Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ELJpJuDtNgtSDC0Uui_rsdkB7L4.roa
File:                     ELJpJuDtNgtSDC0Uui_rsdkB7L4.roa (raw, json)
Hash identifier:          /T8UAEIWvrbRv/by7rbin0f4cpStFb/wnEZMtZjv88A=
Subject key identifier:   10:B2:69:26:E0:ED:36:0B:52:0C:2D:14:BA:2F:EB:B1:D9:01:EC:BE
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01856F67105CB47ABE365235E539231674F0
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ELJpJuDtNgtSDC0Uui_rsdkB7L4.roa
Signing time:             Sun 01 Jan 2023 22:15:03 +0000
ROA not before:           Sun 01 Jan 2023 22:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198949
IP address blocks:        88.157.230.0/24 maxlen: 24
                          88.157.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:67:10:5c:b4:7a:be:36:52:35:e5:39:23:16:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jan  1 22:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10b26926e0ed360b520c2d14ba2febb1d901ecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:45:dc:77:1d:38:08:df:6d:e9:d2:0a:a3:
                    4d:69:26:bb:bb:99:34:bc:bc:23:82:d7:8e:d4:d3:
                    d7:b1:08:f0:60:54:77:24:a1:44:06:b1:b9:be:8c:
                    b2:06:e8:1a:26:0d:92:c3:2d:f9:94:09:93:fd:22:
                    09:cd:40:93:42:67:e9:41:73:e2:c0:43:f5:64:95:
                    3c:9a:1d:9e:87:14:1a:c7:e6:59:46:80:7b:92:3a:
                    bd:25:d4:4b:81:f8:e0:eb:b0:d3:1f:d6:06:4f:e3:
                    ff:d3:0c:e5:3c:69:2b:d3:0b:a2:a6:50:bd:a0:a7:
                    bf:f0:cb:93:3a:5c:42:88:55:75:61:9e:36:35:50:
                    31:5b:d0:3b:5c:f5:a3:70:96:cc:32:92:ad:ef:7d:
                    df:da:1e:fb:3e:b1:26:7d:f1:f7:b8:3f:90:1c:e7:
                    5e:a1:16:e5:52:b5:f7:b4:f7:9d:ae:7a:cf:a2:f4:
                    d3:c4:99:ff:c6:30:1d:1f:79:e8:94:f7:7e:aa:49:
                    45:68:59:fc:a7:83:05:e4:a2:5a:f5:53:c7:2e:27:
                    14:ba:8f:36:67:39:84:11:9b:a4:e2:07:d0:f8:02:
                    5b:f3:11:64:d0:35:86:32:dd:03:60:f3:9b:4d:ff:
                    de:84:9f:63:2b:4d:45:99:87:db:52:05:cd:94:6b:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:69:26:E0:ED:36:0B:52:0C:2D:14:BA:2F:EB:B1:D9:01:EC:BE
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ELJpJuDtNgtSDC0Uui_rsdkB7L4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.157.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:d3:e2:ab:a3:91:f5:22:b0:1e:cc:cd:08:46:48:a2:64:3b:
         86:9f:ce:3b:26:79:49:aa:74:da:20:31:3a:90:5d:ce:ce:ba:
         3e:c7:0a:aa:84:53:47:cc:ec:1f:77:5f:50:08:df:09:cd:52:
         0b:bf:28:58:4c:52:18:03:f7:4b:61:31:65:5d:6d:c3:b6:2f:
         63:90:f1:71:9a:d9:aa:5e:2f:70:e8:90:3c:e8:e5:2e:81:f8:
         98:c1:c1:20:ed:d7:f0:dc:66:5e:83:1a:7a:4f:af:76:8a:29:
         91:4b:86:fd:b0:b9:e6:08:25:eb:30:e7:a6:7b:44:02:9f:ca:
         d6:dd:46:87:b8:f3:b2:29:9f:b0:ec:b2:5f:cb:3e:3d:b1:6b:
         62:70:e2:9f:e0:92:ce:df:5c:15:a1:a2:a7:6c:0d:e1:99:d1:
         07:72:68:60:6c:72:fc:b1:cd:82:cb:5b:5d:e5:14:f0:06:42:
         5c:9a:4f:3b:c7:c7:a3:e3:e2:c4:ef:00:d0:ec:69:85:7a:d8:
         df:f3:d5:4b:44:32:86:6d:c6:f6:c5:6a:24:d6:20:f8:c4:6e:
         a5:8f:ec:6f:fa:d0:94:e1:db:a2:14:90:b1:0d:e5:3b:91:34:
         e2:87:dc:8f:58:ff:94:2d:6a:59:36:bd:81:a4:91:50:5a:2c:
         5e:79:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:51 2024 by rpki-client on console-fra.rpki-client.org