Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/igEG_3UJ3gAAPbm_UQ8rQmmu2Zw.roa
File:                     igEG_3UJ3gAAPbm_UQ8rQmmu2Zw.roa (raw, json)
Hash identifier:          PCpQz/BJlTnoU67fmAFl+5lJv+8wo8Giu70o01dE5ww=
Subject key identifier:   8A:01:06:FF:75:09:DE:00:00:3D:B9:BF:51:0F:2B:42:69:AE:D9:9C
Certificate issuer:       /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial:       0192499B5355757F4BC8CB1C7D45173DBDBA
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/igEG_3UJ3gAAPbm_UQ8rQmmu2Zw.roa
Signing time:             Tue 01 Oct 2024 19:42:49 +0000
ROA not before:           Tue 01 Oct 2024 19:42:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49531
IP address blocks:        93.92.32.0/21 maxlen: 21
                          93.92.32.0/24 maxlen: 24
                          93.92.33.0/24 maxlen: 24
                          93.92.34.0/23 maxlen: 23
                          93.92.36.0/23 maxlen: 23
                          93.92.38.0/23 maxlen: 23
                          93.186.48.0/20 maxlen: 20
                          93.186.48.0/23 maxlen: 23
                          93.186.50.0/23 maxlen: 23
                          93.186.52.0/23 maxlen: 23
                          93.186.54.0/23 maxlen: 23
                          93.186.56.0/23 maxlen: 23
                          93.186.58.0/23 maxlen: 23
                          93.186.60.0/23 maxlen: 23
                          93.186.62.0/23 maxlen: 23
                          94.159.0.0/17 maxlen: 17
                          94.159.0.0/18 maxlen: 18
                          94.159.0.0/23 maxlen: 23
                          94.159.2.0/23 maxlen: 23
                          94.159.4.0/23 maxlen: 23
                          94.159.6.0/23 maxlen: 23
                          94.159.8.0/23 maxlen: 23
                          94.159.10.0/23 maxlen: 23
                          94.159.12.0/23 maxlen: 23
                          94.159.14.0/23 maxlen: 23
                          94.159.16.0/23 maxlen: 23
                          94.159.18.0/23 maxlen: 23
                          94.159.20.0/23 maxlen: 23
                          94.159.22.0/23 maxlen: 23
                          94.159.24.0/23 maxlen: 23
                          94.159.26.0/23 maxlen: 23
                          94.159.28.0/23 maxlen: 23
                          94.159.30.0/23 maxlen: 23
                          94.159.32.0/23 maxlen: 23
                          94.159.34.0/23 maxlen: 23
                          94.159.36.0/23 maxlen: 23
                          94.159.38.0/23 maxlen: 23
                          94.159.40.0/23 maxlen: 23
                          94.159.42.0/23 maxlen: 23
                          94.159.44.0/23 maxlen: 23
                          94.159.46.0/23 maxlen: 23
                          94.159.48.0/23 maxlen: 23
                          94.159.50.0/23 maxlen: 23
                          94.159.52.0/23 maxlen: 23
                          94.159.54.0/23 maxlen: 23
                          94.159.56.0/23 maxlen: 23
                          94.159.58.0/23 maxlen: 23
                          94.159.60.0/23 maxlen: 23
                          94.159.62.0/23 maxlen: 23
                          94.159.64.0/19 maxlen: 19
                          94.159.64.0/23 maxlen: 23
                          94.159.66.0/23 maxlen: 23
                          94.159.68.0/23 maxlen: 23
                          94.159.70.0/23 maxlen: 23
                          94.159.72.0/23 maxlen: 23
                          94.159.74.0/23 maxlen: 23
                          94.159.76.0/23 maxlen: 23
                          94.159.78.0/23 maxlen: 23
                          94.159.80.0/23 maxlen: 23
