Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/EyjdC1sIxOgkgr7i2DknkuErdy0.roa
File:                     EyjdC1sIxOgkgr7i2DknkuErdy0.roa (raw, json)
Hash identifier:          uS9xqH0/RMdaZsvzQuv3WC2XxWaDZG+pmRFx+jLrmUY=
Subject key identifier:   13:28:DD:0B:5B:08:C4:E8:24:82:BE:E2:D8:39:27:92:E1:2B:77:2D
Certificate issuer:       /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial:       018C225455C0235C2CF44B72A297E09F4AD9
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/EyjdC1sIxOgkgr7i2DknkuErdy0.roa
Signing time:             Thu 30 Nov 2023 22:23:21 +0000
ROA not before:           Thu 30 Nov 2023 22:23:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        193.37.132.0/24 maxlen: 24
                          178.212.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:22:54:55:c0:23:5c:2c:f4:4b:72:a2:97:e0:9f:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
        Validity
            Not Before: Nov 30 22:23:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1328dd0b5b08c4e82482bee2d8392792e12b772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:6c:7a:64:ce:04:5c:f3:4c:d5:da:f5:76:
                    fe:ca:7a:66:00:6a:29:87:3b:17:d9:ea:c8:3d:49:
                    fb:28:f0:fa:b6:96:27:12:06:b7:79:ba:d2:1c:cf:
                    97:4f:b1:e5:71:c8:2f:fe:51:4c:fa:c5:37:58:d1:
                    08:0e:50:51:55:b7:40:9a:e1:93:34:3f:fe:42:37:
                    e5:4d:a2:58:8e:a8:e0:aa:a2:61:3c:06:f2:05:21:
                    ed:c6:ea:21:1a:e6:78:28:4f:0f:c1:05:5a:58:a1:
                    49:2d:86:88:22:8d:83:a2:09:51:fc:57:2d:85:ad:
                    89:f8:63:18:87:ef:9e:16:39:1b:97:e4:be:81:28:
                    c4:dc:7a:01:94:03:5a:db:4b:13:42:b5:ca:2a:ab:
                    8c:6a:99:0c:2b:fd:ba:ff:18:e3:5f:5d:09:48:a0:
                    b7:f0:70:44:39:1c:fc:e9:d4:db:4a:0e:a7:db:75:
                    0c:3c:9d:94:b6:31:9b:4d:42:f5:0c:9b:d6:e3:b2:
                    96:f3:28:eb:1f:99:80:74:0b:d5:a0:9b:eb:26:b8:
                    a9:f4:36:3b:6a:1f:69:8b:a3:67:15:01:84:23:49:
                    ef:e7:6a:3e:81:a4:5c:98:89:99:6b:0b:b9:12:5a:
                    ef:10:b6:d7:0b:b8:74:ae:d7:78:6a:cf:dd:0b:f2:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:DD:0B:5B:08:C4:E8:24:82:BE:E2:D8:39:27:92:E1:2B:77:2D
            X509v3 Authority Key Identifier:
                keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/EyjdC1sIxOgkgr7i2DknkuErdy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.92.0/24
                  193.37.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:fe:66:25:3a:67:d8:27:42:10:9b:df:d4:59:82:69:91:
         1f:2e:4d:50:e9:24:59:64:cf:c1:58:76:b5:35:67:a6:d9:c7:
         36:cc:cd:fc:14:31:b2:bf:5d:26:01:9d:b1:34:ec:29:58:c6:
         ea:93:50:9a:b4:cd:c8:55:4d:45:7b:85:c0:b5:71:a7:ff:ce:
         c2:b2:3f:61:ee:08:a7:38:36:71:cb:43:81:ee:ad:8b:ec:e9:
         a6:ef:2a:f0:fd:77:b3:24:09:b9:d9:6b:7c:ce:cf:55:63:78:
         47:c8:65:80:18:46:7d:ba:de:6a:ee:6e:2f:f8:92:dd:39:5f:
         85:59:77:19:aa:1f:9d:c8:4d:cb:d1:6d:8d:d2:46:c1:af:bc:
         8f:22:54:ed:44:36:25:45:b3:24:c3:b3:68:d1:8d:f9:94:5a:
         07:e9:cb:2c:d7:80:95:05:23:6e:22:66:2f:11:75:71:3e:34:
         eb:28:40:cb:40:53:d8:48:ec:22:68:28:04:73:a1:38:a2:46:
         88:fb:44:5d:61:f1:0e:25:43:37:3f:8b:e8:35:06:16:54:ca:
         fd:28:f3:07:e7:25:2d:33:b4:8d:94:e5:e4:b7:ff:d4:7c:c9:
         4c:22:d6:d5:11:37:6f:42:ac:ca:d3:8a:7e:1b:02:da:50:a8:
         78:2e:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org