Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/93BTidpTLCKPjYBozxXzOcawJmA.roa
File:                     93BTidpTLCKPjYBozxXzOcawJmA.roa (raw, json)
Hash identifier:          GXUlkyybLmHuTIsuK+jf0jGQ5GbVeWmPq+BzstWcGNE=
Subject key identifier:   F7:70:53:89:DA:53:2C:22:8F:8D:80:68:CF:15:F3:39:C6:B0:26:60
Certificate issuer:       /CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
Certificate serial:       01856BA58851ABA2AD383EF26FAC055BE004
Authority key identifier: 7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/93BTidpTLCKPjYBozxXzOcawJmA.roa
Signing time:             Sun 01 Jan 2023 04:44:48 +0000
ROA not before:           Sun 01 Jan 2023 04:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24904
IP address blocks:        185.215.12.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:a5:88:51:ab:a2:ad:38:3e:f2:6f:ac:05:5b:e0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e181bf07a13efc8a3430b4264c9152141d0cd64
        Validity
            Not Before: Jan  1 04:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7705389da532c228f8d8068cf15f339c6b02660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:64:f3:43:88:3c:a0:8c:38:4b:40:93:ab:
                    27:5a:30:24:82:6f:72:ea:51:e6:60:44:cc:fe:24:
                    f9:d3:7b:47:15:6a:f9:76:c1:a3:6e:a6:94:95:a6:
                    e8:1a:4f:6f:d5:be:aa:7b:e7:a7:1c:16:b5:dd:a5:
                    95:bc:48:1d:01:f8:c4:01:e6:58:8e:3b:a1:ab:6c:
                    9b:3d:f8:2a:f9:99:f8:58:57:65:23:1d:84:e1:91:
                    4c:36:bf:1e:54:df:aa:2b:cf:a0:ff:34:07:bd:3e:
                    6f:4a:34:b6:64:c3:97:58:2c:1a:88:cf:47:12:34:
                    1f:3e:43:c0:44:c6:6f:7e:27:b2:a6:a1:ca:20:e0:
                    69:e1:95:24:23:52:28:03:9c:0b:b1:58:2c:cd:65:
                    8b:c7:fa:04:78:7a:95:5e:48:a5:db:6e:6a:03:6a:
                    83:e0:5b:13:5b:5b:36:12:26:eb:f8:54:c5:00:4e:
                    79:ea:a7:e1:a3:0e:84:3f:fd:8d:7e:6f:e8:c1:b1:
                    37:45:06:27:4c:5a:19:b5:50:27:ff:ec:9d:5a:3c:
                    e6:d2:e6:95:07:3c:f3:8d:d7:76:1b:12:0a:0d:d7:
                    44:be:57:e9:6e:27:06:22:35:17:92:81:37:91:24:
                    54:8c:52:50:1b:46:32:9c:85:1d:ac:29:8c:c6:a1:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:53:89:DA:53:2C:22:8F:8D:80:68:CF:15:F3:39:C6:B0:26:60
            X509v3 Authority Key Identifier:
                keyid:7E:18:1B:F0:7A:13:EF:C8:A3:43:0B:42:64:C9:15:21:41:D0:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhgb8HoT78ijQwtCZMkVIUHQzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/93BTidpTLCKPjYBozxXzOcawJmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4e7bce-5fce-4b8d-a983-06c066883f6a/1/fhgb8HoT78ijQwtCZMkVIUHQzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:49:91:f2:67:85:7f:d0:ae:d4:8c:fe:03:ef:42:2d:50:
         88:2d:db:6f:1e:6e:44:7d:2c:0a:85:4b:75:84:e3:4c:14:99:
         80:08:14:fc:04:da:90:9c:28:b3:9f:80:ba:9a:b0:4a:52:50:
         1d:3b:01:45:20:93:b0:ef:08:f6:35:3d:c7:0b:29:05:56:cd:
         7a:14:3a:75:5a:ab:e6:89:a5:25:c9:ee:a0:ef:a9:33:f5:4f:
         1e:13:1f:a3:8b:61:8f:74:2a:1c:96:42:e1:a5:c4:63:52:92:
         44:12:03:64:96:f3:d3:67:e7:b7:3f:0b:e6:b6:75:0b:f2:86:
         d8:2f:3c:2b:f0:64:0c:b0:11:82:91:b5:42:93:c6:13:73:6f:
         64:e8:a8:80:3a:a2:a4:da:cd:06:07:27:e6:fa:61:53:94:b3:
         c8:91:95:ff:a8:1d:69:6e:87:b0:e6:e8:5c:0e:35:c7:87:1d:
         e5:3f:38:aa:61:f4:96:dd:06:ca:e9:4c:3b:aa:82:aa:40:8a:
         09:71:27:ee:11:c2:89:68:a3:88:53:d3:8f:14:a0:fd:d7:ec:
         02:9b:b2:58:af:a5:55:31:69:79:e0:93:63:ca:27:0d:c7:16:
         07:83:04:c9:50:b0:cf:f4:9d:d8:08:58:90:c2:19:c7:63:f6:
         4d:2a:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:09 2024 by rpki-client on console-fra.rpki-client.org