Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa
File:                     qJyE6N9IbvZh-L_8KgwxIBNHebY.roa (raw, json)
Hash identifier:          G3Ewtg75kP89et/2H0K4b7vK1skaRUJ6SQ8Mqn3A0HA=
Subject key identifier:   A8:9C:84:E8:DF:48:6E:F6:61:F8:BF:FC:2A:0C:31:20:13:47:79:B6
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       01856B89FF34D9409129852C7A5F31DBE6B8
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa
Signing time:             Sun 01 Jan 2023 04:14:43 +0000
ROA not before:           Sun 01 Jan 2023 04:14:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.207.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:89:ff:34:d9:40:91:29:85:2c:7a:5f:31:db:e6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Jan  1 04:14:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a89c84e8df486ef661f8bffc2a0c3120134779b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:e4:9d:d5:18:d1:69:43:93:93:2d:38:d7:
                    71:56:00:82:14:aa:d7:2f:e4:cf:c8:90:c0:92:55:
                    fb:4e:f6:c3:8f:c4:27:3c:f3:9e:a5:40:1e:0b:34:
                    8d:f6:a5:f3:5e:9b:a9:13:69:81:2f:4e:d1:06:b0:
                    7e:45:b3:f6:16:c0:cc:23:6f:67:7e:bb:17:70:14:
                    29:cd:78:3f:98:13:f5:13:8b:c0:c4:a1:d0:cf:99:
                    26:40:1d:6f:e3:7c:d0:b0:c7:2b:73:e6:11:65:b9:
                    6a:3b:09:96:38:41:77:6d:d5:b4:80:36:fd:c9:c5:
                    37:39:74:bd:80:9c:7a:7b:c0:0d:15:f2:e8:b2:9d:
                    49:a9:09:a4:31:d3:6b:dc:a7:0c:d6:77:2e:42:d2:
                    11:4a:07:e7:32:f4:28:df:14:3a:76:7c:70:3b:5f:
                    42:f1:c8:1f:73:c8:d5:70:c9:60:91:3d:9a:7e:1c:
                    92:c7:c1:e4:c9:2a:82:8f:38:ca:50:f0:38:1f:90:
                    a7:33:d7:32:7b:d0:81:16:36:42:31:b3:2e:98:85:
                    b4:12:07:53:3c:24:ce:50:00:5c:4e:50:9c:60:4d:
                    36:75:31:10:dd:d3:04:a1:28:55:21:4c:ba:c6:e0:
                    c1:ae:b2:c9:f7:ea:b6:72:11:d8:8e:e7:ab:f1:53:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9C:84:E8:DF:48:6E:F6:61:F8:BF:FC:2A:0C:31:20:13:47:79:B6
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/qJyE6N9IbvZh-L_8KgwxIBNHebY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.207.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:3a:19:e3:6c:aa:00:19:33:b8:53:cb:d2:bb:7d:40:b5:
         d9:94:d5:e5:19:95:7e:2d:9b:44:1e:83:d3:86:25:26:1a:35:
         98:b4:41:45:3e:c4:24:6c:10:27:5a:58:58:92:f8:ba:ae:e0:
         01:e9:2b:80:99:c6:ca:fe:8f:d8:ee:04:20:49:b8:58:69:ef:
         53:e9:6f:c8:71:7d:c9:26:aa:b3:8d:42:25:4f:e3:35:b5:38:
         51:11:ec:e0:1a:60:63:2b:13:52:b7:69:a6:c5:6b:59:f2:1b:
         26:a6:d6:1e:92:e2:8b:5d:80:2f:62:1a:b0:d5:a4:59:d4:f1:
         46:fb:01:1c:04:1f:3a:50:1b:d5:d0:0a:f4:02:38:40:d6:a8:
         55:28:c1:ef:3d:b8:bc:f3:5f:7b:d8:ae:eb:42:97:5c:c2:1a:
         8e:43:c0:67:0c:7c:8d:73:c4:8c:cc:df:e4:4f:a3:83:ea:4c:
         8f:49:88:4d:b2:a1:14:67:73:ab:16:3f:e1:87:ed:13:2b:72:
         0f:d1:58:bb:a2:6b:66:d0:76:c6:2e:34:91:48:71:27:c5:02:
         01:8f:e5:9b:d9:50:c5:f2:ef:64:1e:f7:3e:08:35:a3:3f:65:
         31:60:62:40:ae:e6:80:d0:b8:af:9b:00:85:ed:1b:f3:63:ba:
         92:45:f7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:27 2024 by rpki-client on console-ams.rpki-client.org