Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/e_NgnRhtq1F0VixAkf_8WIR4CTI.roa
File:                     e_NgnRhtq1F0VixAkf_8WIR4CTI.roa (raw, json)
Hash identifier:          v4KdvFHeHzfgxuijCobAom6pcrkCrphZpIW6Keilznk=
Subject key identifier:   7B:F3:60:9D:18:6D:AB:51:74:56:2C:40:91:FF:FC:58:84:78:09:32
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019096B0E824E77ECABC304330A8FE90B8FE
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/e_NgnRhtq1F0VixAkf_8WIR4CTI.roa
Signing time:             Tue 09 Jul 2024 08:51:34 +0000
ROA not before:           Tue 09 Jul 2024 08:51:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        84.55.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 04:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:96:b0:e8:24:e7:7e:ca:bc:30:43:30:a8:fe:90:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Jul  9 08:51:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7bf3609d186dab5174562c4091fffc5884780932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:27:47:81:a4:a7:87:5e:fa:2f:80:29:15:
                    cb:15:94:f9:04:6e:7e:f7:b4:65:51:60:fc:04:ad:
                    81:79:03:e9:08:5b:84:22:c4:49:0b:13:73:af:3c:
                    c2:57:a3:13:23:df:c6:e6:c3:7f:55:2e:0a:cc:6f:
                    98:fa:56:6b:de:2f:6f:e8:fc:ae:20:fa:fd:b6:e0:
                    ac:e4:81:33:de:ba:be:3a:6a:2e:21:10:3b:32:9e:
                    1d:04:03:06:44:5b:76:db:5a:03:dc:3c:92:da:ee:
                    a4:36:05:8b:df:6b:b6:3b:8b:c5:b5:30:7f:9b:5e:
                    a7:7c:3c:ba:f3:1c:37:67:ec:dc:66:45:48:3c:5a:
                    64:71:4a:67:31:0e:a6:53:f3:b8:ad:71:19:73:eb:
                    a7:aa:4e:6a:13:bf:10:9e:3e:30:c2:9a:1d:73:59:
                    59:be:d7:c6:1c:74:fb:bf:2d:02:3d:e4:6a:df:ec:
                    05:99:50:ab:e2:67:41:37:d4:28:1e:d0:0c:d2:e9:
                    8d:85:e5:20:44:1e:30:76:3f:cc:cb:d9:cb:86:4d:
                    e7:bc:d6:a0:4d:b6:16:82:00:7d:13:46:cb:6f:25:
                    42:a4:93:74:ed:d6:a7:3e:2f:f4:4f:4e:3b:14:fd:
                    42:cd:48:6d:17:81:36:77:36:30:d6:d8:d6:9a:da:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F3:60:9D:18:6D:AB:51:74:56:2C:40:91:FF:FC:58:84:78:09:32
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/e_NgnRhtq1F0VixAkf_8WIR4CTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.55.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:5f:9b:23:d6:b0:40:4d:2a:1a:bf:48:61:fb:b2:69:19:
         65:27:ea:fe:d8:d2:52:8f:e5:87:0d:81:8a:1f:0c:55:5a:40:
         be:77:42:48:ee:47:6d:63:dd:d3:f2:03:11:8d:82:87:f0:b0:
         a7:b5:26:46:45:44:ac:ec:29:13:73:1a:e4:90:2c:d3:f8:b5:
         12:2b:ea:ce:21:fd:2b:c9:4d:95:a0:94:2a:0d:63:bb:19:4c:
         50:dd:94:8c:57:3a:97:27:b0:de:88:1d:cc:6c:65:91:1f:0e:
         bd:c6:0f:b9:27:53:2b:00:cf:15:1c:a9:dc:dc:32:c1:d2:a9:
         8e:26:ea:7f:96:62:5f:42:cc:d0:35:47:86:08:5f:31:ae:25:
         7e:76:f1:67:7f:0a:c0:39:9a:26:90:34:94:b8:83:ff:e4:ac:
         28:27:37:ba:f2:38:23:a4:5c:63:c8:e7:2e:15:f4:4f:7e:f3:
         9b:d8:28:af:3e:be:a5:7c:9b:da:29:ef:7f:28:d0:2f:61:fd:
         f2:e9:90:8b:2c:34:25:c1:cd:3e:c5:d5:35:f4:91:1f:33:f0:
         ec:e5:02:5e:a6:2d:50:ae:92:c9:99:57:c2:32:93:4c:ea:8a:
         5a:bc:45:40:ce:52:cf:ce:2f:46:dd:29:6f:a5:0b:4e:8d:72:
         8c:dd:bc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 06:07:00 2024 by rpki-client on console-ams.rpki-client.org