Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ERleeGgauMuQkDmJ1r5_WN-VsQQ.roa
File:                     ERleeGgauMuQkDmJ1r5_WN-VsQQ.roa (raw, json)
Hash identifier:          UDRiAcVZwIocZBlxqIFTnIFDLZsQi7EiCx42i0q8AUM=
Subject key identifier:   11:19:5E:78:68:1A:B8:CB:90:90:39:89:D6:BE:7F:58:DF:95:B1:04
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       018572BA824588E9F1FA028121574C511CDE
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ERleeGgauMuQkDmJ1r5_WN-VsQQ.roa
Signing time:             Mon 02 Jan 2023 13:45:03 +0000
ROA not before:           Mon 02 Jan 2023 13:45:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197142
IP address blocks:        213.189.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:ba:82:45:88:e9:f1:fa:02:81:21:57:4c:51:1c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  2 13:45:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11195e78681ab8cb90903989d6be7f58df95b104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:2c:36:fa:a2:75:6c:ea:11:6a:b6:c9:21:
                    b7:05:92:96:51:cf:2c:7c:d0:52:4a:3b:d6:63:00:
                    b5:d3:1b:a0:d0:4b:1a:5f:cb:ec:c8:9e:bf:5c:66:
                    bb:04:06:ba:5c:82:a4:01:62:10:98:42:ef:2c:e9:
                    ad:dc:7d:1e:2c:82:09:04:b0:c0:93:8a:ff:c9:32:
                    9a:d6:dd:7f:c0:d0:06:2b:82:4c:72:69:71:b5:aa:
                    04:0d:ad:6a:16:52:ef:43:b6:6c:17:64:68:7f:f9:
                    23:d3:c5:0d:13:c6:cd:de:be:90:36:59:37:dd:b2:
                    ec:9a:cd:4c:ca:a6:75:9c:3e:f0:cd:1f:dc:23:e8:
                    46:c6:17:30:db:95:97:57:c3:92:3d:33:64:75:fa:
                    d6:38:13:33:f7:31:c7:f1:f6:f3:44:ee:7e:8d:89:
                    89:6d:47:96:06:d6:56:f6:94:73:0f:a0:e4:90:33:
                    5b:7d:5f:b2:04:c1:50:59:9f:13:22:0a:7d:0f:cf:
                    b4:57:d6:4b:98:67:c1:3a:9c:96:de:a1:11:0a:20:
                    76:8c:9b:65:5d:3e:ce:84:da:0a:eb:55:ee:28:d6:
                    90:e9:4d:1a:24:b5:f5:76:33:50:ad:79:aa:ad:5c:
                    c1:b1:95:81:f5:97:ee:7b:9f:bf:e0:5e:6e:dd:7f:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:19:5E:78:68:1A:B8:CB:90:90:39:89:D6:BE:7F:58:DF:95:B1:04
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/ERleeGgauMuQkDmJ1r5_WN-VsQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.189.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:35:b8:0e:cc:1b:0e:32:2c:17:54:dc:56:79:14:91:11:
         8b:f7:aa:25:a2:09:66:ae:aa:af:0d:42:46:25:4c:aa:85:20:
         a5:eb:00:10:c6:d3:e0:79:d2:11:9a:ec:af:cd:dc:bd:6a:9b:
         b5:79:c5:41:74:7d:42:22:58:29:1b:79:be:69:6b:cc:3d:69:
         7f:c6:44:3e:eb:3c:94:b6:c3:4e:73:b1:13:12:61:a0:1a:e4:
         54:2b:20:51:6c:5f:00:b8:62:0d:e7:b3:02:6d:24:ae:d3:70:
         eb:4c:3b:2e:ac:1b:8b:1a:3b:75:31:4c:3c:60:c8:01:a0:d0:
         63:9c:c3:fe:fb:8e:7e:ea:72:41:b8:ad:52:e2:4a:11:0d:ae:
         a0:a4:c6:83:7c:79:eb:2f:2f:ac:0e:59:19:89:6c:bd:22:04:
         98:7d:ed:02:b5:02:26:99:e0:27:be:42:67:07:67:b9:5e:41:
         4b:c6:a0:47:81:50:bb:82:65:39:cd:66:4d:d1:c8:bf:c0:08:
         2e:b7:0d:1c:cc:40:fd:32:d8:62:cc:56:36:ab:c1:61:67:c7:
         aa:4d:e2:02:ff:67:ef:e6:a0:a1:06:2e:77:5c:d2:c5:5e:90:
         70:2d:ea:be:21:6c:36:5f:81:6d:55:b2:3e:2f:81:bb:c4:4b:
         d0:5c:74:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyuoJFiOnx+gKBIVdMURzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjMwMTAyMTM0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTE5NWU3ODY4MWFiOGNiOTA5MDM5ODlkNmJlN2Y1OGRmOTViMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOQsNvqidWzqEWq2ySG3BZKWUc8s
fNBSSjvWYwC10xug0EsaX8vsyJ6/XGa7BAa6XIKkAWIQmELvLOmt3H0eLIIJBLDA
k4r/yTKa1t1/wNAGK4JMcmlxtaoEDa1qFlLvQ7ZsF2Rof/kj08UNE8bN3r6QNlk3
3bLsms1MyqZ1nD7wzR/cI+hGxhcw25WXV8OSPTNkdfrWOBMz9zHH8fbzRO5+jYmJ
bUeWBtZW9pRzD6DkkDNbfV+yBMFQWZ8TIgp9D8+0V9ZLmGfBOpyW3qERCiB2jJtl
XT7OhNoK61XuKNaQ6U0aJLX1djNQrXmqrVzBsZWB9Zfue5+/4F5u3X9WPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEZXnhoGrjLkJA5ida+f1jflbEEMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvRVJsZWVHZ2F1TXVRa0RtSjFyNV9XTi1Wc1FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b0qMA0G
CSqGSIb3DQEBCwUAA4IBAQBh/DW4DswbDjIsF1TcVnkUkRGL96ologlmrqqvDUJG
JUyqhSCl6wAQxtPgedIRmuyvzdy9apu1ecVBdH1CIlgpG3m+aWvMPWl/xkQ+6zyU
tsNOc7ETEmGgGuRUKyBRbF8AuGIN57MCbSSu03DrTDsurBuLGjt1MUw8YMgBoNBj
nMP++45+6nJBuK1S4koRDa6gpMaDfHnrLy+sDlkZiWy9IgSYfe0CtQImmeAnvkJn
B2e5XkFLxqBHgVC7gmU5zWZN0ci/wAgutw0czED9MthizFY2q8FhZ8eqTeIC/2fv
5qChBi53XNLFXpBwLeq+IWw2X4FtVbI+L4G7xEvQXHRp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org