Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/egoNNFTpW0jW6PrIRopsuH2IAA8.roa
File:                     egoNNFTpW0jW6PrIRopsuH2IAA8.roa (raw, json)
Hash identifier:          mlvYs5z413wPDdfBJIN9rJbW9zYEy90e6HaZRtzxQ3I=
Subject key identifier:   7A:0A:0D:34:54:E9:5B:48:D6:E8:FA:C8:46:8A:6C:B8:7D:88:00:0F
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       0188208E319ADE5B773945D632D30289183D
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/egoNNFTpW0jW6PrIRopsuH2IAA8.roa
Signing time:             Mon 15 May 2023 17:56:09 +0000
ROA not before:           Mon 15 May 2023 17:56:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59974
IP address blocks:        185.69.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:8e:31:9a:de:5b:77:39:45:d6:32:d3:02:89:18:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: May 15 17:56:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a0a0d3454e95b48d6e8fac8468a6cb87d88000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:10:0b:7f:44:31:3e:e1:b4:4c:44:00:a7:
                    9f:3c:57:3d:58:94:71:b2:c6:4f:15:b1:4e:01:8c:
                    a7:e8:03:ec:a1:0d:a2:82:db:f9:b6:c9:5f:38:96:
                    5c:47:96:d9:c3:fd:b0:30:e2:17:2f:e1:03:0f:09:
                    cc:a2:ab:d4:e0:51:82:3c:af:24:14:d5:39:d8:af:
                    89:89:33:76:39:b0:62:ba:36:4f:bf:34:34:d9:d6:
                    8e:cc:e5:e3:8e:2d:97:b7:0c:fd:15:e5:47:69:d0:
                    ac:e2:cc:99:92:82:8f:9f:73:57:2f:93:e4:ec:9d:
                    c7:d8:9c:e1:1f:e3:1b:23:de:d7:d1:71:51:43:30:
                    be:6c:20:7a:3a:68:3e:6d:46:d0:9f:a0:dd:04:b8:
                    43:12:fd:09:05:30:9d:92:b8:13:20:49:02:24:31:
                    b5:18:04:08:14:e7:15:3b:fd:3a:41:3f:9c:cc:6a:
                    fa:89:a9:31:ad:1b:90:d6:ac:1f:8a:7f:8d:19:f6:
                    8d:19:05:df:a4:a0:d4:a4:41:a9:73:25:36:f7:ec:
                    8e:34:58:ea:64:61:bd:fc:a8:d2:37:60:f9:2e:46:
                    85:d3:c4:79:0f:79:bb:34:d5:e4:36:ce:91:49:2f:
                    66:db:e9:6f:ee:d0:2b:0c:02:15:80:cd:b4:4e:23:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:0D:34:54:E9:5B:48:D6:E8:FA:C8:46:8A:6C:B8:7D:88:00:0F
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/egoNNFTpW0jW6PrIRopsuH2IAA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:64:d7:a2:6d:bb:94:3d:bf:be:39:30:8b:73:1c:39:24:95:
         a7:28:1d:ff:f7:d6:07:ab:5d:19:51:b9:91:d2:a7:b8:57:a6:
         3a:b5:61:7b:1e:d7:68:9e:fb:c0:0d:13:1c:ed:10:61:86:d6:
         04:88:19:c3:25:83:d5:34:61:ff:1b:c4:7e:fd:f2:52:a2:f4:
         6b:5f:38:44:0f:40:5b:dd:03:d3:b0:c3:a5:f4:29:03:a6:4e:
         53:92:7b:bf:d0:72:bc:87:1f:d9:68:4f:1d:a0:f8:f7:63:a3:
         2b:40:0f:f1:49:34:36:32:54:03:51:d5:09:b8:f3:58:3e:17:
         b0:53:58:49:c0:63:65:05:ba:0d:7d:3d:ef:a8:12:0d:41:df:
         0b:79:40:37:85:47:9f:c8:62:6f:73:b8:13:86:86:16:c6:da:
         6e:ab:f4:55:85:31:a3:e9:a7:40:d1:dd:02:37:ad:0d:32:ee:
         70:29:f3:67:b7:81:f6:ee:aa:8e:cc:98:12:02:42:62:05:1f:
         86:31:ba:c7:59:5e:ad:05:9a:4e:c0:36:90:d5:77:30:55:80:
         37:61:78:77:52:d3:17:10:95:02:2f:56:80:2f:62:be:3b:28:
         1b:63:46:83:c2:2d:e2:c7:81:07:39:ae:4c:e3:8f:82:3b:cc:
         10:ad:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:00 2024 by rpki-client on console-fra.rpki-client.org