Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa
File:                     HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa (raw, json)
Hash identifier:          HAY6b+RScChQDdRP/a/aCNFQZDMHjkOHhg+32jPa1Hk=
Subject key identifier:   1C:70:53:22:33:65:90:1C:BD:1E:06:E2:98:EB:3B:63:7C:C3:D0:A0
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       018BDDBE59F27BB2F43D0C90FDAE68864CFE
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa
Signing time:             Fri 17 Nov 2023 14:45:21 +0000
ROA not before:           Fri 17 Nov 2023 14:45:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        194.76.115.0/24 maxlen: 24
                          194.76.114.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dd:be:59:f2:7b:b2:f4:3d:0c:90:fd:ae:68:86:4c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Nov 17 14:45:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c7053223365901cbd1e06e298eb3b637cc3d0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:26:e5:57:98:a7:f1:dd:06:c6:78:1f:9d:7a:
                    6f:5f:99:7a:30:cb:28:71:03:bb:fe:6b:ad:26:90:
                    cd:0f:ee:5d:2c:3e:64:60:8d:a2:7f:27:93:05:e3:
                    19:9e:eb:21:1d:b5:d1:4f:6c:8d:e6:c8:4b:ae:d0:
                    f7:78:0d:e9:5f:48:1f:32:df:9f:be:d0:15:78:c1:
                    24:ee:3c:89:e5:3f:d0:f2:75:c6:7f:0b:9b:cc:fd:
                    92:a1:d8:db:c7:f3:d2:4d:69:4a:24:08:ab:5f:f5:
                    15:99:e1:aa:74:53:98:bb:9a:1d:8b:78:51:67:c3:
                    ce:e6:b3:22:c2:98:27:0c:d8:ea:14:6b:55:71:69:
                    c1:d7:bd:ba:56:19:5a:29:88:ad:11:03:aa:32:69:
                    b2:cc:d8:1f:68:a0:99:f1:7a:57:1c:93:f1:b5:ab:
                    a1:e4:06:30:ac:46:53:e7:39:4b:eb:b9:ee:fc:42:
                    d1:4b:13:36:10:47:44:b4:96:98:98:79:58:8a:cb:
                    fd:01:73:27:13:13:0d:d7:20:74:c0:3f:3e:b8:cd:
                    d2:2b:53:97:43:ac:15:3a:e9:48:99:07:e4:38:ff:
                    53:b8:43:ad:5e:0a:84:81:2f:7b:83:c9:61:a8:d2:
                    f6:76:3f:18:be:d5:76:8d:b1:cc:17:73:84:e2:80:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:70:53:22:33:65:90:1C:BD:1E:06:E2:98:EB:3B:63:7C:C3:D0:A0
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/HHBTIjNlkBy9HgbimOs7Y3zD0KA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:0e:16:48:d0:fc:77:3d:b5:28:b6:a8:4b:c4:ee:29:c1:95:
         38:df:75:dd:7b:e1:fa:a9:75:d2:c3:39:26:f6:82:79:73:e1:
         f4:7c:69:1a:15:57:b1:e1:48:b8:1c:a2:03:97:d5:52:0e:e3:
         77:3b:11:f0:e4:06:15:8d:e2:b2:99:84:48:d8:ee:25:84:46:
         d4:19:10:39:ef:bd:9f:c3:7e:d7:ce:a8:e3:22:03:15:b7:08:
         e6:d1:2e:12:b0:7d:a0:e2:88:56:5f:18:61:0b:7a:05:3a:10:
         08:4b:51:e9:ca:0b:e5:ec:83:c3:16:60:a6:2f:3f:8e:f7:12:
         53:28:29:29:39:af:b6:a8:ce:94:ac:96:f4:c7:71:a8:32:85:
         10:ab:53:24:d9:eb:93:4e:d3:0e:10:52:86:e6:47:f7:99:63:
         ea:d1:eb:b3:c7:81:44:00:df:e1:51:da:65:e7:bf:b2:79:f8:
         a0:d6:8a:f4:48:44:f6:84:dc:20:36:79:31:86:b9:af:ab:30:
         8a:4b:e9:6b:83:b6:3c:45:e3:3d:42:c9:e6:51:1e:03:cd:85:
         ba:45:fc:f1:ee:8d:99:85:3a:d1:84:d9:02:68:aa:d3:db:06:
         29:f1:2e:00:bb:8e:79:b1:06:29:d6:77:92:6f:90:d9:17:0a:
         e9:89:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org