Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eukAmjMhfctzAmepGRKzojWar-g.roa
File:                     eukAmjMhfctzAmepGRKzojWar-g.roa (raw, json)
Hash identifier:          uKgGA4cqbUvqSti2CdQB3HTkTEFbx6PNUH2+JmNxCRg=
Subject key identifier:   7A:E9:00:9A:33:21:7D:CB:73:02:67:A9:19:12:B3:A2:35:9A:AF:E8
Certificate issuer:       /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial:       01856CE667CECC175F366B7B0A50E017C2DD
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eukAmjMhfctzAmepGRKzojWar-g.roa
Signing time:             Sun 01 Jan 2023 10:35:17 +0000
ROA not before:           Sun 01 Jan 2023 10:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199301
IP address blocks:        213.91.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:67:ce:cc:17:5f:36:6b:7b:0a:50:e0:17:c2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
        Validity
            Not Before: Jan  1 10:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ae9009a33217dcb730267a91912b3a2359aafe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:43:f0:7e:15:1b:48:a8:38:dc:50:1a:97:
                    e5:b2:96:56:a8:f1:dc:0d:7e:30:a5:9a:9d:30:43:
                    d5:a4:7e:73:e3:b2:c0:20:58:d3:01:2e:ab:2f:68:
                    dd:04:de:ff:ba:9a:2c:91:50:15:4e:cc:08:f7:dd:
                    8b:d5:b4:32:b2:20:4c:ca:d8:a8:4b:d9:7a:bc:d5:
                    b4:e2:d7:7f:94:91:3a:94:f5:30:4c:d1:e9:6a:63:
                    5d:3b:12:08:5c:1e:6a:f4:45:c4:1d:f5:76:2e:0d:
                    87:2b:53:3c:3f:31:ae:26:18:14:3c:37:1b:ed:48:
                    1d:58:c3:97:b5:ab:1c:7c:27:ac:f4:ba:1b:e9:01:
                    50:72:e0:37:4b:3f:ec:07:58:3b:4f:b8:3d:d0:e3:
                    28:30:81:e4:71:d3:45:e9:33:e7:f9:bc:ae:e8:d6:
                    c3:d9:f9:64:16:57:99:35:d1:2e:89:1d:d1:5e:70:
                    6f:e8:21:42:15:98:02:c2:fd:01:69:c1:c8:91:26:
                    d9:56:7b:ef:31:5f:22:f4:21:bb:9a:ba:11:3f:07:
                    92:81:f4:1b:7e:a1:f0:fb:5f:7d:f3:9a:7e:98:69:
                    96:7f:0c:a3:c7:78:95:f6:be:09:da:7e:0b:e2:ea:
                    99:37:7f:98:87:df:c8:cc:5b:a8:74:16:93:2e:fe:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:00:9A:33:21:7D:CB:73:02:67:A9:19:12:B3:A2:35:9A:AF:E8
            X509v3 Authority Key Identifier:
                keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/eukAmjMhfctzAmepGRKzojWar-g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.91.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:29:a6:7b:4d:fc:cb:0e:d7:d8:df:12:2c:47:14:c7:56:
         50:54:7c:77:0f:56:35:f6:3c:ae:32:03:13:70:e6:de:87:ba:
         df:b3:84:0c:0a:be:e1:5e:43:e9:e5:cd:45:dd:90:0a:df:7f:
         9d:9e:f5:89:a7:91:87:16:e8:91:3c:d3:19:d7:78:a3:f9:00:
         0f:24:9f:24:41:80:cc:05:9c:72:5d:db:9b:1d:23:1d:f0:10:
         78:66:1b:61:e5:04:12:32:ef:b0:bf:0f:ce:ce:b6:e4:51:43:
         e4:8d:c1:a7:a3:4c:4b:5a:ff:89:fa:e9:ba:93:c8:d2:e0:e2:
         1a:01:56:1d:82:04:c6:c4:f7:b8:74:1c:a1:3b:c3:12:3b:5b:
         e8:51:98:08:ca:77:ad:40:37:c0:fc:3b:3c:12:42:5f:eb:ad:
         b5:c6:98:3d:07:d2:2a:b1:16:93:cb:6f:43:89:30:9d:49:29:
         1c:ba:1c:b1:10:d4:e5:49:42:f0:4c:58:74:66:a3:ee:8e:23:
         a4:a1:46:9f:37:91:2e:9f:e0:f4:fa:d9:b5:65:a4:f0:0f:61:
         05:57:47:6a:6c:e3:af:22:10:70:0f:25:9c:1a:8d:be:ba:a5:
         29:66:24:a1:d8:9c:4e:b2:f0:43:0f:dd:df:20:db:0a:0f:47:
         e1:be:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org