Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/93SgwG2Pl7XpxRyG53ENF3_t8AA.roa
File:                     93SgwG2Pl7XpxRyG53ENF3_t8AA.roa (raw, json)
Hash identifier:          fw2bilsL5KJITf7DHYNAWqPKgfkG1zqSIlnSMba4wBI=
Subject key identifier:   F7:74:A0:C0:6D:8F:97:B5:E9:C5:1C:86:E7:71:0D:17:7F:ED:F0:00
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       018A31DFB6EA0AC23AE8E983E7255FB381E4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/93SgwG2Pl7XpxRyG53ENF3_t8AA.roa
Signing time:             Sat 26 Aug 2023 12:44:19 +0000
ROA not before:           Sat 26 Aug 2023 12:44:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        85.133.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 08 Oct 2023 08:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:31:df:b6:ea:0a:c2:3a:e8:e9:83:e7:25:5f:b3:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Aug 26 12:44:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f774a0c06d8f97b5e9c51c86e7710d177fedf000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7d:93:65:5d:ba:b5:3a:c8:de:fd:19:b9:d1:
                    bb:27:22:9f:1d:9b:c9:ac:c8:1a:64:91:be:e9:5c:
                    39:9d:bb:aa:11:ed:92:b2:7a:cd:d5:de:b0:04:ca:
                    45:6e:5b:09:fe:b9:50:04:c0:fb:f9:3c:f4:41:36:
                    af:00:ce:e3:40:b9:05:53:8a:95:51:73:1f:c2:08:
                    05:4c:ee:45:5a:b7:19:d8:cd:6f:23:4b:0d:90:62:
                    5f:b7:1d:c0:c4:b9:5a:a3:a5:ce:da:d2:18:1b:45:
                    7f:b0:34:9f:0a:9a:09:15:25:6f:3f:7b:e0:95:ec:
                    03:19:ff:95:d7:37:9e:63:8e:d6:47:89:65:d3:47:
                    fd:9d:60:cc:30:7c:99:53:67:af:33:93:3c:cd:b2:
                    a1:9b:c0:13:fc:3c:92:8c:33:c0:fa:78:87:a0:16:
                    53:0f:19:2a:58:e6:e5:b3:54:a8:f3:42:30:18:bd:
                    b7:ab:70:07:99:d3:2c:2e:57:ce:31:8f:70:90:8d:
                    b7:11:04:e3:b7:2c:0a:b2:93:7a:84:89:5f:ab:ec:
                    c3:4c:e3:32:4c:f4:95:96:3c:1a:90:b4:b8:96:33:
                    9a:52:c7:3c:eb:5a:3f:cf:4e:65:77:9d:11:4e:50:
                    43:4f:e1:0f:d6:4a:3e:43:7e:2c:3b:ae:8d:8d:9a:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:A0:C0:6D:8F:97:B5:E9:C5:1C:86:E7:71:0D:17:7F:ED:F0:00
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/93SgwG2Pl7XpxRyG53ENF3_t8AA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d2:45:15:bb:60:47:0a:da:e7:5d:1c:66:a3:00:aa:00:15:
         cf:d8:3a:1d:eb:3a:f9:af:c0:99:e7:62:a1:83:b9:1a:41:fa:
         95:fb:bb:8d:ce:90:19:bf:6c:d0:e9:5a:09:3b:28:f1:b4:d3:
         b4:23:2f:77:d8:03:e4:1e:21:95:dc:12:5e:b0:4b:7e:97:31:
         ed:d2:02:27:d3:26:40:95:94:24:2e:a3:95:19:f5:41:30:7b:
         54:cf:df:68:41:1c:35:1b:63:3c:4a:68:ae:63:00:8f:9b:9a:
         0e:f2:81:46:01:59:ec:82:07:b7:14:ce:1d:c6:1d:02:65:98:
         0c:ea:11:07:49:31:a0:9c:b7:76:10:a3:19:71:c8:5b:15:d5:
         ad:05:8a:63:78:a7:e7:f4:60:d7:10:af:93:30:85:88:03:82:
         1e:17:e4:53:84:7a:ff:35:f4:a5:29:ca:c0:52:78:0a:52:19:
         a9:e1:89:5a:7e:46:88:5a:c8:ed:90:e7:28:ae:c0:47:19:1e:
         ca:11:6f:3d:fa:18:7f:86:9a:90:47:25:02:f3:f9:41:6c:02:
         9b:4e:af:08:43:90:d8:22:a3:5f:83:61:7a:6c:45:d7:96:84:
         59:32:ba:9a:32:87:80:12:52:6d:d7:0b:91:f2:67:58:5f:80:
         11:b5:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org