Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa
File:                     8EMzKAOfhUhn8XSItk95zW6hAY8.roa (raw, json)
Hash identifier:          VflQK8Eg6npX6b2rOfebv9AIk1eEURXyJq6I/3mQw3w=
Subject key identifier:   F0:43:33:28:03:9F:85:48:67:F1:74:88:B6:4F:79:CD:6E:A1:01:8F
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0191D4F26BCBA7D919C4A2C56F377840CFE7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa
Signing time:             Mon 09 Sep 2024 04:02:22 +0000
ROA not before:           Mon 09 Sep 2024 04:02:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        194.58.155.0/24 maxlen: 24
                          194.87.29.0/24 maxlen: 24
                          194.87.58.0/23 maxlen: 23
                          194.87.169.0/24 maxlen: 24
                          195.133.24.0/23 maxlen: 23
                          195.133.50.0/23 maxlen: 23
                          195.133.92.0/23 maxlen: 23
                          212.192.1.0/24 maxlen: 24
                          212.193.26.0/23 maxlen: 23
                          2a01:57c0::/29 maxlen: 29
                          2a0c:ff40::/29 maxlen: 29

Validation:               Failed, certificate revoked on Wed 11 Sep 2024 10:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d4:f2:6b:cb:a7:d9:19:c4:a2:c5:6f:37:78:40:cf:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Sep  9 04:02:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f0433328039f854867f17488b64f79cd6ea1018f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:90:f5:cc:72:6a:70:5e:ff:42:ae:b5:6c:
                    84:5a:aa:3b:b1:e3:34:57:08:ab:fe:ee:73:76:00:
                    73:3a:21:f3:ef:69:75:e6:20:be:af:b5:3e:1d:69:
                    6d:c2:98:98:9b:09:a1:95:9f:4a:0a:78:f0:4d:08:
                    4e:07:d3:94:cc:60:e4:ef:ca:45:88:01:70:d4:83:
                    d6:9f:a8:47:ba:b9:e8:ec:7e:62:25:59:a7:bb:3d:
                    12:16:5f:36:b2:d0:e5:67:51:14:17:68:23:7e:2f:
                    6a:24:94:5d:df:12:82:72:8f:f4:4d:42:4b:d6:01:
                    94:45:54:e4:71:b4:54:75:6b:c0:af:a9:d0:c7:2d:
                    92:ce:f5:36:a0:28:67:95:c1:55:88:e6:81:15:7a:
                    90:34:cd:2b:57:82:93:00:c9:72:ce:dd:fe:2a:18:
                    00:e1:6e:1c:d3:6c:d8:24:32:19:42:bc:37:7e:bd:
                    1b:75:3b:bf:0a:ae:86:72:29:7d:d5:bf:61:70:34:
                    c9:26:22:0d:d6:92:77:f4:90:a7:bc:02:2d:01:5c:
                    2c:ac:e4:e0:cb:b3:1c:0f:37:7f:b9:1f:a5:ac:43:
                    8a:d0:bf:09:be:c4:b6:10:4c:eb:02:3a:51:92:9c:
                    a7:6b:5c:ab:c6:1b:b6:3e:15:55:1e:be:4f:20:b3:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:43:33:28:03:9F:85:48:67:F1:74:88:B6:4F:79:CD:6E:A1:01:8F
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8EMzKAOfhUhn8XSItk95zW6hAY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.58.155.0/24
                  194.87.29.0/24
                  194.87.58.0/23
                  194.87.169.0/24
                  195.133.24.0/23
                  195.133.50.0/23
                  195.133.92.0/23
                  212.192.1.0/24
                  212.193.26.0/23
                IPv6:
                  2a01:57c0::/29
                  2a0c:ff40::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:01:f2:ae:f6:cb:41:fa:e5:01:e1:e8:2a:07:d8:50:9b:b4:
         a9:be:1a:ef:79:3a:99:19:a7:b3:74:40:0d:34:ad:c4:00:fe:
         46:96:29:c7:8f:bd:c1:06:66:d8:01:31:71:86:d1:31:21:41:
         4e:aa:ee:73:e7:d1:8f:6a:c2:16:5d:ce:17:90:f4:d0:d1:a5:
         00:c0:43:01:69:26:9f:30:22:c1:52:41:26:45:1a:6d:6d:c2:
         bd:8c:40:29:4a:c1:88:ae:6c:cd:2c:6a:a3:63:11:0a:cd:c2:
         d9:d9:4e:ef:3d:49:0b:23:ba:22:71:dc:d6:e5:b6:62:0c:1d:
         08:3e:b7:fa:d7:37:a4:0d:93:8a:dd:8f:3b:37:b8:1b:10:ea:
         e8:e7:31:33:9e:b7:9c:fd:d1:3e:ec:58:04:e4:75:1d:5c:dd:
         56:6a:bb:99:c3:24:86:e3:84:85:ed:cd:fc:59:61:df:79:ef:
         b8:17:95:18:3b:cc:c6:84:81:13:d2:c7:dc:65:43:66:e1:c4:
         86:ac:a8:9e:d3:13:c5:a5:3a:3b:69:b5:d9:12:28:21:46:11:
         f9:e1:cd:10:81:84:74:a2:51:59:44:07:3e:37:f9:8b:d7:40:
         53:f1:a3:03:29:21:e6:fe:d8:86:20:ce:d4:66:83:db:e8:d6:
         44:ec:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 13:24:06 2024 by rpki-client on console-ams.rpki-client.org