Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/EmE-dAuoylwYBob9ItdX_sErlEg.roa
File:                     EmE-dAuoylwYBob9ItdX_sErlEg.roa (raw, json)
Hash identifier:          MgHNhQeyajNbqEjOAFarumFdnq1GVcNXtOL7RSuneLk=
Subject key identifier:   12:61:3E:74:0B:A8:CA:5C:18:06:86:FD:22:D7:57:FE:C1:2B:94:48
Certificate issuer:       /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial:       018570829F906FC101CA6E6CF88C4BCFA33B
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/EmE-dAuoylwYBob9ItdX_sErlEg.roa
Signing time:             Mon 02 Jan 2023 03:24:46 +0000
ROA not before:           Mon 02 Jan 2023 03:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60896
IP address blocks:        185.24.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:82:9f:90:6f:c1:01:ca:6e:6c:f8:8c:4b:cf:a3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
        Validity
            Not Before: Jan  2 03:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12613e740ba8ca5c180686fd22d757fec12b9448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:5e:42:e5:e3:90:3b:68:2e:5a:58:09:a7:
                    45:b1:be:91:ba:b2:64:ee:9b:ec:7b:e1:53:32:92:
                    f1:80:cf:f3:f2:54:9c:c2:05:95:e5:13:09:ff:57:
                    61:d5:e1:f1:5d:d9:1b:6e:bf:a9:98:d2:ed:92:a3:
                    fc:69:d7:d5:3f:92:22:dc:af:6c:da:fd:7c:88:dc:
                    d5:19:e5:bb:ac:9d:45:a3:13:15:b0:5e:67:72:ef:
                    5d:13:0f:3e:7e:71:9b:f4:19:e0:b2:64:5b:4e:7e:
                    71:3b:40:d1:5d:e1:ee:63:94:57:02:df:17:14:3a:
                    5a:07:f9:07:b6:3a:56:f8:04:b3:a8:9a:45:f0:ef:
                    6a:c3:13:33:ee:ca:82:b0:7f:da:9f:b4:c2:95:a8:
                    8f:7f:ae:af:e3:84:58:9b:1f:ab:29:c1:a6:b6:c9:
                    86:63:8f:0f:69:ce:b3:cd:dd:50:35:c2:8c:4a:0a:
                    88:c2:3f:65:28:70:8c:65:41:00:34:74:b2:08:2d:
                    d0:15:8c:64:b4:fc:4a:7a:ec:b5:a0:e2:5c:ce:77:
                    42:fb:98:e6:cc:22:cb:58:df:ff:53:d8:bd:04:b6:
                    3b:69:ad:ee:70:c3:21:4a:d0:1c:4a:64:ec:58:6e:
                    20:52:36:6c:a6:81:27:e8:c7:b6:3c:7b:9d:16:ce:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:3E:74:0B:A8:CA:5C:18:06:86:FD:22:D7:57:FE:C1:2B:94:48
            X509v3 Authority Key Identifier:
                keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/EmE-dAuoylwYBob9ItdX_sErlEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:70:f5:48:e2:94:30:25:1f:5d:a1:aa:60:9a:98:40:1a:f7:
         c5:09:dc:e8:6f:3c:52:f8:0b:22:9c:e4:a6:52:dc:b8:a7:2a:
         31:ca:9e:85:95:41:72:d6:c7:49:e5:47:32:0c:9f:ad:0f:0e:
         51:a9:ba:8e:f5:66:48:84:3a:4a:af:2f:b3:9c:3c:f2:e2:a2:
         91:50:b8:dc:72:bb:f0:c7:d1:15:69:96:8d:7e:cf:8b:52:c2:
         a8:c4:cd:f9:cc:49:1c:65:24:5e:f6:c7:ae:98:cc:68:8b:e9:
         c9:ee:4e:f0:6e:0e:3e:3f:42:ab:98:16:26:0b:41:e7:78:bb:
         e4:4e:25:10:02:6c:4b:86:93:ab:00:43:fa:6d:6c:be:86:d1:
         ab:76:37:90:1d:1d:80:4c:62:e3:97:4a:9e:a5:0a:7d:2c:87:
         4b:d8:ca:f1:f2:93:69:41:3d:2f:d1:49:b5:d0:8b:f5:9c:d2:
         7b:64:95:52:a9:2c:b9:30:01:79:11:48:ab:65:b0:07:4f:86:
         15:7a:96:7d:db:ad:6d:f1:1b:4f:67:7c:18:42:a1:2b:9c:fb:
         c8:78:d4:d8:fd:4d:21:be:2e:38:60:5a:7e:c4:05:05:a0:30:
         db:ac:c8:f5:89:4a:66:7a:44:19:0a:19:c7:aa:c8:69:f4:8a:
         5f:f0:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:43 2024 by rpki-client on console-ams.rpki-client.org