Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/aEIYAYKUOV6DsDpbMVrvJovxfj8.roa
File:                     aEIYAYKUOV6DsDpbMVrvJovxfj8.roa (raw, json)
Hash identifier:          f/KEW2HJ5T1OpdZdrX2n/SlL5Tda0k3yfz/751A2MwQ=
Subject key identifier:   68:42:18:01:82:94:39:5E:83:B0:3A:5B:31:5A:EF:26:8B:F1:7E:3F
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       0185BB2E5A52EEFD9F5FBC2C4A833A5B709E
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/aEIYAYKUOV6DsDpbMVrvJovxfj8.roa
Signing time:             Mon 16 Jan 2023 15:24:15 +0000
ROA not before:           Mon 16 Jan 2023 15:24:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8422
IP address blocks:        194.55.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:bb:2e:5a:52:ee:fd:9f:5f:bc:2c:4a:83:3a:5b:70:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Jan 16 15:24:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=684218018294395e83b03a5b315aef268bf17e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:6b:97:dc:f7:f2:a2:0f:f0:c3:12:7a:3c:
                    8d:93:47:e2:1c:a0:34:1c:d9:a3:5f:64:f0:9d:33:
                    b5:36:c0:41:16:30:09:4a:6f:64:5f:cb:92:ee:03:
                    3d:11:13:d6:f6:4b:c1:8a:c2:4f:8a:34:98:45:7c:
                    55:fb:80:17:6b:6b:61:2d:1f:59:a1:f4:00:e4:06:
                    6f:0c:1e:78:51:7a:e7:63:6e:0f:2e:a3:c0:17:8d:
                    28:7c:65:0d:d4:78:9a:a5:48:65:89:c1:fc:45:9c:
                    03:f3:2f:f4:77:d6:4a:82:dc:79:a0:6e:82:63:54:
                    0f:d3:da:6b:e7:c0:93:45:9d:91:2f:3b:99:fc:67:
                    0c:2b:fe:8c:48:5b:c3:ab:e6:04:1d:9f:6a:ec:77:
                    45:c0:44:2e:03:96:60:2a:9a:f5:7b:8c:07:a7:5e:
                    fe:9e:1e:1d:bb:34:d0:5c:9a:32:5a:8e:02:91:ee:
                    0d:d6:5c:df:9b:0b:d4:99:cf:0c:6b:a1:79:34:3c:
                    bf:89:78:46:5f:a4:20:04:0f:98:67:45:0d:61:4c:
                    88:70:7c:a5:dc:53:13:23:65:c9:20:ba:b0:79:36:
                    b1:05:39:a9:ca:cc:75:a6:d2:a8:dc:2f:ae:da:39:
                    9b:63:9e:fb:5b:ef:b3:3b:67:10:94:4c:b9:e1:de:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:18:01:82:94:39:5E:83:B0:3A:5B:31:5A:EF:26:8B:F1:7E:3F
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/aEIYAYKUOV6DsDpbMVrvJovxfj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:10:7d:1f:61:d4:89:f7:fb:60:70:8c:18:fb:1c:4f:6f:
         59:a1:dd:0d:a6:1c:c6:a9:55:01:60:3d:5f:b2:fc:a5:20:4a:
         f9:78:b7:bf:ff:34:ca:42:64:a7:c4:d2:dc:34:2f:5d:b2:d1:
         bf:66:3e:71:c6:59:06:81:d9:32:18:e9:d4:8c:18:3a:30:ca:
         54:ae:07:af:59:6e:da:5b:04:4f:e8:f6:0a:71:99:33:ef:b4:
         b0:18:c0:79:95:af:57:f2:aa:e9:2b:e1:1a:94:00:8d:82:eb:
         ef:e2:be:e6:10:7d:a6:32:e5:38:d9:fa:b7:77:5c:b6:77:e4:
         94:a2:b2:45:93:70:03:18:90:4e:19:72:c8:51:18:e5:37:6a:
         f5:d8:14:4e:ab:06:68:01:f2:c0:a8:b0:2e:8d:61:42:07:32:
         22:62:e2:ad:ac:56:f8:8d:f6:cd:44:69:dd:7f:64:4a:58:dd:
         d0:1d:50:ac:da:5c:40:b9:bf:0a:74:55:4d:a2:21:f7:c5:c1:
         b9:2f:03:45:67:5e:23:e8:82:2a:df:7a:7e:36:a0:43:f0:f6:
         60:0b:94:71:f6:3c:52:f4:f6:2c:93:ca:82:21:b7:59:6a:de:
         f0:8f:2a:d7:b1:3b:df:60:64:cb:56:c6:08:ac:98:2d:22:7f:
         7d:cc:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org