Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/eBpjJWivM0kwQ2E0j0dYUykUAAU.roa
File:                     eBpjJWivM0kwQ2E0j0dYUykUAAU.roa (raw, json)
Hash identifier:          n/JWOqPTIHzsIZDOncVtRAKsjiB1B8WLxBxGCItE+Eg=
Subject key identifier:   78:1A:63:25:68:AF:33:49:30:43:61:34:8F:47:58:53:29:14:00:05
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       0185738FFC5F525104078408C43F2BA70460
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/eBpjJWivM0kwQ2E0j0dYUykUAAU.roa
Signing time:             Mon 02 Jan 2023 17:38:14 +0000
ROA not before:           Mon 02 Jan 2023 17:38:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48854
IP address blocks:        185.149.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:fc:5f:52:51:04:07:84:08:c4:3f:2b:a7:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Jan  2 17:38:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=781a632568af3349304361348f47585329140005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:52:96:c8:70:7b:63:09:00:cb:11:3d:ad:
                    72:b4:57:10:2d:86:18:16:9a:1a:43:2e:06:9b:ec:
                    9f:88:64:d0:04:59:9d:a7:5f:eb:47:b3:2f:2a:bf:
                    e6:aa:ec:ff:ae:69:df:8a:92:54:ab:da:38:5a:23:
                    2e:d4:c7:da:91:6c:eb:f5:c2:25:d9:e8:68:39:6d:
                    02:72:18:ff:9f:02:61:a9:1f:66:5c:e7:c1:fb:d5:
                    d0:12:24:80:0a:fb:23:b4:62:41:06:2a:95:d8:bc:
                    44:1e:87:5b:8a:1e:6c:f9:3f:8d:97:20:66:39:96:
                    a7:6a:bb:13:3d:79:78:ad:ca:59:58:96:e4:18:82:
                    8a:74:67:9d:8f:cb:e6:2b:cc:32:01:1f:28:34:33:
                    0c:13:55:9b:13:f0:26:d5:3f:b8:57:02:ad:04:7a:
                    78:cd:59:35:20:f1:76:3d:80:3a:ad:da:8f:cf:47:
                    75:da:80:60:e3:3e:bc:05:4e:1d:6a:e6:b9:3e:3b:
                    ea:f8:8d:f4:a5:7b:c5:d6:34:4e:0f:44:4a:a4:e6:
                    33:3d:c8:44:bc:4e:ad:60:48:38:1b:e0:f5:6a:d7:
                    18:46:71:1a:6c:8c:98:41:05:a8:49:55:33:2c:af:
                    58:75:82:cc:eb:8b:a4:8a:ca:39:b3:41:99:71:e0:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:63:25:68:AF:33:49:30:43:61:34:8F:47:58:53:29:14:00:05
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/eBpjJWivM0kwQ2E0j0dYUykUAAU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.149.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:8f:73:04:15:8a:d0:db:73:96:1f:35:39:bc:d0:c2:31:
         1a:e2:ab:50:8b:bd:96:2e:8f:29:34:86:4e:31:a8:dd:e6:e3:
         c8:a6:fe:e7:c6:ce:a8:7c:f6:ad:d9:35:33:28:f7:b8:9d:66:
         41:ee:95:53:42:1e:f1:80:db:bf:35:c1:0c:ee:b9:e1:08:9e:
         74:b3:15:fe:78:fe:eb:fc:66:51:69:4c:10:6e:bb:e4:e3:72:
         99:9a:02:e5:f6:e7:45:78:11:fc:e2:da:af:31:15:b7:a6:40:
         1f:cb:a8:b9:25:52:a2:cc:cc:77:9a:00:31:99:74:1f:d5:d4:
         64:69:f9:68:51:cf:68:8d:e4:ee:23:3e:2c:27:d5:88:f0:15:
         3f:5b:ee:61:59:7a:99:89:5d:36:de:1b:ee:25:0c:ab:5a:66:
         ca:f3:c6:46:7b:27:ae:07:f1:df:21:ba:f8:db:3c:c3:e8:da:
         4d:16:46:00:f2:29:51:c7:65:e9:da:ef:66:b4:7b:41:e8:44:
         60:58:67:0b:c0:e2:b3:a5:82:31:bb:38:3e:e6:a4:ec:95:7e:
         a6:7f:f0:2b:5c:43:45:b0:12:d4:e9:57:5a:c7:16:f8:7f:2e:
         51:2f:c5:fd:ba:bb:d9:4e:ec:90:0d:36:83:b2:db:16:83:c3:
         8c:35:a7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org