                          94.159.82.0/23 maxlen: 23
                          94.159.84.0/23 maxlen: 23
                          94.159.85.0/24 maxlen: 24
                          94.159.88.0/21 maxlen: 21
                          94.159.88.0/22 maxlen: 22
                          94.159.92.0/24 maxlen: 24
                          94.159.107.0/24 maxlen: 24
                          94.159.108.0/22 maxlen: 22
                          94.159.112.0/21 maxlen: 21
                          94.159.120.0/22 maxlen: 22
                          94.159.124.0/22 maxlen: 22
                          185.42.108.0/22 maxlen: 22
                          2a04:8f00::/29 maxlen: 29

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 15:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:49:9b:53:55:75:7f:4b:c8:cb:1c:7d:45:17:3d:bd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
        Validity
            Not Before: Oct  1 19:42:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8a0106ff7509de00003db9bf510f2b4269aed99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:6a:41:a1:cb:48:28:e5:6c:80:46:c5:d2:
                    e6:b8:b2:62:a0:d4:e7:51:d5:df:d7:ba:b4:68:22:
                    9d:81:b3:c7:f1:33:a3:5d:14:b6:d6:7a:76:c6:2b:
                    01:65:2b:b7:6e:d5:4d:78:5a:71:b6:11:a0:f0:85:
                    8d:7c:9d:c4:62:1b:be:06:dd:c8:5c:91:3d:12:70:
                    18:cd:50:d9:00:9e:ab:03:96:b4:f4:7c:c5:77:da:
                    58:35:c8:91:c7:94:e6:16:e0:27:d5:d2:c3:27:bb:
                    92:36:0b:ff:c0:09:c2:ec:e8:5a:35:e9:78:d9:15:
                    75:de:63:ac:c2:e7:ff:70:98:44:98:77:8e:06:f6:
                    dd:8d:0b:af:84:b9:44:e6:d9:d6:43:a3:da:0e:6f:
                    26:d6:ad:77:c7:57:b6:01:e2:bb:dc:e1:73:6b:11:
                    96:6b:6e:7c:87:a5:47:a5:a6:0b:29:0d:2d:42:f7:
                    bb:36:0e:be:bf:07:26:b8:e4:7e:fb:0e:c6:14:8f:
                    fc:ae:4a:ea:66:be:bf:c0:74:86:5e:65:96:92:16:
                    83:15:e3:ae:98:34:ed:09:6b:ae:60:ea:a9:2b:48:
                    3f:2a:27:6a:c3:0b:a7:51:d0:f2:4d:0b:6b:f9:49:
                    75:27:80:f5:ab:d9:b4:16:cd:21:53:da:81:3a:79:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:01:06:FF:75:09:DE:00:00:3D:B9:BF:51:0F:2B:42:69:AE:D9:9C
            X509v3 Authority Key Identifier:
                keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/igEG_3UJ3gAAPbm_UQ8rQmmu2Zw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.32.0/21
                  93.186.48.0/20
                  94.159.0.0/17
                  185.42.108.0/22
                IPv6:
                  2a04:8f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:05:8b:b2:ce:7a:f6:43:2a:3a:c9:b5:56:fc:7f:95:29:
         13:db:f2:ee:e5:41:d2:ef:22:09:40:b9:aa:88:bf:de:53:db:
         96:4c:a8:f4:a0:56:09:fe:74:a8:81:9d:83:1e:99:cd:60:51:
         2b:40:1e:fb:85:0a:af:8f:49:28:26:97:64:56:11:38:e4:d3:
         bb:7f:9c:34:16:e6:ec:a8:da:99:1a:81:2c:9f:1b:36:7c:93:
         c3:fe:1e:d1:6d:b5:62:5c:ec:4e:cb:17:91:6b:c4:73:b8:56:
         9d:6e:af:81:b8:85:69:7a:be:55:f2:b5:d2:6d:eb:ae:69:a1:
         a4:90:8a:54:73:e8:b0:ef:96:5a:8c:f8:78:aa:8d:67:b1:a1:
         1a:5d:83:56:e0:34:b3:e7:03:16:84:7a:01:c6:d5:fa:3a:1c:
         e7:1f:53:15:8e:f0:31:7a:fb:10:2b:43:b1:4e:47:58:38:73:
         93:e8:c4:00:b3:3f:d1:05:ba:dc:24:4b:3c:52:09:31:c2:7d:
         e5:20:92:8a:c2:e5:15:50:1c:7c:e8:72:36:4c:db:2a:cd:d4:
         5e:3e:c8:06:a1:b7:2e:67:06:dc:b8:19:79:2e:d1:23:0b:7d:
         43:81:21:ec:6d:cc:a8:a8:ba:9b:2c:36:61:aa:ee:a8:34:d1:
         e2:df:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 17:45:13 2024 by rpki-client on console-fra.rpki-client.org