2e:1c:97:28:26:e7:d3:f2:79:bf:25:cd:ab:ab:98:d9:
         b6:16:be:33:c7:e6:04:4b:42:3b:10:28:83:aa:14:7c:a7:8d:
         2c:e5:9c:2c:be:ae:99:4f:32:0f:60:a0:9f:6d:3b:ae:2b:44:
         4f:18:7b:d4:0d:68:65:45:98:0e:45:25:b3:e2:7d:1a:87:f1:
         7d:c5:68:96:f9:ac:bf:33:83:db:9c:f5:67:81:5a:0e:27:d2:
         8a:83:03:6a:a1:41:41:14:86:81:fb:af:8d:bb:18:bc:51:25:
         34:d9:87:96:45:bf:8d:ae:54:26:b5:58:f2:45:ab:2c:a5:72:
         07:0a:8d:b1:cf:76:2d:1e:03:9f:18:2e:a5:3b:80:2f:45:14:
         0c:63:33:07:42:97:a8:6b:42:ac:6b:b5:d0:22:ea:2e:4a:c3:
         24:05:0c:b5:05:0b:eb:d6:d7:c5:17:30:81:6e:08:5f:59:48:
         c7:07:a5:75:d6:a4:82:4c:a6:c7:a9:fb:bb:5b:ed:ff:6f:e4:
         87:c4:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 10:43:37 2024 by rpki-client on console-fra.rpki-client.org