Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EGiipPyFK-6zKyLUULuCYk41oWk.roa
File:                     EGiipPyFK-6zKyLUULuCYk41oWk.roa (raw, json)
Hash identifier:          LxbJuXpOSgXn1MgqnVBB/GBfqH7kvFfJqJ5riw3iDh4=
Subject key identifier:   10:68:A2:A4:FC:85:2B:EE:B3:2B:22:D4:50:BB:82:62:4E:35:A1:69
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD5419AF7CF4E04605C8B903FF6B741
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EGiipPyFK-6zKyLUULuCYk41oWk.roa
Signing time:             Mon 02 Jan 2023 00:15:25 +0000
ROA not before:           Mon 02 Jan 2023 00:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61278
IP address blocks:        93.115.52.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:41:9a:f7:cf:4e:04:60:5c:8b:90:3f:f6:b7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1068a2a4fc852beeb32b22d450bb82624e35a169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:a6:97:6b:5c:10:97:12:b2:b2:c4:c3:34:
                    89:52:19:b6:b8:3f:15:4c:85:bf:24:cd:2b:d1:02:
                    0a:4c:72:71:55:89:f0:6f:af:a9:4b:ed:5d:f1:41:
                    2b:88:fa:c4:be:8c:ab:8b:3b:3b:1d:0c:8f:37:1f:
                    e3:82:4b:82:c6:54:1c:2c:63:aa:98:f1:fb:3f:02:
                    1b:37:e9:27:9e:f7:ed:6b:ba:e4:66:c6:69:15:d8:
                    27:fa:bd:4e:41:97:a4:73:fa:f4:49:61:de:73:fa:
                    8d:18:b1:fd:06:44:90:a8:eb:8c:e9:08:f5:0d:a0:
                    4f:08:69:3c:2e:e2:b5:9d:b5:16:46:e4:06:a8:b3:
                    08:d5:af:b8:72:a8:b5:c3:0d:f5:e2:67:82:0b:ad:
                    de:1a:5f:d3:f0:8e:91:55:de:35:61:5f:fb:c8:6e:
                    0c:44:d6:56:cc:0f:37:55:17:d7:94:56:75:c2:f1:
                    67:64:92:01:ff:5e:38:a4:6e:88:62:1f:10:47:18:
                    29:fb:46:4a:2e:78:53:fc:f2:f7:55:c1:59:18:f9:
                    4a:35:d6:4f:11:3e:0f:26:3a:b8:8e:ec:1f:62:63:
                    5c:34:83:aa:35:2a:b8:32:28:2a:e8:63:cf:53:2f:
                    5c:ce:ef:a7:fc:2c:28:58:fe:70:30:be:3e:59:a7:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:A2:A4:FC:85:2B:EE:B3:2B:22:D4:50:BB:82:62:4E:35:A1:69
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EGiipPyFK-6zKyLUULuCYk41oWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:58:32:b4:a9:04:50:8b:4a:47:ec:b4:5f:94:fe:b0:b7:
         63:9e:13:8f:24:06:cc:68:ee:ec:18:9d:22:1e:35:d2:44:71:
         5e:23:38:a6:c0:48:38:37:7e:5b:f1:c5:16:f5:49:8c:82:89:
         b2:97:de:fb:d9:ce:42:51:88:9c:b7:6a:53:3f:06:08:56:f8:
         2b:65:c0:36:c1:93:0d:78:b0:c5:cd:c7:5f:bc:e7:4e:67:9e:
         bd:ac:95:6a:e3:23:3b:82:8a:37:af:41:27:c0:7d:f0:89:f8:
         13:fb:26:0e:97:4a:bb:aa:a7:20:fe:4a:6d:a9:06:b4:94:d5:
         a6:03:93:47:06:03:ed:78:f8:ba:4f:09:b2:a8:a8:4b:8b:33:
         a0:86:1c:80:77:0b:e2:71:a7:93:c6:d4:05:eb:78:6d:d9:65:
         53:31:4e:9d:57:8b:78:e8:4e:3a:17:28:59:44:7e:96:15:b9:
         2b:2b:a1:3d:4f:0f:05:b9:0b:37:cd:8b:5a:a5:aa:58:3e:93:
         94:aa:50:b0:2d:7a:76:1b:d7:b2:a6:ca:68:4f:0e:91:49:e1:
         86:39:d1:a4:9e:7d:4a:ae:10:2e:67:e5:7b:b8:12:f0:b5:24:
         ef:05:ce:fe:e6:59:6b:1d:c0:c9:21:69:6f:fe:be:2f:80:a2:
         82:98:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org