Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tt2UgN_BZg_mefD3tBIAIYxX6x8.roa
File:                     Tt2UgN_BZg_mefD3tBIAIYxX6x8.roa (raw, json)
Hash identifier:          ag+oI3I/mCFY5xGQnQOvkqCofwuMBjcMPFGdzyAkKoI=
Subject key identifier:   4E:DD:94:80:DF:C1:66:0F:E6:79:F0:F7:B4:12:00:21:8C:57:EB:1F
Certificate issuer:       /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial:       0185968FB6B1F0FE7498305E97402C30C8A8
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tt2UgN_BZg_mefD3tBIAIYxX6x8.roa
Signing time:             Mon 09 Jan 2023 12:44:38 +0000
ROA not before:           Mon 09 Jan 2023 12:44:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47277
IP address blocks:        193.3.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:96:8f:b6:b1:f0:fe:74:98:30:5e:97:40:2c:30:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
        Validity
            Not Before: Jan  9 12:44:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4edd9480dfc1660fe679f0f7b41200218c57eb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:4e:b6:c5:5b:d6:5b:77:4c:43:31:d6:d5:
                    33:e4:d4:03:86:ce:45:6d:a7:60:bf:69:be:f3:ea:
                    ff:51:94:0e:f2:b5:f6:9e:c6:7d:51:ab:f4:a1:5a:
                    fd:28:c1:be:a4:07:67:39:d5:0d:e9:99:a0:fa:48:
                    55:08:77:93:39:67:2d:b5:25:4a:16:c3:f3:2e:ba:
                    b2:cd:63:57:e8:7c:f4:23:8a:4d:b4:97:79:1e:bb:
                    db:f3:0f:c9:e5:60:a0:af:e1:b3:31:ff:38:7e:a1:
                    9b:61:d4:ea:c4:05:89:82:6a:92:2f:29:15:ae:0b:
                    af:04:fb:58:01:c8:88:eb:88:6d:22:04:d0:85:f3:
                    46:ac:ab:5a:b0:b2:dc:86:77:22:da:16:e7:a8:de:
                    cb:69:6a:79:53:ff:f7:0e:2d:49:0c:74:e7:8a:87:
                    cc:4f:e1:70:86:e1:b3:3d:1d:98:97:30:7e:cc:ba:
                    5a:7e:28:62:c1:2f:27:6e:af:d9:9e:9d:69:80:0d:
                    a8:a8:a9:ed:d3:84:a1:08:2b:c2:7b:c6:35:fa:e9:
                    ed:3c:63:77:76:49:12:60:60:01:b3:fb:99:aa:f6:
                    e2:9f:0e:6a:b2:fa:94:33:52:8b:79:fc:37:88:93:
                    7c:34:f1:bd:94:42:de:fc:49:cd:3d:f6:49:04:87:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:94:80:DF:C1:66:0F:E6:79:F0:F7:B4:12:00:21:8C:57:EB:1F
            X509v3 Authority Key Identifier:
                keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tt2UgN_BZg_mefD3tBIAIYxX6x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:1b:67:df:ed:42:ee:53:f3:dd:5a:6c:8b:d1:20:21:ad:
         a8:c1:28:47:59:ac:97:00:55:b6:23:fa:19:40:70:9b:b8:06:
         69:f0:3f:fc:f3:f2:ec:07:7c:c3:e1:b7:07:f7:b0:14:b5:5f:
         99:8b:62:ff:50:f2:fc:a6:dd:d2:60:72:6f:f0:61:c0:56:a7:
         ae:36:d9:04:5c:e7:f3:ed:63:12:1e:72:89:36:74:6f:89:08:
         e6:48:3f:5b:70:5e:fe:4e:2b:ab:25:59:46:5c:de:1b:73:6f:
         fd:cd:15:5a:d8:9b:b4:4a:4b:1d:44:73:ff:fa:cd:6d:de:57:
         35:ed:99:62:5d:fb:15:19:e4:36:22:81:6c:d4:2d:ee:3a:f9:
         69:14:ad:29:f7:d4:ac:20:41:10:6b:23:17:55:6d:a3:2f:09:
         98:5b:ab:f4:b2:63:b3:bd:34:87:c8:80:af:67:0c:57:f7:61:
         44:cb:7a:ff:e5:ec:94:9c:f6:de:72:c0:2e:9d:30:1c:6e:ee:
         c4:1f:e0:01:c8:75:9b:bc:9d:17:4c:d0:b2:6b:8d:36:0c:42:
         e4:63:00:1d:1a:34:75:e9:cd:e9:92:70:a8:62:bc:be:fa:a3:
         15:1e:c2:fc:91:e8:bf:d0:71:ed:1b:87:1e:86:9a:bc:fe:b3:
         78:cc:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:34 2024 by rpki-client on console-fra.rpki-client.org