Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/J_ibs2PQBr43Kpo4PXBOlmSfHeE.roa
File:                     J_ibs2PQBr43Kpo4PXBOlmSfHeE.roa (raw, json)
Hash identifier:          42WS7fAXeaOj/zgZaHbSVIYZ8Nbbyy2iF1OdCj9E73o=
Subject key identifier:   27:F8:9B:B3:63:D0:06:BE:37:2A:9A:38:3D:70:4E:96:64:9F:1D:E1
Certificate issuer:       /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial:       018F591718EEE64DA7295061B5EE0A3641CC
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/J_ibs2PQBr43Kpo4PXBOlmSfHeE.roa
Signing time:             Wed 08 May 2024 16:43:56 +0000
ROA not before:           Wed 08 May 2024 16:43:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400866
IP address blocks:        193.25.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 04:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:17:18:ee:e6:4d:a7:29:50:61:b5:ee:0a:36:41:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
        Validity
            Not Before: May  8 16:43:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=27f89bb363d006be372a9a383d704e96649f1de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:fb:4c:2e:27:3e:18:85:57:b5:b9:a2:a7:
                    1a:ec:db:c3:cd:82:bf:e8:91:dd:26:10:3c:0c:af:
                    23:63:a2:cf:7d:53:f9:f7:12:62:d6:e1:22:5b:df:
                    fa:59:4b:01:22:c2:52:9c:37:36:47:df:56:dd:2c:
                    34:18:69:1f:50:dd:42:bf:e6:5a:ea:51:f3:16:30:
                    5a:5b:db:19:81:b4:4d:4f:23:94:a4:e3:1f:6e:6d:
                    39:6b:fa:b3:6d:a3:e7:75:2a:50:71:23:2e:e5:e0:
                    92:ab:a7:ed:da:58:1d:a2:8e:f5:34:7d:9a:b3:71:
                    36:bf:77:73:d6:61:39:55:e9:9a:60:ca:e3:48:13:
                    26:cc:53:ae:32:b3:0d:52:5d:7a:57:38:d5:3b:e9:
                    d6:a6:4e:60:a1:df:04:88:cf:e7:2d:04:83:08:6c:
                    f3:f8:e8:42:a7:00:55:09:df:58:95:8c:f9:1f:e6:
                    12:70:29:1d:dc:49:32:4b:1a:9b:58:aa:3f:e9:a9:
                    ca:bd:ca:ac:ff:39:d6:4d:62:89:81:f1:4f:ae:f3:
                    06:42:9d:b4:32:3c:ec:d3:5d:de:c1:26:20:44:e1:
                    11:a4:6b:fd:c4:6e:60:83:9e:bb:43:78:6b:fb:8b:
                    1f:a4:0f:8e:bd:0f:70:79:3f:16:71:4c:b1:b7:e9:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:9B:B3:63:D0:06:BE:37:2A:9A:38:3D:70:4E:96:64:9F:1D:E1
            X509v3 Authority Key Identifier:
                keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/J_ibs2PQBr43Kpo4PXBOlmSfHeE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:e3:ed:49:8e:b3:f1:5a:41:b4:82:80:02:38:5a:d3:20:
         51:33:af:1d:df:e4:19:27:4a:a8:82:df:5b:0e:8c:da:a9:25:
         a9:69:6f:cd:60:ba:f6:be:8c:0c:e2:72:55:ad:e8:16:80:4c:
         f3:65:3a:d0:76:0c:96:05:15:f2:b5:be:a0:d9:e0:6f:de:59:
         8a:17:36:5b:dc:60:f2:fd:2c:72:ac:ef:5a:a7:fd:87:68:96:
         e8:f6:4b:0b:df:00:5a:f1:f7:22:dd:0d:29:73:6f:ff:8d:eb:
         ce:e2:15:f3:31:b7:3e:dd:98:54:0f:32:0d:4a:2d:e3:10:ac:
         40:7e:f6:68:ff:9d:33:b2:7d:75:1d:f9:a2:f1:4f:02:e2:8f:
         d4:49:33:4e:ce:87:b3:ff:45:6d:a5:bb:69:5c:bd:df:84:38:
         20:34:fc:2d:1e:bd:d7:35:8f:a9:f0:7e:61:ab:1a:06:ec:7a:
         cf:87:57:6a:4d:d7:d6:10:c1:37:56:5e:c7:b1:82:85:47:66:
         36:6c:7f:3a:19:51:10:1f:e0:ed:ce:e9:c8:d0:63:9c:55:2f:
         06:71:ff:7e:e1:27:30:9e:3a:b8:07:e5:5b:98:13:6c:a7:1e:
         aa:0d:c2:ae:d5:19:7d:df:87:8c:ab:92:24:95:70:8c:84:e1:
         77:f9:d0:26
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 7 05:22:06 2024 by rpki-client on console-ams.rpki-client.org