Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o5EcsQAcaNlU-Slh3b5BSATUqfw.roa
File:                     o5EcsQAcaNlU-Slh3b5BSATUqfw.roa (raw, json)
Hash identifier:          26U1Be9NP8L9sOHHHUtFId9eTM8SEGW8jFRVVI0u444=
Subject key identifier:   A3:91:1C:B1:00:1C:68:D9:54:F9:29:61:DD:BE:41:48:04:D4:A9:FC
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       018CC424A0D5F8B0B7DA6ADE81F73671CDAA
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o5EcsQAcaNlU-Slh3b5BSATUqfw.roa
Signing time:             Mon 01 Jan 2024 08:29:43 +0000
ROA not before:           Mon 01 Jan 2024 08:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        93.127.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 08:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:a0:d5:f8:b0:b7:da:6a:de:81:f7:36:71:cd:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Jan  1 08:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a3911cb1001c68d954f92961ddbe414804d4a9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:73:7a:51:a2:00:c3:cf:57:ba:49:22:3e:
                    ea:a6:e8:f2:2d:ee:ae:c6:34:ec:b2:2d:ca:3b:bf:
                    a1:8f:7c:d5:41:f0:b1:4b:39:91:f5:d5:a3:f0:2e:
                    b7:0e:53:04:2d:67:88:e1:68:04:0e:b2:8c:03:20:
                    02:2a:cf:d2:80:65:ac:fb:df:3c:d2:67:e7:6d:32:
                    51:0e:1a:9b:9d:8d:38:ef:42:f0:04:3c:3f:b6:4a:
                    51:bf:85:df:8e:99:a4:02:de:32:66:b3:fa:2f:09:
                    ce:96:94:e9:83:1b:a6:35:54:00:58:6e:d3:4c:1f:
                    ca:66:ff:ae:55:11:bc:4d:d7:48:1b:16:b9:b8:a3:
                    ab:68:16:7f:70:57:1d:78:6c:85:e0:9d:8e:47:a9:
                    4a:31:8b:ea:b8:85:fd:8d:33:7b:1e:d9:9f:af:7a:
                    bd:44:1d:2c:03:c6:89:53:a3:97:0c:09:91:55:0d:
                    b7:81:5f:1b:a9:b1:c9:82:49:f3:b7:4b:c0:20:c6:
                    20:d3:4f:7e:43:df:72:01:bd:99:0a:14:00:5e:f5:
                    f2:ed:e2:33:e9:dd:9e:72:b6:ad:a0:50:4e:8d:a3:
                    20:58:cc:be:bf:46:d7:cf:2f:7b:56:6e:23:54:68:
                    3f:16:01:27:6b:13:33:c2:08:65:1f:66:b8:0c:57:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:91:1C:B1:00:1C:68:D9:54:F9:29:61:DD:BE:41:48:04:D4:A9:FC
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o5EcsQAcaNlU-Slh3b5BSATUqfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.127.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:d5:a9:6b:a1:db:e4:43:fb:f1:be:3c:19:f3:1a:34:d6:
         29:bb:67:ef:48:63:45:6e:8e:da:d7:ea:c7:3e:67:0f:80:a6:
         4e:7d:6f:47:ec:13:72:35:e4:cb:ee:f9:9f:86:cc:09:f7:b8:
         04:29:f1:ce:42:b6:c5:e0:3d:ce:3c:8e:bc:56:5e:aa:34:31:
         fe:cd:ef:32:31:c2:c3:bf:2b:8c:20:fc:b7:ca:9e:5d:4d:39:
         ba:bd:c3:37:49:ba:36:3c:df:2f:d1:cd:1c:63:4a:f0:34:4d:
         1d:8a:d1:ab:33:b2:90:fa:4f:ec:68:44:5c:92:3f:eb:56:e9:
         d5:0f:d3:9c:82:22:cc:60:4e:02:0f:28:7f:90:75:cb:0f:06:
         0f:0b:93:ba:28:3c:4c:df:e3:0c:a8:ee:6e:d0:3d:fa:73:fd:
         a8:2a:ed:05:82:8a:6d:3d:c0:eb:1e:19:0c:86:2d:58:85:7a:
         89:45:0d:04:30:3a:d8:1b:55:51:ab:cc:ba:13:3b:03:f3:49:
         fc:e4:71:99:7a:c7:68:78:ca:34:c8:5e:f7:17:45:43:da:95:
         9d:7b:9e:41:15:05:92:8b:0e:8a:34:00:bf:29:20:0b:c4:b7:
         b2:53:65:bb:ae:11:c5:31:6e:7d:d6:1f:78:1d:22:18:04:b3:
         38:7f:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org