Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa
File:                     vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa (raw, json)
Hash identifier:          zbtu+0wI+ezMkIkLucliUq5Lkp2wNQEQ6dxvBsVBH6Q=
Subject key identifier:   BC:3D:52:98:C9:7B:2C:B4:8A:D1:65:82:C4:26:65:D1:D5:42:81:EA
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       018818591122E41EB953BB8408A04615EE64
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa
Signing time:             Sun 14 May 2023 03:41:10 +0000
ROA not before:           Sun 14 May 2023 03:41:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        194.76.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 May 2023 04:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:18:59:11:22:e4:1e:b9:53:bb:84:08:a0:46:15:ee:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: May 14 03:41:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc3d5298c97b2cb48ad16582c42665d1d54281ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:6c:fd:c5:57:51:5e:8f:55:15:be:a0:c4:
                    b3:e0:a9:b3:1e:35:63:dc:75:fd:63:42:79:3f:fd:
                    be:49:44:13:a8:7b:97:4d:6b:19:f4:f7:d1:ae:3c:
                    b8:d7:e9:15:e1:3d:32:5d:5c:e9:28:1b:bf:0c:3c:
                    eb:b4:d9:f8:46:04:de:05:e7:4a:7c:6e:ce:4a:b8:
                    9d:1f:94:ca:bf:4e:ba:c8:4e:03:60:3d:6b:bc:8b:
                    00:aa:bc:5d:df:e3:77:c2:34:23:4e:9e:ec:fe:c1:
                    10:db:09:20:bc:04:40:37:bf:e4:8c:d1:6f:59:49:
                    c8:6b:c7:93:d6:c2:98:cf:a8:e8:d8:0f:7e:ee:c1:
                    de:75:a9:41:3e:38:a5:05:d1:63:ff:90:5d:b7:0f:
                    fd:e0:15:18:1e:99:de:2a:36:3d:2b:0e:da:02:f4:
                    6f:2b:61:bc:7a:a2:57:e7:fa:04:7a:18:0d:41:7f:
                    68:48:83:1c:26:ad:b2:27:34:fc:1f:fb:51:9e:68:
                    7e:f1:9a:c4:2c:77:81:45:17:51:0b:c3:c9:e6:46:
                    d4:c2:7c:d7:25:17:54:4d:2c:ac:5e:85:5e:5c:6c:
                    97:6c:ca:56:60:6e:fa:35:c2:72:19:14:cb:6b:bd:
                    87:e6:7a:96:24:f0:a4:53:1a:ef:21:59:ae:e4:5b:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:52:98:C9:7B:2C:B4:8A:D1:65:82:C4:26:65:D1:D5:42:81:EA
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/vD1SmMl7LLSK0WWCxCZl0dVCgeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:69:b2:b3:6b:f1:dc:5b:cc:91:5b:8d:3d:af:37:01:b9:10:
         e8:39:2a:63:cd:b1:eb:b6:ad:9e:46:4d:9d:96:0f:94:f8:3c:
         50:f7:04:27:8a:7c:ca:9c:1a:9d:e9:ae:6d:67:de:1e:01:bb:
         d1:ca:c1:21:de:71:5b:06:35:99:09:9e:32:a4:01:88:36:71:
         b0:08:10:d7:b3:f7:20:45:bd:98:af:15:86:55:c0:b9:58:7d:
         a2:d9:39:44:b8:59:36:3a:6f:e1:3a:64:29:fe:5e:81:92:00:
         75:a8:dc:2c:a4:30:a7:52:ac:5d:86:10:3f:54:a3:70:ea:77:
         69:fb:d3:71:0d:89:2a:22:cb:15:c8:a5:81:e2:49:3b:c0:00:
         02:43:85:44:fa:75:ff:b7:b8:32:a3:ac:75:53:2b:b0:c1:4d:
         29:ee:8b:d5:b7:85:15:90:ca:a8:69:f8:8b:6a:97:72:27:c4:
         46:99:3e:c9:93:76:6e:3e:b5:42:b8:90:bd:81:af:01:89:5b:
         50:e3:28:30:8d:42:71:ab:ce:d8:72:e9:5e:43:ff:ad:03:90:
         ea:34:ae:da:3f:15:da:b4:70:98:ce:b2:86:21:0a:f4:f2:c7:
         2c:7e:f7:56:f9:08:41:47:31:ba:32:da:52:9c:48:d6:d9:5c:
         9d:bc:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:55 2024 by rpki-client on console-fra.rpki-client.org