Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/e_EiF8NM-I1JvC3kCfzSnklLukI.roa
File:                     e_EiF8NM-I1JvC3kCfzSnklLukI.roa (raw, json)
Hash identifier:          2tVe6fHP4pab9Y7tou9snXOm8vr//NQ4EO4AgWJGE2U=
Subject key identifier:   7B:F1:22:17:C3:4C:F8:8D:49:BC:2D:E4:09:FC:D2:9E:49:4B:BA:42
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       0185719E899EAD4552D800E665FDABD8253A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/e_EiF8NM-I1JvC3kCfzSnklLukI.roa
Signing time:             Mon 02 Jan 2023 08:34:53 +0000
ROA not before:           Mon 02 Jan 2023 08:34:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60308
IP address blocks:        212.193.175.0/24 maxlen: 25

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:89:9e:ad:45:52:d8:00:e6:65:fd:ab:d8:25:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  2 08:34:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bf12217c34cf88d49bc2de409fcd29e494bba42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:61:f8:18:82:93:59:89:a3:49:45:66:ec:
                    14:2e:d0:c3:12:d8:88:81:27:ff:66:14:f4:ed:bc:
                    48:56:0d:a6:6f:36:0a:66:c4:f6:db:74:46:87:43:
                    30:67:e3:c7:26:32:1e:1c:d7:bc:0a:fc:cb:e2:04:
                    f8:30:19:3f:7c:63:00:0b:f2:c9:77:5a:f6:d2:46:
                    e4:1b:80:a3:2d:9f:b1:cb:e8:5f:14:ab:2f:25:f5:
                    a7:e3:2d:9e:dd:a7:22:87:5f:26:eb:a3:b3:bc:d5:
                    16:bd:5f:5a:c2:c5:38:84:76:de:47:de:54:76:ea:
                    34:15:5a:18:73:00:e2:0a:b6:4e:8d:e8:9f:b4:25:
                    5e:90:43:1f:ba:61:19:f6:d3:19:00:18:2c:2f:cd:
                    bf:f5:e9:c1:ab:2d:54:f1:63:15:b4:dc:8b:32:8b:
                    be:16:43:5c:20:48:a5:61:34:15:f4:f7:3a:9b:09:
                    f5:a9:85:37:dc:04:46:4e:33:35:2f:b4:bb:86:a2:
                    24:43:9d:a3:5e:6d:80:d3:fb:39:26:16:6c:03:f8:
                    36:66:72:f7:59:ba:61:d5:dd:e4:95:bf:10:04:d1:
                    da:1d:0e:83:c6:fa:34:28:70:98:91:32:1e:01:32:
                    3f:b5:c3:29:be:d5:0b:40:30:9b:fc:11:7d:bf:08:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:22:17:C3:4C:F8:8D:49:BC:2D:E4:09:FC:D2:9E:49:4B:BA:42
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/e_EiF8NM-I1JvC3kCfzSnklLukI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.193.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:89:c6:7a:d9:1c:eb:e3:8c:5f:a7:a7:86:12:00:42:c6:
         bb:89:3c:8b:05:ea:77:17:ad:ca:5c:6a:33:f2:d2:18:5d:d4:
         09:63:74:03:94:55:f1:fb:23:48:45:36:87:1e:c3:21:83:a8:
         67:c8:3e:d0:d8:7a:6e:8d:35:95:8b:75:97:c4:fd:d7:a0:fa:
         fc:02:62:d2:61:be:30:4f:e6:45:65:68:5b:72:29:9c:06:34:
         9b:41:81:cf:15:22:22:bb:a0:bf:70:e9:a2:33:5e:4c:b6:af:
         20:c6:67:08:dc:68:49:7c:b1:40:27:14:64:26:9d:8f:8f:9f:
         8f:02:88:20:c7:f6:11:bb:62:ae:0d:a8:42:4a:a6:df:f4:1b:
         28:7f:1e:eb:09:47:d8:58:27:34:cc:02:20:d7:2f:c0:82:af:
         92:96:dc:8e:18:90:b4:80:16:48:66:75:fb:65:47:6c:1a:f1:
         c3:83:a2:0c:f6:60:fa:dd:59:5b:07:2c:59:97:31:a4:eb:20:
         c4:92:6d:a9:35:47:5f:45:e2:cb:34:e1:71:12:14:b6:cf:9c:
         1c:95:de:94:e8:1b:96:bb:26:2d:a6:a7:7d:65:2a:46:1e:ce:
         3e:f5:22:ce:5e:7f:7a:ca:1c:ed:b4:5e:60:90:f7:94:2b:69:
         bb:9c:8b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org