Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ed7zjRiy_kQHqpWrY9htrajTHrc.roa
File:                     ed7zjRiy_kQHqpWrY9htrajTHrc.roa (raw, json)
Hash identifier:          MT3RChStq5CcbQNbUMbhBEGCyA/D5FzDvR7KUWKholc=
Subject key identifier:   79:DE:F3:8D:18:B2:FE:44:07:AA:95:AB:63:D8:6D:AD:A8:D3:1E:B7
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       01856C25E86E6DE7EC2955D86BF8AF1E302E
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ed7zjRiy_kQHqpWrY9htrajTHrc.roa
Signing time:             Sun 01 Jan 2023 07:05:01 +0000
ROA not before:           Sun 01 Jan 2023 07:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54252
IP address blocks:        194.76.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 May 2023 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:25:e8:6e:6d:e7:ec:29:55:d8:6b:f8:af:1e:30:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Jan  1 07:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79def38d18b2fe4407aa95ab63d86dada8d31eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:8d:8e:db:4b:2c:ae:b8:c9:15:24:cf:8c:
                    e0:11:4c:0a:d5:53:79:0e:32:78:29:16:39:ca:7a:
                    da:1f:61:a5:d8:0d:59:1b:63:c0:0e:e5:a7:2a:57:
                    41:fa:b7:96:b8:46:e8:15:fb:18:26:dc:3d:af:45:
                    9f:c9:41:26:5c:be:23:25:6e:84:4f:a5:4a:e5:97:
                    31:0d:d9:a5:0f:73:de:77:e1:15:83:95:da:fb:25:
                    c6:88:bc:d9:00:1e:e2:44:6a:89:37:4e:c3:a6:b0:
                    b0:81:a6:f3:72:f2:73:a8:e5:4b:76:a3:48:74:51:
                    64:42:93:1d:f7:84:50:d7:d3:73:a3:a2:fa:02:57:
                    53:d0:40:96:5f:60:da:33:d8:b6:6c:67:de:63:12:
                    9c:e3:93:96:20:7e:cb:e7:56:af:fb:18:8a:75:d9:
                    e8:2b:90:ca:9d:c3:77:98:fc:a9:ed:fc:fb:bd:bf:
                    7e:81:e0:74:c8:41:98:cb:55:1e:00:c7:73:e1:55:
                    62:44:c9:c5:35:31:2c:ac:bc:14:d0:9b:71:ae:ed:
                    d5:fa:df:4f:a8:07:42:fe:6e:27:25:e8:46:6f:2c:
                    c3:78:ea:a5:72:e5:4c:5f:4b:27:6b:c2:23:4d:0e:
                    1f:1c:e3:ac:c5:a3:d6:d2:08:89:f3:1f:c4:77:dc:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DE:F3:8D:18:B2:FE:44:07:AA:95:AB:63:D8:6D:AD:A8:D3:1E:B7
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/ed7zjRiy_kQHqpWrY9htrajTHrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e5:68:fe:82:96:ad:e0:99:62:2a:fb:52:53:32:7b:3a:23:
         30:39:bd:6f:72:87:65:fe:da:40:aa:18:b1:5e:3e:3e:31:06:
         5e:4f:01:77:f1:75:78:62:ed:ea:71:a1:6f:c3:72:4f:40:1e:
         5d:05:ce:a6:03:40:34:7a:f2:1a:0b:2a:d8:46:79:b1:73:4d:
         e5:37:92:f9:65:ac:23:1a:ae:0b:74:19:cd:31:0b:e7:6f:a3:
         c2:e2:b2:05:6b:0c:53:dd:18:56:5e:a2:29:42:6c:a0:ee:90:
         ef:03:b8:11:52:7c:c4:93:98:c1:42:1c:07:b3:f8:4a:83:52:
         11:d5:49:ce:a1:24:e1:e2:03:80:86:c7:05:ff:f6:a0:93:ad:
         b7:3a:08:aa:18:a8:b5:9d:d8:cb:ce:f7:9c:ce:00:b4:f4:f1:
         fe:5e:9f:44:f8:43:af:7e:dd:dd:d9:d9:5e:da:8b:56:a5:a5:
         25:03:df:e7:f6:17:d1:17:97:1b:f8:87:50:81:85:ad:c1:3c:
         0a:a8:ab:1a:aa:b1:5c:1c:82:42:70:0c:71:af:bb:93:cf:4d:
         df:f4:c2:36:1d:47:5d:35:ef:b7:9d:c4:ea:8e:cb:fd:4e:27:
         9d:6e:c5:50:36:c0:0b:8c:5c:61:5e:ab:94:97:82:39:4b:83:
         e2:aa:33:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org