Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa
File:                     qg991FrG---bKnizthk4D_CmACI.roa (raw, json)
Hash identifier:          wt7LOazs6BmbrmWRGLOA1g5QFRdRdn1tmhP4ug2zS/Y=
Subject key identifier:   AA:0F:7D:D4:5A:C6:FB:EF:9B:2A:78:B3:B6:19:38:0F:F0:A6:00:22
Certificate issuer:       /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial:       01867908FB39644DD28D7BCE7BAB14879B62
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa
Signing time:             Wed 22 Feb 2023 12:11:17 +0000
ROA not before:           Wed 22 Feb 2023 12:11:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210001
IP address blocks:        93.187.39.0/24 maxlen: 24
                          185.52.116.0/24 maxlen: 24
                          2a00:dd00:5::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 25 May 2023 08:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:79:08:fb:39:64:4d:d2:8d:7b:ce:7b:ab:14:87:9b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
        Validity
            Not Before: Feb 22 12:11:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aa0f7dd45ac6fbef9b2a78b3b619380ff0a60022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:8d:fe:74:75:c5:2c:91:76:ee:97:eb:a3:
                    32:33:ad:7f:df:d3:0d:b2:5d:ce:69:54:0d:90:e8:
                    47:eb:94:e9:da:fc:d0:ac:f7:5d:41:fb:0a:b0:6f:
                    05:94:32:00:65:bf:ec:f1:03:c0:04:fd:4b:be:63:
                    62:45:1a:ae:1b:85:4e:db:52:59:82:90:f1:11:47:
                    e1:d4:48:93:53:04:26:18:a6:5d:4c:6b:ed:9a:3b:
                    39:96:2f:43:99:6f:40:5f:4c:00:1b:a2:9d:32:d0:
                    e1:2d:7b:c2:fa:60:13:4b:41:84:af:a6:ab:24:35:
                    fd:ac:53:18:9e:8c:12:ab:7e:a8:ba:ae:27:9d:c2:
                    eb:bc:2a:b7:1e:3e:5f:a0:0f:ae:58:fa:7b:81:35:
                    ec:ac:92:a3:f0:35:75:4c:37:03:64:43:a2:14:c6:
                    a9:de:d3:44:b9:ef:f6:d7:c2:2f:2b:37:af:e9:28:
                    8f:47:1b:ba:e7:83:d7:ae:78:ba:25:ea:d0:6b:e4:
                    26:2b:18:12:88:33:71:fa:5a:94:d9:96:ba:4e:5d:
                    3e:93:00:f4:75:8f:01:a3:a9:e8:f0:a6:d1:03:c4:
                    99:33:97:10:65:91:e0:81:6f:99:82:b7:f7:c2:55:
                    16:57:6d:37:fb:36:ae:cd:ce:00:a4:f8:c3:01:cb:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:7D:D4:5A:C6:FB:EF:9B:2A:78:B3:B6:19:38:0F:F0:A6:00:22
            X509v3 Authority Key Identifier:
                keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/qg991FrG---bKnizthk4D_CmACI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.187.39.0/24
                  185.52.116.0/24
                IPv6:
                  2a00:dd00:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:35:86:f3:25:fe:45:20:6e:2d:7a:f1:30:9f:04:27:40:1e:
         72:81:dd:87:05:0a:68:de:9a:3c:c2:ea:15:85:dc:ca:e3:81:
         0c:4a:8b:4d:e5:9c:6c:8a:57:ca:0a:3e:c6:f5:54:59:dd:32:
         dc:10:5a:fd:93:04:ed:76:42:b5:17:ba:49:b3:04:e1:51:e5:
         e0:26:dc:80:4f:53:d2:06:55:c5:92:40:b1:c8:22:ad:75:79:
         f9:84:31:27:64:b9:c5:e1:61:0a:8b:50:50:30:2d:2d:87:49:
         1b:02:1b:67:8b:57:97:31:b0:a8:4c:68:bf:84:12:0b:5d:44:
         ae:fe:1d:ba:9d:8d:a1:0c:8a:b7:98:1d:b8:df:e5:f0:3a:e5:
         92:44:9d:54:61:7d:fa:26:26:01:ba:29:61:db:50:d7:a0:45:
         bc:54:bd:72:b7:53:6e:82:31:28:07:84:d8:3f:f5:36:04:33:
         e5:6f:2c:1a:56:ae:d3:35:90:85:80:cc:c0:4a:5d:c1:8d:11:
         5e:48:ca:aa:6a:e6:7f:84:1b:c6:d8:87:9e:2c:54:f7:3e:3f:
         af:e7:3a:06:7a:03:33:9f:af:4a:30:a2:3c:ce:42:5a:ab:ff:
         40:ea:eb:45:1a:88:07:f9:68:01:fa:18:92:2f:c9:9d:7a:14:
         c6:f9:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:36 2024 by rpki-client on console-fra.rpki-client.org