Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EjlRXrDj0zkuXd6OZJzjSDno41U.roa
File:                     EjlRXrDj0zkuXd6OZJzjSDno41U.roa (raw, json)
Hash identifier:          8hVPYdbzCHM81wZC6VDvPSrHre8QgmzuOMIw3pUWidM=
Subject key identifier:   12:39:51:5E:B0:E3:D3:39:2E:5D:DE:8E:64:9C:E3:48:39:E8:E3:55
Certificate issuer:       /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial:       018BAA5454360A0715188751B2578425FDD4
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EjlRXrDj0zkuXd6OZJzjSDno41U.roa
Signing time:             Tue 07 Nov 2023 15:08:55 +0000
ROA not before:           Tue 07 Nov 2023 15:08:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48940
IP address blocks:        77.232.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:aa:54:54:36:0a:07:15:18:87:51:b2:57:84:25:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
        Validity
            Not Before: Nov  7 15:08:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1239515eb0e3d3392e5dde8e649ce34839e8e355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3c:50:55:26:a9:5b:a9:87:f9:04:68:55:50:
                    50:a9:88:ac:8e:32:27:92:0c:2a:a3:cc:6e:c5:bc:
                    25:d1:80:e9:9f:af:11:9e:72:98:02:f0:a8:61:fb:
                    33:af:6a:02:a1:93:93:04:82:28:e9:80:4e:24:da:
                    44:f6:6e:48:a3:b4:cb:13:35:5d:77:c8:a5:a9:da:
                    03:72:3c:73:8a:9e:d1:ae:56:a5:e8:db:a5:0a:13:
                    a7:09:75:4b:7d:0d:9f:45:7d:e3:6d:cc:bc:05:42:
                    b2:55:92:af:70:7b:66:db:db:f1:48:59:3a:ba:9b:
                    22:5d:3a:05:82:b7:c4:4b:a8:1c:87:96:8d:72:9e:
                    b9:6d:43:70:44:1e:31:70:30:f3:cf:cd:f2:8c:6e:
                    0a:e8:71:6a:e1:b0:79:2b:59:93:26:b8:be:ec:f4:
                    c2:d1:da:93:22:37:5e:4b:45:af:c8:be:5e:ca:3c:
                    6e:02:9f:90:8b:4f:50:7b:98:22:8f:4c:22:e8:9e:
                    2f:06:bb:b7:98:af:8f:9b:69:b9:10:4d:35:94:d6:
                    9a:44:e1:33:f2:b8:ac:c8:bd:b8:d3:04:f2:72:3b:
                    9b:54:40:1f:36:8a:44:54:4c:6c:f5:5c:05:a6:83:
                    23:f6:21:ba:03:aa:a0:ce:6d:30:bc:83:d1:c7:b8:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:51:5E:B0:E3:D3:39:2E:5D:DE:8E:64:9C:E3:48:39:E8:E3:55
            X509v3 Authority Key Identifier:
                keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EjlRXrDj0zkuXd6OZJzjSDno41U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.232.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:44:3d:a3:e2:86:b1:28:1e:af:b8:d9:12:10:69:e6:8d:
         6a:22:4b:92:ff:7a:8f:05:af:bf:b7:89:04:49:74:f3:d6:a1:
         a4:81:f7:66:7f:c4:37:51:4b:d8:20:0e:d8:51:1b:ea:d5:65:
         ec:c5:cf:02:f1:ec:7c:b4:a1:09:02:c3:14:35:23:29:ff:9a:
         53:03:04:89:8b:9d:f4:78:48:c9:77:f0:96:7a:0d:8b:05:f3:
         a9:86:1e:cf:e8:48:ac:32:26:ad:8c:51:00:1c:36:e7:72:3d:
         21:72:bb:90:73:96:55:c2:f1:71:3b:f4:b3:f9:dd:cc:5c:77:
         f6:a3:ef:3f:3c:ef:6c:f1:4d:91:71:cb:90:34:53:43:08:03:
         89:42:c0:36:39:af:67:10:f7:41:f2:03:17:bc:c4:e7:86:f5:
         e8:f2:f6:01:e4:04:63:6e:cb:7e:3e:e0:5e:db:b4:34:b7:06:
         4f:e8:07:de:ae:3f:61:a0:3d:de:0e:60:7d:77:a4:95:ea:ac:
         b8:d3:5c:91:4f:b5:f9:af:6f:c3:cd:3b:d8:eb:22:dd:16:da:
         a8:b7:c9:fb:fc:85:e4:72:bc:82:24:18:af:05:9e:0a:d2:25:
         36:93:a7:33:fe:8c:02:cf:93:a2:e9:48:2f:2f:5b:7f:f1:1c:
         0d:a2:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:44 2024 by rpki-client on console-ams.rpki-client.org