Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/006559-cd83-41b2-b2ae-6c618d0b3092/1/EYNA22MxJeHZZkPNdHGuqXeJqKw.roa
File:                     EYNA22MxJeHZZkPNdHGuqXeJqKw.roa (raw, json)
Hash identifier:          bUD1mMUTPY38yIM7xe7ZUiGTl7Ym6fn2Lj8ghkaSYfg=
Subject key identifier:   11:83:40:DB:63:31:25:E1:D9:66:43:CD:74:71:AE:A9:77:89:A8:AC
Certificate issuer:       /CN=b788fd2e466963febcce2d6cd150af2012060a90
Certificate serial:       018964C05547F2FD7C2C68FADE8576ED393D
Authority key identifier: B7:88:FD:2E:46:69:63:FE:BC:CE:2D:6C:D1:50:AF:20:12:06:0A:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4j9LkZpY_68zi1s0VCvIBIGCpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/006559-cd83-41b2-b2ae-6c618d0b3092/1/EYNA22MxJeHZZkPNdHGuqXeJqKw.roa
Signing time:             Mon 17 Jul 2023 16:47:53 +0000
ROA not before:           Mon 17 Jul 2023 16:47:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        185.109.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:55:47:f2:fd:7c:2c:68:fa:de:85:76:ed:39:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b788fd2e466963febcce2d6cd150af2012060a90
        Validity
            Not Before: Jul 17 16:47:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=118340db633125e1d96643cd7471aea97789a8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:2a:45:0c:21:fd:1d:9b:b2:31:32:80:6d:
                    6e:a9:e6:9d:03:da:09:14:3d:eb:e5:58:66:4d:70:
                    37:59:7b:f8:a6:dc:e1:9a:8c:fc:bd:8b:e2:86:32:
                    fa:63:e5:66:f6:3f:9f:6e:46:ff:40:0e:d0:27:b0:
                    76:e0:26:7a:6c:8e:45:cc:83:fb:5d:80:3a:a8:59:
                    48:d5:8c:ec:76:f1:83:c5:d0:26:aa:c6:a8:70:6b:
                    6a:04:54:90:2c:6e:9e:c0:ae:97:19:47:3a:96:4e:
                    e4:0f:4a:8e:4c:df:3f:0f:f7:22:fe:6e:35:b8:96:
                    90:9a:ec:4a:6d:74:5b:ea:68:e2:78:29:22:31:37:
                    f3:f3:6a:f6:83:37:00:e3:19:b5:3e:17:0c:f5:90:
                    37:c3:07:3b:33:c0:35:a9:a6:b8:b3:f3:cf:ea:e0:
                    16:cd:34:dd:54:d8:3a:b6:ee:a9:35:02:8d:57:42:
                    9d:0b:e8:4a:81:38:09:b9:83:a6:aa:df:5d:19:00:
                    25:ed:5a:bf:64:04:51:9d:4c:ee:c2:4e:34:9a:ed:
                    12:bb:e7:dd:bb:8d:e5:f5:c3:c3:e3:cf:f9:6e:62:
                    4c:6c:56:ce:24:fd:03:7f:88:cc:a3:3a:f6:bd:8f:
                    10:59:d7:43:4c:15:a8:9c:94:e3:a5:af:6b:bb:cf:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:83:40:DB:63:31:25:E1:D9:66:43:CD:74:71:AE:A9:77:89:A8:AC
            X509v3 Authority Key Identifier:
                keyid:B7:88:FD:2E:46:69:63:FE:BC:CE:2D:6C:D1:50:AF:20:12:06:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4j9LkZpY_68zi1s0VCvIBIGCpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/006559-cd83-41b2-b2ae-6c618d0b3092/1/EYNA22MxJeHZZkPNdHGuqXeJqKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/006559-cd83-41b2-b2ae-6c618d0b3092/1/t4j9LkZpY_68zi1s0VCvIBIGCpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.109.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:85:d5:a8:b6:d9:8d:98:89:82:3f:89:b5:30:53:f8:c3:58:
         27:60:20:09:46:7b:67:ef:3c:39:b4:cb:c2:1e:29:d4:9e:8a:
         57:26:e0:59:a9:50:f5:c1:d3:bc:80:a9:e4:cb:68:de:85:ed:
         5d:98:8f:03:b2:ef:0c:47:67:5f:f5:ac:eb:24:be:4b:bd:3e:
         d1:11:cd:26:22:2a:a9:4a:74:66:bf:df:4b:3d:7d:ea:87:94:
         06:7d:71:14:92:81:dd:84:79:18:06:8e:7b:63:75:2b:43:73:
         32:db:c8:31:86:e2:3b:36:09:48:47:01:70:3f:1a:60:bf:fb:
         9c:99:50:f0:94:1c:b9:3a:bf:31:f9:c5:5e:b6:48:f4:f7:d5:
         d1:61:70:90:2c:ac:7f:17:58:45:0e:b7:b9:a8:29:7a:c9:18:
         5d:51:a6:c4:16:16:a4:e5:c5:59:65:05:ab:4d:e7:81:12:87:
         80:af:ff:87:96:95:86:9e:93:06:11:c3:dc:56:05:a1:61:7b:
         5d:fa:42:fe:9e:4e:d7:d3:b5:f1:a3:17:80:ab:d8:c9:a7:1a:
         cd:07:3a:ad:68:4d:68:c5:84:f2:aa:ff:b1:fc:80:cc:d8:ae:
         1d:56:7e:09:70:96:9e:51:20:48:26:73:68:65:f8:eb:87:7f:
         bd:e9:10:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:35 2024 by rpki-client on console-fra.rpki-client.org