Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/LFE8fL4BvyAioPG_mgQt5IMfMsc.roa
File:                     LFE8fL4BvyAioPG_mgQt5IMfMsc.roa (raw, json)
Hash identifier:          wqNancQsc7QqRApXpDUHzbPTHLNIUzUZk50Px1Wv85s=
Subject key identifier:   2C:51:3C:7C:BE:01:BF:20:22:A0:F1:BF:9A:04:2D:E4:83:1F:32:C7
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       0185720C4FE2D9998E8BA80226397CDA9A7A
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/LFE8fL4BvyAioPG_mgQt5IMfMsc.roa
Signing time:             Mon 02 Jan 2023 10:34:47 +0000
ROA not before:           Mon 02 Jan 2023 10:34:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43751
IP address blocks:        93.191.216.0/21 maxlen: 24
                          2a02:4b0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:4f:e2:d9:99:8e:8b:a8:02:26:39:7c:da:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Jan  2 10:34:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c513c7cbe01bf2022a0f1bf9a042de4831f32c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:f9:cf:26:27:d2:0b:b9:5c:d2:35:26:6a:
                    18:20:26:7b:f7:2e:e6:22:1f:09:cb:66:36:91:a0:
                    c2:cf:80:06:aa:95:ec:15:8a:46:ce:65:ef:16:3a:
                    cf:ec:9a:3d:53:94:f1:0e:e7:67:29:53:76:d1:26:
                    7b:22:da:ad:1c:02:b1:ad:4e:98:91:6a:f2:14:4e:
                    78:a0:c2:54:53:51:a3:65:fa:92:78:50:69:c9:0c:
                    7a:52:99:0b:ba:ac:0d:ab:c8:e6:59:4f:bf:ec:96:
                    ca:dc:0e:48:b9:b2:16:c8:e7:9e:e8:9e:56:62:af:
                    25:02:c5:3f:36:dc:9c:c9:df:af:fa:be:7a:04:c0:
                    ab:18:a3:c2:9d:d4:a4:c4:31:8a:fa:d5:26:94:6d:
                    74:2e:f3:9e:86:7a:d9:91:9a:52:eb:ac:84:e0:5f:
                    90:d9:20:3e:53:8f:3b:18:2c:a6:74:0c:c0:aa:46:
                    78:36:7a:32:dc:ef:ab:1c:57:19:5d:ad:5c:69:30:
                    b3:47:9a:22:1b:4d:af:71:06:96:3c:41:e1:cb:93:
                    15:c0:22:5c:17:09:eb:86:a7:b6:c5:81:84:09:b6:
                    6c:56:f8:25:a7:28:85:a7:78:d8:3d:1b:c6:f2:ab:
                    8e:46:77:a7:75:60:e4:99:61:6a:33:ea:38:83:97:
                    be:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:3C:7C:BE:01:BF:20:22:A0:F1:BF:9A:04:2D:E4:83:1F:32:C7
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/LFE8fL4BvyAioPG_mgQt5IMfMsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.216.0/21
                IPv6:
                  2a02:4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:b2:67:98:1c:e8:f1:a3:88:b9:d2:63:c3:e0:75:5d:12:41:
         8d:c9:69:2c:64:7d:12:f7:03:1c:aa:ae:55:cb:79:de:62:d9:
         c4:2a:11:bf:cd:aa:88:02:fc:4f:ba:ca:a8:2c:92:e8:19:11:
         e2:e1:54:c6:c2:1f:d0:b8:63:70:58:e7:33:e4:af:d5:80:c9:
         57:7f:da:56:90:f4:78:7c:0a:7b:18:f1:72:27:99:06:0e:15:
         bf:10:15:1d:f1:aa:97:4e:4b:66:1d:e8:dc:76:e6:1b:2a:5b:
         92:ca:5f:45:a9:87:58:36:88:1f:25:d5:4a:94:5d:4e:5c:d8:
         e1:3e:84:58:fd:79:6f:be:79:76:2e:62:47:bb:3b:7b:5f:72:
         29:03:cc:8d:3f:a3:70:82:f1:ad:05:53:48:32:6a:6f:d3:1c:
         92:b0:2d:67:c6:cd:62:cb:3d:e6:95:90:26:45:6e:1c:7a:e9:
         c9:c5:65:e3:0c:67:83:30:92:88:7d:67:ea:9f:5a:ad:75:48:
         7f:72:33:23:45:eb:11:b6:02:b6:35:3d:57:c2:d7:78:0a:1d:
         8c:ae:b6:45:92:49:44:e4:9f:f3:fa:a0:ed:d6:89:3d:a4:a2:
         7b:81:00:77:cf:94:db:c2:21:be:b0:58:95:cb:c3:23:6a:18:
         5e:56:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org