Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/EJ__ALzn0_7y2Y37C91W3ScP7XA.roa
File:                     EJ__ALzn0_7y2Y37C91W3ScP7XA.roa (raw, json)
Hash identifier:          sHl71GGxnv6rIU4jOfTbZgoB6keYGNK5c1M0UbUHMAA=
Subject key identifier:   10:9F:FF:00:BC:E7:D3:FE:F2:D9:8D:FB:0B:DD:56:DD:27:0F:ED:70
Certificate issuer:       /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial:       018CC5012CE12F969E32C03CBE347557FBE0
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/EJ__ALzn0_7y2Y37C91W3ScP7XA.roa
Signing time:             Mon 01 Jan 2024 12:30:37 +0000
ROA not before:           Mon 01 Jan 2024 12:30:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204816
IP address blocks:        185.49.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Jan 2025 11:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:2c:e1:2f:96:9e:32:c0:3c:be:34:75:57:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
        Validity
            Not Before: Jan  1 12:30:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=109fff00bce7d3fef2d98dfb0bdd56dd270fed70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:28:8d:48:81:9a:29:8d:38:a4:ad:ac:37:
                    5d:33:37:4d:8d:f1:5e:53:a1:7d:16:34:9d:df:c5:
                    b7:fa:03:b9:c3:44:d8:75:35:7d:7d:ec:9d:a0:d0:
                    24:97:9b:05:9e:2f:c6:cb:17:ae:e2:55:13:26:42:
                    c5:d0:06:9a:2c:2e:2d:59:3f:82:e4:96:97:64:b9:
                    38:ad:bd:98:2b:01:58:03:72:fa:a5:34:cc:b7:6f:
                    b0:4d:c7:52:0b:9e:23:79:c2:cd:ec:5e:12:a5:ff:
                    25:0c:87:24:1a:21:59:79:7d:e6:dc:fb:ef:12:7e:
                    e8:2c:b5:02:32:d0:72:a0:e5:28:2c:d6:2d:9f:ed:
                    65:7e:fe:4f:d2:7f:51:e7:90:71:9d:bc:d2:f1:57:
                    68:ef:d0:4c:40:b9:35:43:10:3d:5d:9e:19:ab:ba:
                    1d:64:e4:34:95:25:30:c0:13:23:a2:bf:3c:ff:cf:
                    50:af:63:43:3c:32:36:16:e2:c3:75:8d:4d:00:00:
                    ae:d9:6f:3e:de:42:1b:35:f5:43:46:12:db:83:25:
                    ab:1b:44:91:8e:e5:07:01:fa:b4:3f:b3:b8:bb:14:
                    09:2e:a6:29:47:f2:ac:01:01:0d:22:7b:61:1f:7f:
                    bb:9c:3d:92:84:8c:4e:e4:f4:d8:49:90:f0:83:7a:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9F:FF:00:BC:E7:D3:FE:F2:D9:8D:FB:0B:DD:56:DD:27:0F:ED:70
            X509v3 Authority Key Identifier:
                keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/EJ__ALzn0_7y2Y37C91W3ScP7XA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:f1:ce:a3:8e:40:17:9d:88:61:01:b0:84:92:7b:78:bd:
         11:69:5b:ec:b7:62:8a:dd:89:41:f2:4e:9d:54:88:e2:2c:2e:
         79:be:8b:70:1b:fc:30:1b:7c:9b:2e:27:c1:2c:14:67:b9:a0:
         a2:a8:b3:45:f5:f3:04:cc:48:8e:60:22:1c:9e:75:f8:1b:3f:
         6b:27:34:09:20:17:6c:25:fd:00:59:a9:44:ea:f7:97:26:97:
         03:86:8c:13:84:d9:2f:5f:bc:76:bf:d0:a7:e9:a3:35:92:00:
         81:0f:02:16:3c:9f:2e:9e:4a:1a:26:44:74:04:38:57:91:8e:
         01:e0:cd:45:8e:08:47:d8:c2:e3:a9:ac:f7:37:a2:32:4d:2b:
         64:f4:b3:c6:82:d3:f4:22:9e:0f:cd:9f:63:9d:c5:97:db:a0:
         b5:d3:17:85:ba:1d:4f:2d:e9:c8:91:f9:a5:1c:ef:4e:1f:08:
         16:3e:35:7d:c6:d7:2d:00:46:5e:b6:f6:13:d2:b2:49:3f:49:
         a2:57:06:c5:94:20:5b:58:ef:a3:1b:38:d0:0d:1d:3a:a7:45:
         49:50:b0:d3:c6:5c:46:b3:0d:23:73:66:87:c3:2f:3c:7d:03:
         c0:f8:8c:1a:6f:4d:75:8c:ea:c3:c6:f8:f8:98:be:f1:4b:07:
         c8:27:99:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 1 15:24:40 2025 by rpki-client on console-ams.rpki-client.org