Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa
File:                     ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa (raw, json)
Hash identifier:          Jz/77/3tv8BjgmwS8PYBxXYoZgnlFBvI7C+tlKXLHMg=
Subject key identifier:   78:F1:86:9C:E8:D2:AE:A4:A9:08:E3:1D:2F:56:9A:2A:7B:2A:AA:75
Certificate issuer:       /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial:       0185BE8DCD81CFC965AEB63DCBBB0080DC14
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa
Signing time:             Tue 17 Jan 2023 07:07:22 +0000
ROA not before:           Tue 17 Jan 2023 07:07:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58261
IP address blocks:        185.218.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:be:8d:cd:81:cf:c9:65:ae:b6:3d:cb:bb:00:80:dc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
        Validity
            Not Before: Jan 17 07:07:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78f1869ce8d2aea4a908e31d2f569a2a7b2aaa75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:8c:58:49:08:98:c1:19:42:b3:47:c5:e1:
                    94:23:b0:30:78:ce:23:38:bc:3d:0a:b9:3e:82:5b:
                    f1:4b:56:50:aa:50:64:f1:c0:f1:d5:e8:b0:a0:dc:
                    5a:b0:02:ec:f4:9f:cc:14:d9:e1:e7:4b:31:a2:1a:
                    22:cc:04:5c:7b:8d:db:30:35:c5:14:a7:be:c8:a3:
                    60:cc:b5:43:fe:66:ba:dd:3c:98:e1:77:72:ec:5a:
                    2a:26:9b:0b:84:de:79:fd:4a:a5:aa:0d:52:94:b3:
                    7e:6a:c7:2f:30:42:3c:f3:62:3c:a2:40:7a:36:48:
                    a7:1b:6b:e9:91:8e:ac:10:4d:c8:c5:cd:a5:fd:11:
                    67:89:e3:d7:02:f8:cb:bf:89:68:d4:cd:92:f0:6d:
                    68:00:6a:b1:c7:7f:7e:6e:11:fc:18:af:76:d7:f8:
                    97:2c:0f:94:a7:fb:bc:95:e3:cc:2f:af:69:d7:79:
                    59:ea:a8:7e:33:8c:b2:1f:27:c5:2e:1a:11:6e:a2:
                    dd:0d:87:d2:ed:77:e1:be:0f:0e:5f:19:f4:21:72:
                    71:f7:e9:68:88:b1:8f:cd:0c:17:45:48:b4:60:d9:
                    48:00:3c:c7:c9:78:77:f3:6f:4e:55:05:5c:8b:b5:
                    dc:85:72:49:38:68:60:7f:55:22:7c:75:80:d5:a3:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:86:9C:E8:D2:AE:A4:A9:08:E3:1D:2F:56:9A:2A:7B:2A:AA:75
            X509v3 Authority Key Identifier:
                keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/ePGGnOjSrqSpCOMdL1aaKnsqqnU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:d7:6d:02:c9:d8:f8:ff:06:d8:1c:48:37:b9:29:25:92:
         95:39:30:17:7b:67:a4:24:db:c8:f0:d8:cd:56:57:c4:2b:6e:
         78:7b:c8:02:9d:be:62:49:1b:cd:8a:2a:5c:d8:8b:c7:bc:33:
         5a:e9:59:63:48:c9:88:b2:bd:24:5f:76:52:85:19:8a:ff:64:
         47:bb:75:4a:11:0f:96:34:1c:7e:78:fa:cf:9d:3f:2a:e4:da:
         b4:65:d3:a3:63:fe:29:9a:e8:56:2c:2a:03:78:5b:75:cf:7c:
         bc:a8:1d:4a:f1:f8:99:9c:4c:73:ca:54:33:aa:fe:65:5e:5b:
         ad:2a:17:cb:9c:75:97:83:e2:f1:30:f4:01:13:2e:08:05:de:
         27:74:c7:c7:f8:c5:df:1a:a3:59:b3:f5:91:de:9d:6d:5f:80:
         7a:77:29:1d:b8:c6:73:b0:c9:7c:5f:95:62:d0:7d:5f:7d:06:
         f7:b6:58:93:e3:e8:45:56:1c:6e:27:bf:3d:53:46:8e:09:a0:
         12:50:36:14:71:c2:41:99:4d:f5:e4:06:14:d6:6e:77:01:47:
         9e:14:93:8d:c7:fa:ac:64:6f:75:27:8d:1a:0f:a2:3f:e8:51:
         2a:58:e7:68:06:4b:fe:dd:3c:3d:01:da:ba:7f:e0:f4:82:3e:
         de:c2:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org