Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/0MvnXrDPaLaZ5KnMaMJ9TjdP_uM.roa
File:                     0MvnXrDPaLaZ5KnMaMJ9TjdP_uM.roa (raw, json)
Hash identifier:          wgwe/V2VvL7g7V07QD4d2P2u9ZunPR7+d/jr6Asjf/g=
Subject key identifier:   D0:CB:E7:5E:B0:CF:68:B6:99:E4:A9:CC:68:C2:7D:4E:37:4F:FE:E3
Certificate issuer:       /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial:       01857255B62AE8E77A58AFE5858D227E9A98
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/0MvnXrDPaLaZ5KnMaMJ9TjdP_uM.roa
Signing time:             Mon 02 Jan 2023 11:54:57 +0000
ROA not before:           Mon 02 Jan 2023 11:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212533
IP address blocks:        193.30.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:55:b6:2a:e8:e7:7a:58:af:e5:85:8d:22:7e:9a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
        Validity
            Not Before: Jan  2 11:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0cbe75eb0cf68b699e4a9cc68c27d4e374ffee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:24:a7:38:97:c0:33:ea:e6:fc:e7:a9:10:
                    9d:cb:6a:af:59:5b:b4:70:24:14:e0:b4:93:08:de:
                    39:05:74:76:f7:52:43:46:a1:b4:b4:d7:ab:6f:94:
                    41:f4:07:b6:2b:80:c2:68:55:09:a1:dd:31:03:18:
                    6c:47:e8:24:44:f2:bc:ef:42:d3:9c:1a:56:a0:38:
                    e3:f0:31:72:46:ea:f3:fb:af:0f:9c:ef:1e:d1:c6:
                    8b:97:46:49:ed:dc:67:d0:e5:1f:a4:24:ae:21:a0:
                    3e:06:21:50:fc:06:e9:b7:69:01:51:99:5c:1f:61:
                    78:3e:12:13:08:9f:70:da:d3:fc:6b:da:15:10:18:
                    52:bd:00:be:20:22:7b:81:b2:3b:fb:c9:36:94:57:
                    77:22:8b:eb:ed:de:dc:da:33:59:69:d5:6a:80:1a:
                    f9:0f:90:c9:1a:6e:68:f3:d9:5e:cf:ae:d3:09:9c:
                    f2:bf:c4:89:66:c3:3f:53:38:e7:2d:7a:3b:86:fa:
                    18:f6:45:78:ff:94:8d:37:de:4b:f8:19:49:94:d0:
                    70:67:38:82:b7:aa:07:0b:83:26:e2:5c:48:c6:d5:
                    43:b7:7a:e1:75:6d:09:f3:cf:71:1b:f6:c2:31:02:
                    d8:ca:ce:06:54:82:6c:d1:1e:0e:1b:1b:5a:42:54:
                    22:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CB:E7:5E:B0:CF:68:B6:99:E4:A9:CC:68:C2:7D:4E:37:4F:FE:E3
            X509v3 Authority Key Identifier:
                keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/0MvnXrDPaLaZ5KnMaMJ9TjdP_uM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:95:26:67:f9:45:8c:30:23:8d:dc:46:53:59:36:00:c7:3f:
         78:dc:de:0a:d3:e4:00:ce:5e:32:ec:b9:5b:03:e3:bc:0b:2e:
         90:3b:34:fc:cd:aa:9b:2b:88:74:16:36:76:cf:8c:83:ef:e2:
         79:ea:af:5d:df:7f:35:91:53:5c:11:eb:5a:ae:50:2c:14:09:
         88:3a:81:54:35:58:f6:7a:87:fe:ba:65:ee:55:a8:ac:c9:30:
         dc:46:2d:0f:d1:50:01:15:10:07:f8:17:68:54:1e:52:16:8c:
         c5:66:23:0b:c1:63:c4:24:59:b6:59:63:c6:73:58:6b:22:2f:
         30:3a:47:6f:2e:ab:30:d7:a2:73:03:cf:44:5c:60:f5:44:a6:
         c1:16:89:13:ba:0d:b7:c5:47:7b:42:20:05:5e:36:b7:b9:73:
         03:11:b2:d6:14:9b:b0:65:65:53:fe:4a:93:e6:f2:65:c3:47:
         8f:43:38:cb:a3:a1:5d:fa:63:25:de:f7:31:75:fb:7d:0c:37:
         bf:e2:9b:32:7c:70:12:68:79:b9:c0:1a:f3:c4:9b:b0:c2:e6:
         96:c6:4d:7f:48:7b:91:92:a8:4e:14:e7:5c:c5:68:90:1e:d1:
         ff:14:fd:36:bb:57:3f:b7:a4:fa:df:d3:ce:69:ee:77:f8:58:
         c9:c1:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org