Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/EoGhXI3ZfgSgRg35QwA39tZ7Edo.roa
File:                     EoGhXI3ZfgSgRg35QwA39tZ7Edo.roa (raw, json)
Hash identifier:          HLqKLfVu1+0QfaYHNhk9TueoYSxvChPUW9+ir+gJpxM=
Subject key identifier:   12:81:A1:5C:8D:D9:7E:04:A0:46:0D:F9:43:00:37:F6:D6:7B:11:DA
Certificate issuer:       /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial:       0187B7B716FDE426489922E8593DAFC9D147
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/EoGhXI3ZfgSgRg35QwA39tZ7Edo.roa
Signing time:             Tue 25 Apr 2023 09:20:41 +0000
ROA not before:           Tue 25 Apr 2023 09:20:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198770
IP address blocks:        194.48.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Jun 2023 06:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:b7:16:fd:e4:26:48:99:22:e8:59:3d:af:c9:d1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
        Validity
            Not Before: Apr 25 09:20:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1281a15c8dd97e04a0460df9430037f6d67b11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:32:be:00:25:f7:00:08:af:b7:61:fc:4d:c2:
                    e4:76:17:8d:ae:b8:71:ff:c5:25:f3:8a:89:a2:1e:
                    82:ba:c3:24:54:e1:8c:e0:38:e2:6c:66:00:6c:a5:
                    d0:97:50:46:91:78:61:0a:e2:5e:0b:3f:53:86:bf:
                    fb:56:19:7e:55:5f:ae:81:5e:b4:05:25:66:26:0b:
                    c9:b0:1a:33:f1:dc:d1:68:30:a9:9e:ab:f6:cc:71:
                    e2:e3:56:0c:0c:be:5e:ff:f4:61:c7:d6:9b:75:db:
                    84:f0:f5:37:da:6e:c1:2e:c3:64:b2:2b:b3:57:a8:
                    7e:b9:cf:fe:c4:ab:22:ef:35:da:bf:b9:13:d7:40:
                    3b:51:26:e3:86:f2:2c:80:17:6b:05:43:30:d3:c5:
                    5a:d6:85:c9:a0:dd:14:85:48:9c:b4:d3:87:0f:cb:
                    ef:ff:2b:0d:4b:ef:0d:82:87:de:8a:b1:a7:59:89:
                    52:61:24:41:a3:0d:42:e8:80:37:31:89:0f:b1:14:
                    ce:09:9c:0f:22:1c:b6:ed:0d:60:6d:1a:34:ce:7a:
                    4e:3a:1f:13:58:d1:dc:bb:26:a3:08:9b:48:2e:84:
                    f5:e1:96:9f:32:88:c9:f2:50:e1:a1:41:92:72:ab:
                    17:31:0f:7d:c8:97:84:41:22:31:7f:88:0c:29:a4:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:81:A1:5C:8D:D9:7E:04:A0:46:0D:F9:43:00:37:F6:D6:7B:11:DA
            X509v3 Authority Key Identifier:
                keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/EoGhXI3ZfgSgRg35QwA39tZ7Edo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.48.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:23:d9:38:6c:7a:e5:ba:6d:6a:29:b4:ee:97:bd:6c:1c:27:
         36:ee:01:99:a9:65:2b:7f:81:ec:e0:46:0b:df:1d:62:a3:92:
         9d:a9:f4:16:78:be:12:8d:d0:f4:cc:15:4b:13:a4:29:fd:5e:
         2e:1f:51:14:c0:cf:59:9a:e9:18:b2:31:f2:65:ae:b6:47:00:
         77:a3:98:7f:43:63:36:35:ef:90:62:64:da:b4:30:57:87:de:
         b6:11:1c:5c:97:ac:5c:0f:27:45:06:3b:60:e0:71:10:08:ba:
         1e:c5:5e:11:37:42:1d:52:f1:09:ad:b6:01:ea:45:e6:db:fd:
         d1:cd:32:f5:f7:4e:a1:ab:39:18:13:af:c7:0e:ee:a9:0a:4d:
         c6:8d:6c:96:da:a6:ea:26:02:28:da:9b:fe:62:5f:2f:b9:8f:
         98:7e:b6:3b:f5:3a:d0:a9:f8:9e:21:2c:09:02:44:d2:03:6d:
         65:2b:48:c8:73:c6:de:a3:95:db:68:60:fa:55:cc:29:9b:b9:
         a2:2b:34:90:fe:9d:3c:d1:de:c9:37:a0:da:bc:9a:23:d9:3e:
         89:f0:7a:60:04:26:03:08:ba:7a:8c:f6:39:43:6e:ae:b4:e6:
         ff:f0:62:68:3c:2d:5f:ad:e4:23:f9:eb:ab:00:9a:78:e2:60:
         36:d2:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org