Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/EBErq-FNkZh9tnycEnwsGhEthyU.roa
File:                     EBErq-FNkZh9tnycEnwsGhEthyU.roa (raw, json)
Hash identifier:          eDO7CGNzx4pZ9f/m3drt65qiyyabMIEwHScYB6/2FcQ=
Subject key identifier:   10:11:2B:AB:E1:4D:91:98:7D:B6:7C:9C:12:7C:2C:1A:11:2D:87:25
Certificate issuer:       /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial:       0185A79A491D1BB6C5D6A741135A99C04BF9
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/EBErq-FNkZh9tnycEnwsGhEthyU.roa
Signing time:             Thu 12 Jan 2023 20:09:44 +0000
ROA not before:           Thu 12 Jan 2023 20:09:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.93.220.0/24 maxlen: 24
                          193.160.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a7:9a:49:1d:1b:b6:c5:d6:a7:41:13:5a:99:c0:4b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Jan 12 20:09:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10112babe14d91987db67c9c127c2c1a112d8725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:20:46:9e:ad:a1:4d:88:fe:2a:e6:80:e9:
                    bc:cf:ec:64:e5:af:87:a4:c0:35:5f:e4:95:c6:af:
                    68:40:a0:91:29:a5:e9:43:2d:e9:27:b3:31:f7:fa:
                    f1:03:4d:34:39:24:0d:62:1a:39:a7:27:2a:f6:49:
                    cf:fd:c8:69:ac:c0:e2:43:1a:34:a5:71:23:7f:3d:
                    ce:9c:5a:97:f0:35:bb:89:33:d0:a2:2d:96:a0:8b:
                    18:5e:b6:be:e0:8f:05:08:5b:97:d9:ba:00:dc:86:
                    b5:20:04:7f:45:6e:1e:59:ef:b1:d2:2d:7c:f8:fd:
                    12:4b:0c:fb:3f:e3:6e:e7:71:8d:7c:a3:44:b1:5a:
                    70:28:1f:90:d7:30:2d:52:51:d9:85:db:3b:d4:ba:
                    37:fe:9d:15:bf:81:94:d8:1f:57:3a:ad:88:c6:d9:
                    48:3a:83:ec:3d:fd:0d:16:9e:e7:fe:f0:3e:f8:2e:
                    f4:30:cc:95:0c:b2:ce:d0:37:62:48:5d:f1:9a:cf:
                    f7:bd:d4:1b:95:53:94:3b:ea:a6:b1:99:ce:1b:8d:
                    f5:d3:96:83:a6:94:6f:93:dc:2d:5d:2c:a9:db:50:
                    14:d2:94:da:cd:4f:f7:40:e8:14:1c:fb:62:d7:68:
                    61:94:9f:1f:d8:3e:2d:5a:81:09:fd:67:d2:37:c6:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:11:2B:AB:E1:4D:91:98:7D:B6:7C:9C:12:7C:2C:1A:11:2D:87:25
            X509v3 Authority Key Identifier:
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/EBErq-FNkZh9tnycEnwsGhEthyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.220.0/24
                  193.160.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:57:55:dd:52:5e:67:41:2e:14:c9:5e:41:10:c3:59:d8:
         45:9f:09:93:c4:ab:b7:6c:ba:10:f6:b8:fe:59:36:b9:2a:da:
         86:75:c2:b4:d7:89:65:a1:20:72:f3:27:58:fe:b5:06:ec:bf:
         16:dd:65:45:92:ec:c0:c0:e6:b2:8e:17:6a:6a:80:f4:a4:71:
         9f:2f:e7:97:a9:d1:2f:f1:4f:46:d8:71:c4:78:f3:9c:ea:7a:
         25:fe:86:6b:64:66:a0:fe:70:82:64:97:ea:b6:c1:59:a7:88:
         db:33:47:56:9e:d2:f9:7c:35:a0:f1:6b:1d:34:a4:c3:a6:dd:
         13:ca:98:3e:3d:ce:ec:74:5b:6f:fc:c1:d6:f8:f3:f7:15:b6:
         24:28:fb:6c:b2:b8:36:33:2a:06:30:d1:4f:c3:b2:74:ed:93:
         e6:b6:6e:41:d1:31:a8:be:06:08:09:8b:99:bd:1d:fd:9c:b2:
         02:d4:1f:8a:16:2e:e9:82:1e:a7:63:ca:4c:e3:c0:8e:9d:fd:
         ad:70:43:8a:1e:44:4a:c1:3a:05:98:8d:b9:65:04:f8:60:f0:
         c4:31:3e:22:9d:06:37:ff:99:a9:70:1d:d4:b3:b7:9f:0a:ad:
         8a:b2:2a:28:cc:40:95:f6:8f:ae:44:3a:73:51:c2:cb:0d:b3:
         59:f1:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org