Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa
File:                     _gfFJWkWic0QSZ4vHD-VHnv7wP4.roa (raw, json)
Hash identifier:          lkcpnXfsoonant5dws8Z4XNyvOY+CVRBunyCw7ZSqbY=
Subject key identifier:   FE:07:C5:25:69:16:89:CD:10:49:9E:2F:1C:3F:95:1E:7B:FB:C0:FE
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       018E384D2AAF488728872EA118AACD4499AC
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa
Signing time:             Wed 13 Mar 2024 14:52:45 +0000
ROA not before:           Wed 13 Mar 2024 14:52:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57043
IP address blocks:        93.127.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 14:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:38:4d:2a:af:48:87:28:87:2e:a1:18:aa:cd:44:99:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Mar 13 14:52:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fe07c525691689cd10499e2f1c3f951e7bfbc0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2e:46:ba:64:78:ae:8b:98:5d:5f:ee:40:1c:
                    b4:6b:d4:15:9a:bb:51:3c:c4:f4:e7:a0:db:10:b0:
                    78:70:00:bf:c2:93:03:60:b4:54:68:5e:af:67:4e:
                    d4:3e:de:15:91:69:3f:c6:82:ed:bf:55:28:6a:89:
                    71:a8:15:ee:5a:9f:ce:04:fb:32:08:44:2a:a9:2f:
                    c9:3e:af:e8:e1:cc:fa:ba:21:bf:6d:e4:26:5e:6e:
                    d6:b4:92:bf:4d:89:c6:e9:6a:a0:5b:41:6f:d9:13:
                    18:d5:71:f1:c0:16:bd:cf:52:7a:78:5c:45:8e:42:
                    8a:0d:06:b3:e0:90:e6:1d:af:da:f1:cc:85:13:9b:
                    3b:de:07:15:07:6d:d7:05:3b:66:c9:6d:0f:80:b7:
                    f7:2e:27:78:11:e6:6a:0e:87:b8:81:c3:4d:f3:3c:
                    f3:cc:01:47:3d:9a:ad:f4:ab:52:bc:24:86:e6:35:
                    73:9e:fe:58:18:91:87:2e:6c:1a:6e:cc:93:d4:e3:
                    aa:7c:f3:35:bc:3c:6e:4f:2f:ac:3a:c0:e6:eb:20:
                    73:f6:81:7a:98:49:30:9b:6e:79:8e:03:8e:55:c2:
                    4b:71:56:6d:4a:87:68:b0:59:c4:38:b2:4b:ff:67:
                    2f:19:e4:40:6e:ed:34:bc:08:7e:80:1f:54:fc:56:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:07:C5:25:69:16:89:CD:10:49:9E:2F:1C:3F:95:1E:7B:FB:C0:FE
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/_gfFJWkWic0QSZ4vHD-VHnv7wP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:67:06:31:41:82:ee:fe:3f:5c:5e:6d:0d:6b:66:a7:c6:5d:
         ca:d6:d1:0b:45:aa:31:3d:66:77:4e:03:69:c0:1b:52:3d:aa:
         bf:e7:03:f2:89:a8:1e:2d:d3:99:d5:22:14:4c:20:5d:f6:bd:
         e5:93:7d:42:7e:20:77:f4:b9:a5:28:d3:86:60:55:0c:8a:3d:
         d2:1b:0c:ea:57:a8:a8:92:5b:c0:76:50:33:c2:78:27:91:4a:
         43:6a:a8:23:eb:f4:76:84:6f:0a:8c:a1:e1:65:9f:f3:cf:c1:
         0f:e2:7f:0c:d0:dc:17:17:ce:71:9e:02:bf:35:5c:da:11:63:
         af:a4:54:ee:c2:a7:c4:da:f6:00:6e:7b:a0:c0:6f:5b:38:31:
         f3:2d:cf:47:3e:52:10:e5:45:af:cb:7c:4b:8c:3c:c4:24:f6:
         80:18:b9:4e:0b:ce:2b:34:d4:19:27:c6:da:54:ec:f3:54:6d:
         2b:89:a6:54:1c:4a:90:17:ec:d9:57:7a:13:27:06:f4:9a:5a:
         47:1f:e1:ea:f7:df:7b:c6:d1:99:d6:d2:e0:29:61:0f:a6:7b:
         bb:44:f7:93:4b:30:d6:57:87:bf:67:ba:96:bb:fb:69:d2:3d:
         fa:38:2c:37:c6:a2:32:d1:8e:73:87:80:8f:1c:ed:2f:52:24:
         3e:e0:fe:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org