Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/XiozrFQYkGmxjKiDCHSk1SY1Gxw.roa
File:                     XiozrFQYkGmxjKiDCHSk1SY1Gxw.roa (raw, json)
Hash identifier:          99oieR5Ya5dLJzyTqjyrl9dcsp02KUDGQTruDc/7dHI=
Subject key identifier:   5E:2A:33:AC:54:18:90:69:B1:8C:A8:83:08:74:A4:D5:26:35:1B:1C
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       01856EB8FB96B055E684BDDAF8E50E7B8D39
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/XiozrFQYkGmxjKiDCHSk1SY1Gxw.roa
Signing time:             Sun 01 Jan 2023 19:04:54 +0000
ROA not before:           Sun 01 Jan 2023 19:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209737
IP address blocks:        93.190.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:b8:fb:96:b0:55:e6:84:bd:da:f8:e5:0e:7b:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Jan  1 19:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5e2a33ac54189069b18ca8830874a4d526351b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:30:b9:15:56:4e:3d:eb:18:d6:3a:7a:8b:
                    21:9d:e2:ca:2a:c1:39:0e:63:08:4b:e6:63:5b:97:
                    b4:a3:27:1f:e2:0a:d1:15:e0:61:d9:d9:b6:5a:76:
                    0b:a4:96:59:d7:f5:6f:3b:e6:dd:3b:75:16:eb:18:
                    5c:0d:85:bf:7f:3d:fe:59:35:4c:64:fe:b9:5e:3a:
                    44:67:11:d2:8d:75:4e:07:44:3c:60:e8:3c:60:14:
                    d3:80:db:1e:4e:b9:a6:bb:a8:fe:49:c3:75:a3:5d:
                    9a:89:56:95:50:d7:98:a6:23:5f:cf:15:f8:83:19:
                    d1:a8:74:9c:a9:b6:dd:6b:74:f1:0e:e9:54:4f:9d:
                    dd:2a:85:12:22:8d:ad:10:2e:f2:5c:ac:38:6b:42:
                    23:3b:bb:2e:a6:e0:5f:e6:1a:ba:9e:30:84:31:c6:
                    1d:59:06:98:9c:49:a7:60:4c:76:09:c8:1f:fb:39:
                    46:cf:30:e6:c4:ad:17:a1:0e:0d:62:8e:14:e1:55:
                    5e:63:47:a0:68:c2:84:2d:44:85:c8:e4:25:b7:81:
                    3f:85:10:be:85:1e:71:39:6c:a1:e5:d9:25:dd:84:
                    94:7e:01:26:95:50:f8:3e:21:e6:a9:ae:dc:dd:c0:
                    5d:cd:d8:cf:cd:83:09:7e:31:0d:47:62:0a:78:51:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2A:33:AC:54:18:90:69:B1:8C:A8:83:08:74:A4:D5:26:35:1B:1C
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/XiozrFQYkGmxjKiDCHSk1SY1Gxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:0f:a0:d9:cb:6c:4a:33:ee:06:90:2c:8c:5b:28:3d:e1:
         b8:e7:92:a5:c3:36:c1:2d:66:33:68:09:da:fe:6a:46:4e:68:
         a1:3c:9a:ec:ec:ef:b2:60:3a:f7:10:f7:be:62:8a:44:09:4b:
         38:d0:8d:18:f4:3f:31:b5:6d:e3:42:f0:59:a6:d6:d5:a5:df:
         94:ea:ca:d1:48:a7:59:9e:77:e9:58:5b:fb:20:4c:23:ec:ea:
         3b:9e:51:2e:a1:53:e4:a1:fc:aa:7e:dc:3f:3e:78:96:bf:df:
         c2:8b:84:c2:24:f7:a7:57:f6:37:ab:5f:d4:f2:6d:01:d2:fd:
         b5:69:6a:5c:b3:76:d1:15:3f:f2:58:f4:fd:78:9d:85:f7:28:
         49:01:16:7f:96:6d:0a:fc:d6:0e:6a:2b:71:3c:fe:d7:79:23:
         0c:ac:98:30:49:26:6e:5c:a5:26:ab:ec:5a:5a:bb:7a:eb:5b:
         b3:a5:22:9e:70:b4:f1:22:51:56:f1:9a:96:f4:25:21:95:3f:
         58:4b:94:1c:57:4b:e7:04:6d:4e:f9:c9:c9:56:97:c4:8d:17:
         63:49:69:5f:da:97:40:12:5b:72:a9:f9:0a:e3:6a:26:fa:0f:
         6b:4e:c2:5c:39:cd:49:96:85:fa:57:d7:be:3e:3c:10:c8:b0:
         15:b0:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:00 2024 by rpki-client on console-ams.rpki-client.org