Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa
File:                     eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa (raw, json)
Hash identifier:          CuTNMj8Hm6WT9KUT3MjFwfxKTSEL3BsYtGPaKAdthZY=
Subject key identifier:   78:08:02:59:0B:23:D4:6C:75:43:E2:FB:3A:38:7E:57:DC:7C:1D:F6
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018D13532D5D414371FF709A251FC7838106
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa
Signing time:             Tue 16 Jan 2024 17:30:34 +0000
ROA not before:           Tue 16 Jan 2024 17:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8100
IP address blocks:        5.253.56.0/23 maxlen: 24
                          5.253.58.0/23 maxlen: 24
                          45.8.92.0/24 maxlen: 24
                          45.139.123.0/24 maxlen: 24
                          87.121.38.0/24 maxlen: 24
                          87.121.103.0/24 maxlen: 24
                          91.92.16.0/24 maxlen: 24
                          91.92.67.0/24 maxlen: 24
                          93.123.24.0/24 maxlen: 24
                          93.123.26.0/23 maxlen: 24
                          93.123.76.0/22 maxlen: 24
                          93.123.112.0/22 maxlen: 24
                          94.154.160.0/23 maxlen: 24
                          94.154.173.0/24 maxlen: 24
                          94.156.2.0/24 maxlen: 24
                          94.156.152.0/24 maxlen: 24
                          94.156.154.0/23 maxlen: 24
                          94.156.178.0/24 maxlen: 24
                          94.156.180.0/23 maxlen: 24
                          94.156.237.0/24 maxlen: 24
                          94.156.238.0/24 maxlen: 24
                          141.98.5.0/24 maxlen: 24
                          185.252.177.0/24 maxlen: 24
                          193.25.219.0/24 maxlen: 24
                          193.47.62.0/24 maxlen: 24
                          193.58.121.0/24 maxlen: 24
                          193.58.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 07 Feb 2024 13:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:13:53:2d:5d:41:43:71:ff:70:9a:25:1f:c7:83:81:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 16 17:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=780802590b23d46c7543e2fb3a387e57dc7c1df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:fa:06:6e:40:aa:de:6e:79:9b:ac:ba:59:
                    7d:02:f0:b6:4f:44:9d:3e:ea:47:ba:80:f6:2c:95:
                    ee:a3:43:55:ce:78:78:3b:3e:e0:2f:6f:96:8d:34:
                    ca:f2:a8:7b:41:87:ba:2a:40:f8:3e:4d:8b:1d:bc:
                    5d:ef:48:98:56:58:00:ed:ac:7e:b3:1d:21:03:84:
                    12:dd:87:53:40:3f:44:de:5e:31:78:bb:39:a1:56:
                    c0:89:ed:ca:49:18:8e:20:43:21:2c:32:5f:ec:e8:
                    48:03:f9:fc:8e:28:35:b4:ab:1c:dd:0e:ea:03:6c:
                    69:79:c9:b2:24:e4:31:23:3d:e1:8d:e6:60:9f:9b:
                    38:04:03:5e:2d:7d:02:c1:57:22:f7:33:4a:ad:53:
                    47:d7:06:86:c4:5a:0d:58:17:9f:6d:30:ca:52:ee:
                    40:68:de:67:85:59:5a:46:f2:88:fd:80:1f:77:e7:
                    41:e2:3a:8a:a2:6d:ea:6f:5d:2b:17:02:03:5d:11:
                    06:b7:0d:50:7a:ed:d7:93:38:ea:7e:fc:68:b2:61:
                    50:bb:1d:f4:23:81:c0:9d:56:67:37:33:68:d3:8c:
                    46:3d:97:e3:cf:c3:74:55:a9:4d:96:58:08:98:b4:
                    bc:1a:bc:c8:6f:e6:c5:f2:45:4d:1b:ab:57:00:25:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:02:59:0B:23:D4:6C:75:43:E2:FB:3A:38:7E:57:DC:7C:1D:F6
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eAgCWQsj1Gx1Q-L7Ojh-V9x8HfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.56.0/22
                  45.8.92.0/24
                  45.139.123.0/24
                  87.121.38.0/24
                  87.121.103.0/24
                  91.92.16.0/24
                  91.92.67.0/24
                  93.123.24.0/24
                  93.123.26.0/23
                  93.123.76.0/22
                  93.123.112.0/22
                  94.154.160.0/23
                  94.154.173.0/24
                  94.156.2.0/24
                  94.156.152.0/24
                  94.156.154.0/23
                  94.156.178.0/24
                  94.156.180.0/23
                  94.156.237.0-94.156.238.255
                  141.98.5.0/24
                  185.252.177.0/24
                  193.25.219.0/24
                  193.47.62.0/24
                  193.58.121.0/24
                  193.58.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:82:41:ac:cd:db:a4:51:f0:74:1b:76:b8:7b:c5:17:d4:e7:
         8a:fa:b1:32:96:25:52:5c:6d:47:23:0a:ac:b0:fe:f8:8a:77:
         07:36:62:a5:a9:b1:ac:24:4a:7f:aa:8b:ad:aa:fa:97:73:b7:
         4f:59:b8:bf:c2:cf:3f:e6:97:87:2d:39:a5:03:0a:42:17:8f:
         3f:a8:8a:59:c9:c9:8f:63:ee:46:5b:f6:43:64:0a:ca:d6:90:
         44:ff:b0:e6:db:a2:42:06:86:d3:d2:3b:19:50:79:c1:41:94:
         52:67:f0:ac:d0:7d:b3:12:b0:86:e2:b3:7b:6a:61:a7:e2:34:
         b8:de:87:6d:ad:a1:23:33:94:bb:b2:7d:c5:56:0c:69:f6:07:
         e3:7b:11:1d:af:a4:33:c1:9b:87:f8:30:dc:43:a5:de:8a:45:
         b5:00:40:22:52:f7:17:2a:4d:1e:a1:66:be:1b:64:22:80:0f:
         0c:99:7c:e0:22:52:b4:28:80:b5:be:03:b6:a9:7c:ee:65:2c:
         eb:ff:66:f8:17:c8:6a:98:2a:25:75:48:02:3c:f1:3f:ac:76:
         53:07:04:d3:37:a3:a1:ef:04:e8:65:c1:63:d8:7e:22:9f:58:
         e2:08:bf:b0:33:bf:79:45:0e:c0:62:b8:37:51:dd:23:b9:d6:
         bc:d5:20:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org