Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/aYAuAbpgcmwpCcfC3E-GoQ7ocyM.roa
File:                     aYAuAbpgcmwpCcfC3E-GoQ7ocyM.roa (raw, json)
Hash identifier:          E6RQrMcub1rciV5aW6rQydNxR/TqoVbLDPV2XC3sJ5s=
Subject key identifier:   69:80:2E:01:BA:60:72:6C:29:09:C7:C2:DC:4F:86:A1:0E:E8:73:23
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       018827FF85E97319209CDDE914FE77BFB3AF
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/aYAuAbpgcmwpCcfC3E-GoQ7ocyM.roa
Signing time:             Wed 17 May 2023 04:37:17 +0000
ROA not before:           Wed 17 May 2023 04:37:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62579
IP address blocks:        194.76.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 17 Nov 2023 05:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:27:ff:85:e9:73:19:20:9c:dd:e9:14:fe:77:bf:b3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: May 17 04:37:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69802e01ba60726c2909c7c2dc4f86a10ee87323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:89:dd:5a:df:89:e6:8d:ac:89:3a:4c:7b:
                    14:50:1c:24:7d:dc:e1:6d:ca:bc:c2:56:53:6d:3a:
                    8b:c7:80:b3:0a:78:a6:d7:8c:53:f9:d4:86:ec:80:
                    82:59:39:4f:4a:6a:0d:1a:64:e0:38:2a:a9:05:b7:
                    e9:fe:f1:be:e5:d1:5b:68:83:80:bf:38:74:70:12:
                    72:8e:78:8f:b3:28:3c:79:a8:bd:1f:52:52:5d:ee:
                    15:73:df:a3:87:6e:9e:35:49:17:ff:95:5d:7d:0b:
                    4b:c8:f1:a1:8f:0b:26:ce:d0:bc:4b:a0:e0:5e:3f:
                    86:68:8b:b5:b7:3f:e0:ab:40:96:0e:bf:bb:5e:18:
                    d2:a3:42:30:62:90:26:bc:ab:47:31:c8:a4:37:ec:
                    53:e3:84:92:17:78:d7:d2:df:ef:0e:ef:43:07:62:
                    6a:63:1e:4a:ad:0a:4e:92:4b:f3:a0:d2:da:a2:04:
                    42:7d:ee:e7:b0:17:e8:9a:0b:24:1b:b7:69:5c:5f:
                    d7:f2:53:b9:48:f2:17:ee:ac:06:a7:53:1b:04:e1:
                    04:22:59:5e:44:6c:46:19:98:1f:5c:57:e6:98:e6:
                    f4:50:18:bf:58:d7:eb:fb:95:42:f7:8a:8f:fb:3c:
                    5b:eb:8d:20:59:6c:7f:a9:66:1f:2c:5f:f9:58:b3:
                    b0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:2E:01:BA:60:72:6C:29:09:C7:C2:DC:4F:86:A1:0E:E8:73:23
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/aYAuAbpgcmwpCcfC3E-GoQ7ocyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:19:ff:dd:a6:d1:44:5a:04:34:81:d4:8f:cd:3c:3e:8b:
         c9:33:bb:21:17:2b:f5:3c:63:18:2c:1b:c4:76:c4:29:7d:5e:
         1d:3a:11:3c:93:18:e4:57:62:85:f5:1f:e6:1b:e0:4d:36:03:
         6b:cd:c6:8b:57:fa:9b:76:95:f0:1c:14:2c:52:cf:4c:42:0d:
         41:bf:73:a2:3c:b3:03:2e:53:a0:b0:36:2b:37:c2:75:b3:f1:
         4a:86:ea:fb:ac:dc:09:28:56:fa:a8:90:f5:36:1d:f3:95:4c:
         fb:37:f5:b5:2a:12:88:f1:74:60:88:a1:2e:56:15:3b:95:70:
         d3:97:35:ef:5d:21:a0:76:40:2e:bb:18:1e:24:4e:ca:f0:60:
         1b:4b:ab:8c:21:f0:9b:01:02:56:1a:56:23:ef:b0:a5:6b:6c:
         8f:2e:b3:9c:a9:82:22:fd:19:d5:1d:5f:ab:9b:23:96:3c:52:
         f6:0e:d4:9f:5e:69:dd:1a:1a:d2:8c:66:20:6a:ec:48:de:39:
         d5:65:ee:cc:90:3f:fa:69:53:85:86:9a:bb:0c:5f:92:99:c1:
         93:a6:7a:b4:48:a6:47:27:5b:84:77:ce:5f:de:d6:4d:62:37:
         cf:aa:8b:2f:f2:2b:90:02:45:ec:25:71:24:f4:e0:ac:6a:7b:
         ce:56:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org