Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa
File:                     Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa (raw, json)
Hash identifier:          0NTvR8yN30323gBB9ieYn0BqkeVpE2nEJMwMV6vwts0=
Subject key identifier:   12:EF:8B:67:40:A5:B4:4F:CE:19:5F:FA:DC:14:20:CF:4A:1A:EC:F7
Certificate issuer:       /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial:       018C249433D1270E87AE9DD04E733CEBE7CB
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa
Signing time:             Fri 01 Dec 2023 08:52:21 +0000
ROA not before:           Fri 01 Dec 2023 08:52:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20926
IP address blocks:        185.47.240.0/22 maxlen: 24
                          79.98.16.0/21 maxlen: 24
                          84.239.64.0/18 maxlen: 24
                          80.74.64.0/20 maxlen: 24
                          185.10.176.0/22 maxlen: 24
                          141.101.56.0/22 maxlen: 24
                          2a00:6901::/32 maxlen: 48
                          2a00:6900::/44 maxlen: 48
                          2a00:6900:f0::/48 maxlen: 48
                          2a03:5d40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:24:94:33:d1:27:0e:87:ae:9d:d0:4e:73:3c:eb:e7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
        Validity
            Not Before: Dec  1 08:52:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12ef8b6740a5b44fce195ffadc1420cf4a1aecf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:a5:c5:3d:20:c4:ac:2f:e8:cd:8b:48:73:
                    99:a0:e1:5e:78:5e:97:60:86:65:61:a9:88:43:5c:
                    f4:99:fb:4d:02:61:86:5a:1b:cf:c6:5c:73:4b:ca:
                    67:33:15:3f:84:da:aa:d4:72:7e:ff:cf:d2:2c:3d:
                    ad:0d:fc:bf:9b:69:56:ca:e2:4d:91:16:19:83:f0:
                    d1:25:7f:18:4e:d1:40:0c:45:83:9e:cd:d4:6f:2c:
                    41:eb:f7:82:ec:ba:56:d1:a3:f5:9b:93:fa:5a:b5:
                    92:a0:a1:e6:f1:6d:f9:1e:de:3e:f0:cc:d2:ea:66:
                    92:a9:26:7d:3f:b1:b2:fc:cb:c9:c1:0a:fb:84:e1:
                    ca:e3:b9:17:4e:db:9c:14:8f:ca:f4:83:f5:b3:87:
                    89:dd:86:d0:b6:2f:ae:4f:32:94:55:f7:20:d7:36:
                    91:0c:ba:81:09:ca:1c:d8:d3:4d:bf:1a:3b:ee:a9:
                    83:a3:c7:95:8e:15:73:09:a5:33:81:08:49:bb:46:
                    fe:b6:4c:0b:df:f6:fa:0c:d3:dc:77:14:a8:c8:e8:
                    ca:ac:ce:ae:96:43:84:b0:e7:f0:c1:01:d6:22:07:
                    2a:9c:cf:e9:cc:1e:d8:2b:07:d7:a3:ea:cf:f6:6c:
                    1e:81:28:35:f8:6c:66:1c:37:b7:7f:61:c5:3f:15:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:8B:67:40:A5:B4:4F:CE:19:5F:FA:DC:14:20:CF:4A:1A:EC:F7
            X509v3 Authority Key Identifier:
                keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/Eu-LZ0CltE_OGV_63BQgz0oa7Pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.98.16.0/21
                  80.74.64.0/20
                  84.239.64.0/18
                  141.101.56.0/22
                  185.10.176.0/22
                  185.47.240.0/22
                IPv6:
                  2a00:6900::/44
                  2a00:6900:f0::/48
                  2a00:6901::/32
                  2a03:5d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:df:b6:e4:bb:85:2c:4e:07:f1:60:e2:4a:b9:9e:e7:ad:
         38:4b:6f:b0:73:f2:88:04:72:47:8e:fb:99:d0:f9:31:16:37:
         b3:e2:f9:b6:0d:3b:2b:3b:38:ff:c2:d9:a1:1b:3f:af:4d:68:
         87:a2:0f:25:3f:b9:62:34:fe:c9:7f:db:9e:02:79:4d:ab:1c:
         09:4b:91:fb:f7:ee:15:83:44:b5:d3:cf:83:b6:13:d9:79:62:
         0a:b1:60:04:5a:f9:5c:de:92:1d:4d:69:f9:3d:11:a7:4c:3e:
         4d:8a:8d:e5:de:51:87:06:3d:1b:ca:00:8a:31:5b:74:af:c7:
         ca:94:0e:ac:89:cd:d1:31:39:3d:a4:bc:6e:79:f3:5c:9c:ca:
         95:82:1d:23:d2:f3:b8:08:59:f2:00:8d:23:9b:4b:75:02:25:
         28:47:bb:71:e7:d8:14:1d:1c:0e:e7:33:89:bf:a6:36:61:22:
         80:ab:48:b6:9e:7b:36:76:d3:6f:33:96:b3:45:57:02:64:be:
         bd:76:90:4f:75:2d:1e:c3:f0:0e:20:6e:4d:f6:e5:4c:52:c2:
         ef:e4:01:74:ac:19:1f:d6:ba:3b:6b:56:e4:46:b0:a1:2f:1d:
         33:cb:f6:50:5b:b0:f3:50:bd:90:1e:e2:a3:fa:d0:98:c1:62:
         09:b4:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:03 2024 by rpki-client on console-ams.rpki-client.org