Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa
File:                     eh2JKwusVVPxcaSD3tI0jQkRgIg.roa (raw, json)
Hash identifier:          F7UhGZamJybvrnfHvRKyUPy1sz8/MAkbjD7xudn1PHI=
Subject key identifier:   7A:1D:89:2B:0B:AC:55:53:F1:71:A4:83:DE:D2:34:8D:09:11:80:88
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       018E2E3CE02A797FED367E2E30C6BF390C76
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa
Signing time:             Mon 11 Mar 2024 15:58:45 +0000
ROA not before:           Mon 11 Mar 2024 15:58:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        193.124.7.0/24 maxlen: 24
                          193.124.203.0/24 maxlen: 24
                          194.87.169.0/24 maxlen: 24
                          194.87.245.0/24 maxlen: 24
                          195.133.25.0/24 maxlen: 24
                          212.192.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 13 Mar 2024 05:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2e:3c:e0:2a:79:7f:ed:36:7e:2e:30:c6:bf:39:0c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Mar 11 15:58:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a1d892b0bac5553f171a483ded2348d09118088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:42:dc:d5:0d:f2:fe:0c:d6:b0:e1:b5:f4:
                    12:73:d4:00:a0:60:7e:95:de:71:65:18:cd:77:aa:
                    29:31:28:ed:fd:dc:11:40:d0:60:2d:59:55:a5:bc:
                    89:fd:55:38:33:42:2c:e7:df:4f:df:93:5e:4b:e7:
                    d5:db:4e:88:32:88:51:c9:8e:5a:7b:e0:03:d1:de:
                    b9:0a:80:bf:61:87:f3:2d:c5:9e:0a:8d:75:67:4b:
                    44:c3:fa:bb:64:34:50:58:ea:39:b3:43:00:b7:52:
                    e4:05:45:1f:c4:de:e5:e9:95:a9:e9:68:a8:98:10:
                    c5:d7:f0:bf:4e:74:65:e4:10:5f:17:3b:27:41:c8:
                    10:33:54:42:cc:c9:b1:2a:a9:fb:05:aa:4b:3c:48:
                    8a:a2:0f:02:44:92:5e:7f:ce:e3:ec:35:eb:b5:1a:
                    94:30:7e:c9:15:07:f3:71:2c:49:54:e7:cf:0e:f3:
                    a9:42:e3:56:d0:5d:bd:94:ce:75:6e:09:b6:73:10:
                    16:09:a9:c0:c3:4b:9d:3a:fa:12:77:48:e7:2c:0e:
                    56:d9:dd:0a:cb:34:d8:11:85:ac:31:7a:77:fa:d7:
                    0c:ec:4b:68:5c:05:23:9b:d8:76:8a:22:bb:2a:e0:
                    e0:c7:e2:67:00:5f:db:da:8e:f2:5c:a4:c0:3f:fd:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:89:2B:0B:AC:55:53:F1:71:A4:83:DE:D2:34:8D:09:11:80:88
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eh2JKwusVVPxcaSD3tI0jQkRgIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.7.0/24
                  193.124.203.0/24
                  194.87.169.0/24
                  194.87.245.0/24
                  195.133.25.0/24
                  212.192.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:15:85:9e:35:2e:b2:b5:9d:40:51:de:6b:4f:dd:9c:29:8a:
         d1:14:53:be:61:b6:20:41:79:5f:79:f7:79:13:53:88:02:09:
         d9:e6:e5:97:bf:4c:3d:64:71:03:8d:6a:3c:4f:49:52:b6:32:
         71:d6:72:62:34:b0:a0:68:8a:3a:4a:67:00:2c:ba:97:5d:df:
         58:5e:0e:a8:81:1d:b9:6e:25:1f:5a:f5:0d:b5:c2:22:f4:02:
         92:79:0c:cb:c2:35:1c:0d:03:9b:e7:38:e7:78:f4:9b:fa:36:
         22:6c:3f:a3:0f:8b:e0:4c:b2:17:8c:8b:c6:a5:0f:03:bc:10:
         d6:7a:38:1b:f9:1a:07:02:54:4a:15:7f:ab:d8:3a:49:6b:51:
         a7:43:61:54:f9:cc:10:bd:e2:e9:81:53:a4:c5:d6:64:1c:64:
         87:fd:17:26:a8:cc:0c:20:28:dc:2e:04:8b:52:4f:2b:73:33:
         b6:59:ed:75:52:fb:32:ff:ab:04:23:bd:74:9a:f9:29:90:4d:
         dc:bc:6a:19:da:7e:bf:cc:6b:d4:09:24:5c:a6:0a:5b:43:a6:
         c1:b4:b2:5c:ae:2c:fc:df:cd:88:c0:5f:7e:d3:a7:b0:52:f5:
         81:52:3f:e2:f1:ce:79:5d:21:10:45:64:7f:0e:1c:bb:61:2f:
         1e:7f:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org