Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RxCGgUhWHiT_VijUAIxSID1Uiro.roa
File:                     RxCGgUhWHiT_VijUAIxSID1Uiro.roa (raw, json)
Hash identifier:          8rdF6Ge1vGTHnSTKueBWOOu5fQSSPK/PtoWKT2vzPKc=
Subject key identifier:   47:10:86:81:48:56:1E:24:FF:56:28:D4:00:8C:52:20:3D:54:8A:BA
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0189D1E477AE3714A44F168B663CE79C735A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RxCGgUhWHiT_VijUAIxSID1Uiro.roa
Signing time:             Mon 07 Aug 2023 21:25:58 +0000
ROA not before:           Mon 07 Aug 2023 21:25:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.33.48.0/24 maxlen: 24
                          91.224.22.0/24 maxlen: 24
                          91.224.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 10 Oct 2023 21:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d1:e4:77:ae:37:14:a4:4f:16:8b:66:3c:e7:9c:73:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Aug  7 21:25:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4710868148561e24ff5628d4008c52203d548aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:1e:6f:b2:eb:a9:04:72:64:70:0e:97:b9:
                    52:03:ed:f8:60:c5:c7:85:ec:c8:0f:3d:ad:ff:95:
                    7c:91:46:f3:0a:9c:48:c1:39:c0:2e:dc:5f:1b:71:
                    e2:57:09:eb:94:45:cc:80:f0:14:04:4f:ac:57:02:
                    aa:61:a5:89:0a:f8:74:96:a4:2d:59:e1:50:c4:5e:
                    76:88:60:a1:63:3c:1b:42:f1:25:5c:46:11:71:54:
                    2a:19:4a:9d:7e:e6:47:31:d2:ba:48:44:78:56:e3:
                    e7:de:07:22:db:0d:63:a3:54:6d:ce:2b:2b:d5:5c:
                    2b:f7:07:8d:25:1e:ec:22:75:dc:98:9a:c5:d9:f9:
                    14:0d:79:3f:1b:ef:0a:6a:bc:6d:8c:bf:64:39:48:
                    aa:1c:87:cc:b7:a2:fe:83:9d:f4:ba:f5:0e:7a:56:
                    a5:5f:d4:61:95:21:26:4c:70:3b:a2:c9:4c:d0:dc:
                    d6:12:65:e5:d2:f4:97:11:36:af:f5:ea:69:f8:e2:
                    dd:0e:03:5d:93:0e:79:56:d3:68:bf:54:5a:e1:c7:
                    10:60:54:c3:4a:d6:b9:d9:77:69:3b:05:42:15:6c:
                    93:a6:5b:51:02:56:75:c5:8e:36:bf:ce:71:dd:5d:
                    dd:26:a7:c5:ea:48:ae:68:85:ee:f7:7d:b7:fa:fd:
                    28:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:10:86:81:48:56:1E:24:FF:56:28:D4:00:8C:52:20:3D:54:8A:BA
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/RxCGgUhWHiT_VijUAIxSID1Uiro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.224.22.0/23
                  193.33.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:39:d1:82:54:ec:a3:5b:f6:af:ad:80:42:43:6d:f2:2c:75:
         1a:b3:53:2f:dc:64:52:0e:fc:01:a5:c2:97:10:82:f3:94:79:
         71:13:ac:73:f3:a2:50:ee:ee:9c:e3:28:40:0d:7b:a5:af:70:
         e4:ca:7b:56:ac:da:95:b3:61:4b:12:87:c7:20:e5:25:ce:2c:
         ec:1e:0b:0a:8f:ba:95:7f:ee:87:73:b2:30:96:b4:96:31:58:
         b1:96:e4:59:c6:ea:d2:d5:eb:e9:1c:e0:7c:6e:97:6f:36:04:
         b5:92:66:16:85:74:96:13:10:e6:18:36:17:a1:0c:66:ee:a7:
         c0:fa:bf:00:4f:a1:33:8d:64:bb:83:87:bd:23:39:33:ac:f1:
         46:d7:7f:b1:38:fd:92:b0:dc:ee:0c:b1:8e:7a:a7:99:23:71:
         33:24:fc:43:9f:9c:09:d6:41:4d:20:22:59:41:ce:70:74:3e:
         fd:0b:3e:f7:a3:76:14:81:7e:25:b3:66:8f:8b:b3:46:14:4d:
         05:e0:50:a8:fe:ab:2a:2b:f9:c7:93:a0:d4:2a:e7:18:a7:92:
         89:97:9d:ea:fc:a9:23:36:8d:8d:05:76:ad:e3:8c:e9:24:57:
         15:a1:65:44:6f:c4:5c:50:8e:68:5c:62:ca:1e:d3:da:a9:35:
         7b:c4:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org