Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aeABX8f4segjOnntkYnWsyVZDZc.roa
File:                     aeABX8f4segjOnntkYnWsyVZDZc.roa (raw, json)
Hash identifier:          Kfgcd/V72a5M6i7GZCO75HGBHH61GSy3rFOWnNoU2Fc=
Subject key identifier:   69:E0:01:5F:C7:F8:B1:E8:23:3A:79:ED:91:89:D6:B3:25:59:0D:97
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       0188959D482141D0CA9BA58D46CA9BDFB117
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aeABX8f4segjOnntkYnWsyVZDZc.roa
Signing time:             Wed 07 Jun 2023 11:28:12 +0000
ROA not before:           Wed 07 Jun 2023 11:28:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199565
IP address blocks:        178.254.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:9d:48:21:41:d0:ca:9b:a5:8d:46:ca:9b:df:b1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jun  7 11:28:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69e0015fc7f8b1e8233a79ed9189d6b325590d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:39:79:dc:0e:68:8c:1e:39:d7:fb:42:43:
                    ff:2c:ac:75:7d:fc:97:7e:59:fa:3a:b1:78:b1:f8:
                    2e:fc:fc:50:97:80:aa:a3:7b:90:5d:ef:c1:c1:35:
                    c1:42:f3:2c:27:ca:37:09:bd:7d:33:e4:46:18:66:
                    57:f8:af:b2:3d:1f:62:cf:05:de:77:a4:92:aa:e1:
                    24:f2:f5:c6:85:0e:89:2a:7d:46:2d:3c:91:67:06:
                    40:de:f6:ad:5a:46:af:ab:7f:7c:bb:39:aa:ca:31:
                    1c:68:8c:5c:75:82:b2:83:4a:f1:1b:82:7a:61:3b:
                    29:22:dc:d1:3b:f8:e6:7a:ae:8b:27:7f:09:bf:d5:
                    df:d1:ef:80:3e:81:d2:9b:ec:8c:24:70:58:d1:4e:
                    6d:4d:4c:85:43:71:b3:a0:5b:29:b7:aa:58:a0:78:
                    e5:90:81:52:e9:12:97:b9:17:33:c0:56:b3:d6:95:
                    ae:65:0d:e0:09:b6:fc:35:46:d7:9f:5d:67:ca:58:
                    89:ca:e4:30:9e:f0:b2:89:42:e6:1b:c2:82:7a:19:
                    eb:41:6c:2c:31:26:ae:f0:b6:0b:a1:b9:64:d8:21:
                    a0:87:89:1c:1b:16:28:e7:04:31:3d:2b:d4:d4:51:
                    df:be:7e:80:c8:9c:ec:52:d1:19:9d:22:1e:9a:b0:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E0:01:5F:C7:F8:B1:E8:23:3A:79:ED:91:89:D6:B3:25:59:0D:97
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/aeABX8f4segjOnntkYnWsyVZDZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:c4:a1:73:e1:81:a0:81:b6:32:7d:51:ff:8e:8e:3e:37:
         84:e3:39:2a:17:f6:e0:3d:1f:ad:20:ac:46:50:61:57:f2:fe:
         51:d2:8e:da:17:b8:d4:da:01:ef:b7:01:e4:93:9e:59:8c:ba:
         3e:fa:08:1f:ba:36:9d:45:71:bb:de:a8:e6:89:c1:05:96:51:
         a4:fe:39:78:f5:7a:66:5d:33:ca:f3:46:c7:49:72:9a:a2:24:
         7c:a2:40:f9:10:1a:1f:06:d1:33:5e:5a:11:a5:29:84:44:ab:
         06:6e:1a:0b:3e:32:33:d8:28:8b:d7:80:bc:0a:f9:bc:3e:bf:
         9a:9f:b8:af:93:d4:dc:78:11:42:5d:6b:49:50:81:9d:3c:2c:
         bc:cb:ab:1a:60:e0:cd:35:a1:4e:0f:94:5e:ca:b7:80:9b:d7:
         9f:4b:44:00:6d:e8:d7:38:fe:ee:8f:c4:82:60:9c:5a:af:77:
         e5:a1:51:f5:bf:b2:b8:d7:e3:ff:00:00:64:a3:df:30:b5:7d:
         cf:4d:5b:a6:ab:43:f7:eb:20:57:eb:0e:30:d1:71:31:7f:65:
         3c:6f:95:8e:93:aa:61:ac:74:5b:4d:a7:6b:75:4a:b7:b1:4d:
         ff:e9:26:fe:30:89:35:7c:16:84:8f:fd:54:93:b3:09:df:e5:
         3a:b4:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org