Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/EWGlEbnyARQ2WunNE3y7v5R5MLA.roa
File:                     EWGlEbnyARQ2WunNE3y7v5R5MLA.roa (raw, json)
Hash identifier:          u/4T+nA9GHs2ncAHjV/5uN7+hF0MUzxk2Nx0xjPII/Y=
Subject key identifier:   11:61:A5:11:B9:F2:01:14:36:5A:E9:CD:13:7C:BB:BF:94:79:30:B0
Certificate issuer:       /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial:       01856D2F2C8D09E104894CE28BDDA2C1B821
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/EWGlEbnyARQ2WunNE3y7v5R5MLA.roa
Signing time:             Sun 01 Jan 2023 11:54:46 +0000
ROA not before:           Sun 01 Jan 2023 11:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208428
IP address blocks:        185.26.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:2f:2c:8d:09:e1:04:89:4c:e2:8b:dd:a2:c1:b8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
        Validity
            Not Before: Jan  1 11:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1161a511b9f20114365ae9cd137cbbbf947930b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:06:39:56:9e:4e:b2:75:1f:48:91:c5:0c:
                    7c:da:7e:b3:92:60:b3:89:aa:86:4f:05:73:85:2e:
                    26:fa:c3:d1:d4:39:e2:2c:84:4b:99:e8:fd:68:bf:
                    f3:0d:e4:e7:3f:c9:6c:eb:1c:ca:60:b3:c3:62:ab:
                    8f:da:2f:0c:2b:b0:08:51:bb:c2:be:2b:db:c9:63:
                    38:f4:70:88:b8:c6:3b:35:11:73:9c:9f:16:1a:a6:
                    40:a7:98:6e:12:1c:fe:04:17:d7:14:2a:64:38:8b:
                    aa:0e:97:4b:36:4c:f2:a3:61:3d:08:01:c1:64:cb:
                    55:38:0c:9f:ff:1a:83:f9:a3:93:e1:b7:d2:7f:a8:
                    5c:65:65:62:6e:c0:74:89:9e:58:99:47:0f:07:f8:
                    38:a0:da:01:75:80:45:36:95:ca:4d:6b:f9:ff:be:
                    83:09:7c:26:c3:75:95:87:5a:22:ae:c0:17:e3:30:
                    3e:cf:cb:54:27:f0:c3:ee:3e:28:31:94:15:5a:8b:
                    07:ff:ce:e8:d6:85:9a:ae:26:ef:d9:7b:4b:03:bb:
                    8b:4b:a3:d2:87:b5:06:3b:67:80:3f:65:b8:ba:93:
                    67:2c:23:e9:94:90:5a:59:35:55:a7:76:f1:7a:3b:
                    64:8c:4f:a6:c3:1d:0d:51:48:25:19:dc:c0:55:6a:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:61:A5:11:B9:F2:01:14:36:5A:E9:CD:13:7C:BB:BF:94:79:30:B0
            X509v3 Authority Key Identifier:
                keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/EWGlEbnyARQ2WunNE3y7v5R5MLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:66:c5:44:a3:7a:5e:d5:ff:49:dc:a0:ad:c6:94:77:72:7f:
         60:fc:cd:3a:3a:b5:be:79:dd:01:a7:34:ce:e4:1b:d9:8a:f6:
         0f:b6:d8:f5:7c:9f:7d:cc:cb:57:2e:ca:6b:e4:7d:cb:4f:b2:
         29:5b:87:a2:26:1f:12:a1:bd:ba:80:d3:40:db:c4:88:dc:5b:
         56:aa:b3:b8:99:41:a4:47:fa:e4:ad:6f:72:a5:40:a0:e7:59:
         ae:12:9e:7b:02:2a:ec:2c:ba:84:80:9f:4e:30:76:5b:cd:05:
         13:7e:4d:53:af:e2:d4:c3:1c:88:b8:9b:5c:d1:4c:77:07:75:
         b6:40:3c:a3:37:e5:01:bf:4c:ec:02:6d:b9:3b:e5:04:2a:6b:
         ba:76:06:a3:b4:6e:17:36:a2:15:1a:0a:37:30:43:26:4d:ba:
         ba:a9:43:f6:6b:5f:4b:16:80:1e:c3:a3:ff:5d:df:3e:b6:e6:
         21:5d:23:2d:1e:bb:a7:1c:e2:34:34:b2:5d:00:67:d1:73:c2:
         99:41:c5:1f:b5:e6:7e:62:a5:90:72:34:66:83:38:be:33:ff:
         d9:95:b9:ae:84:fe:54:16:c5:ca:a6:a2:85:96:b0:54:80:5f:
         a5:16:63:de:af:c6:86:4a:fd:73:b5:7c:1b:48:3e:76:16:c6:
         0a:c5:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:44 2024 by rpki-client on console-fra.rpki-client.org