Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/N48AgpCPX5IrWKYtgNwnxo7Qxgo.roa
File:                     N48AgpCPX5IrWKYtgNwnxo7Qxgo.roa (raw, json)
Hash identifier:          V0I1IJ1fskRGLA0Yny2TYlO5SLFg/vzb3qnXt6k4WE8=
Subject key identifier:   37:8F:00:82:90:8F:5F:92:2B:58:A6:2D:80:DC:27:C6:8E:D0:C6:0A
Certificate issuer:       /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial:       01856B0A1B7323F7568C97EB1385024C1B5B
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/N48AgpCPX5IrWKYtgNwnxo7Qxgo.roa
Signing time:             Sun 01 Jan 2023 01:55:02 +0000
ROA not before:           Sun 01 Jan 2023 01:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33986
IP address blocks:        212.94.135.0/24 maxlen: 24
                          212.94.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:0a:1b:73:23:f7:56:8c:97:eb:13:85:02:4c:1b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
        Validity
            Not Before: Jan  1 01:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=378f0082908f5f922b58a62d80dc27c68ed0c60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:c2:f3:d5:6e:84:c1:59:9a:85:6e:35:84:
                    f2:d4:36:f7:74:8b:a9:4c:2c:65:61:19:88:80:dd:
                    00:9b:76:9d:9c:28:4a:c3:a4:64:d0:fa:56:aa:fa:
                    68:76:07:cc:19:b5:66:8b:ed:6f:4d:3b:d2:27:c9:
                    e7:18:ee:c9:55:a7:fe:9c:6c:ac:0c:28:32:3f:aa:
                    68:ad:84:c1:fd:3b:2a:23:ca:cb:94:a6:ae:c3:89:
                    89:01:bc:be:eb:50:38:49:b5:7f:cf:7a:d9:a6:d8:
                    37:80:59:a5:7c:cb:99:7f:e9:08:d5:ff:10:e3:35:
                    0d:46:7e:0b:e2:4a:6a:0a:54:d0:49:b8:96:89:1f:
                    1e:d2:82:0a:8a:45:04:11:aa:ae:33:d9:74:96:29:
                    44:14:0f:93:b5:ba:89:f6:83:64:f5:fa:ef:35:5d:
                    36:3b:87:f2:e6:42:39:ec:11:6f:81:fb:4d:dc:96:
                    15:39:5c:6c:71:9a:b7:99:f4:f8:f7:00:2b:30:23:
                    9b:24:5c:b1:1c:69:0e:91:ad:28:34:17:d6:68:ad:
                    da:47:c7:ae:84:b3:a5:46:5f:9c:3d:31:ad:b1:0b:
                    28:7b:d1:f7:96:7e:d9:c0:7f:d5:6c:0a:2e:42:6e:
                    28:fe:6e:a8:a9:cd:fa:44:04:61:4a:fe:e4:25:d7:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:00:82:90:8F:5F:92:2B:58:A6:2D:80:DC:27:C6:8E:D0:C6:0A
            X509v3 Authority Key Identifier:
                keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/N48AgpCPX5IrWKYtgNwnxo7Qxgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.135.0-212.94.136.255

    Signature Algorithm: sha256WithRSAEncryption
         77:b3:bd:de:66:e0:f4:49:1a:e4:60:4f:b7:ce:4c:03:65:04:
         26:f3:c4:cf:cf:ed:0d:4b:37:d7:a0:75:ea:34:ec:56:6c:2e:
         71:eb:54:d1:cd:24:15:97:1a:27:97:55:0a:8b:74:bc:3e:18:
         e1:15:e8:8a:d5:4d:71:1e:fc:1d:d5:b0:ae:17:c2:a9:d3:67:
         a4:c8:9a:29:a5:3b:1b:e8:fa:c1:3b:40:25:0b:f5:71:02:66:
         dd:bd:36:ad:d1:4a:23:e3:60:65:1e:e6:60:f8:4a:a8:ad:f5:
         e7:db:78:f6:ec:c8:f9:c1:9d:ac:02:2d:b2:c1:fc:73:2f:60:
         0a:f1:9f:2a:8c:d7:a3:6c:c8:c5:72:aa:2c:58:e4:85:e2:7d:
         f4:70:ef:53:2f:23:5c:24:5f:58:03:21:a8:f9:62:5f:af:0f:
         4d:14:d3:fb:1a:6d:86:79:b6:11:ea:5b:5c:5e:07:6d:a0:de:
         98:28:b2:e8:39:a5:24:27:f9:20:6a:b5:3b:da:50:7e:9f:62:
         61:e5:c0:19:d1:e4:65:ac:0e:5e:67:b0:44:17:8e:b9:c3:f6:
         c5:d9:dd:bf:ff:d3:de:55:56:0a:f1:39:53:9e:3e:be:28:d7:
         a3:13:2d:79:f6:28:0b:d8:f5:dd:dd:e0:dd:52:82:ca:6d:00:
         d4:e8:2b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:01 2024 by rpki-client on console-ams.rpki-client.org