Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EU4iaZv4JmBqQf4H_WOpZinu18A.roa
File:                     EU4iaZv4JmBqQf4H_WOpZinu18A.roa (raw, json)
Hash identifier:          O4PnExLJtlo55b9lzeAX9m4WubpXIQhcV9GM3O1kPJE=
Subject key identifier:   11:4E:22:69:9B:F8:26:60:6A:41:FE:07:FD:63:A9:66:29:EE:D7:C0
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       018990C5211A6F3BB665529C0989B843465E
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EU4iaZv4JmBqQf4H_WOpZinu18A.roa
Signing time:             Wed 26 Jul 2023 05:56:25 +0000
ROA not before:           Wed 26 Jul 2023 05:56:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        185.104.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 05 Aug 2023 19:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:90:c5:21:1a:6f:3b:b6:65:52:9c:09:89:b8:43:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jul 26 05:56:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114e22699bf826606a41fe07fd63a96629eed7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:e8:64:f6:d8:10:a4:6b:f7:d6:cb:c5:11:
                    0c:48:11:d5:6b:f6:77:d3:1e:6e:91:25:5f:29:21:
                    f7:25:63:cc:45:72:0d:55:11:98:bc:da:50:b5:c9:
                    bc:d1:71:79:cf:c9:3c:82:60:1d:6a:6a:c2:5f:e2:
                    a8:c1:d9:c1:19:a4:67:0f:fe:09:d7:a6:85:06:a7:
                    af:11:e1:38:f4:34:11:a3:2c:8c:74:b6:e8:92:7d:
                    c6:8b:8c:63:5b:2d:7c:88:00:10:75:92:55:e8:ad:
                    90:39:03:fc:76:6f:60:1f:82:38:31:50:6c:c2:ec:
                    6a:21:f5:69:dc:9a:8e:3d:1c:44:4a:9c:09:8b:3d:
                    42:7d:6c:be:20:dd:c8:99:96:37:2f:cc:06:8e:37:
                    65:4d:e2:b2:2d:ae:f3:40:27:ad:bb:1e:aa:62:da:
                    d4:de:55:93:06:b5:84:7b:b3:ac:33:e2:c4:6d:fe:
                    6d:c5:6b:42:3f:87:95:3b:49:04:8c:cf:48:82:24:
                    92:f1:26:94:80:d5:dd:b5:5d:2f:16:4b:2a:bb:21:
                    12:9f:b1:af:b7:a7:0a:51:d5:c8:ac:7d:4e:64:c0:
                    9b:47:9f:8e:c8:bd:2a:31:43:b4:f7:6c:d9:0c:a9:
                    72:bc:d1:11:45:08:e8:71:99:6b:97:8d:ff:55:1a:
                    5b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:22:69:9B:F8:26:60:6A:41:FE:07:FD:63:A9:66:29:EE:D7:C0
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/EU4iaZv4JmBqQf4H_WOpZinu18A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:b3:57:f5:c3:57:29:e2:46:9c:a2:65:c5:7d:66:dd:9a:
         52:24:f0:16:05:00:8b:25:6e:e3:bd:b4:fd:d3:af:a7:d5:b9:
         9e:ef:07:4e:54:d0:ba:4c:47:53:07:29:07:d7:93:06:67:9c:
         94:c5:94:c6:f6:d8:44:62:a8:94:b4:59:f9:e7:d7:c7:ce:8b:
         a9:bc:ad:db:5e:e0:40:8a:26:51:e7:ef:0d:18:34:95:44:c1:
         3c:f8:aa:4c:d6:05:3f:ce:f4:bf:32:e5:20:5f:97:6a:74:28:
         29:da:ca:8f:7f:05:3a:0b:35:00:dd:ac:21:c8:9b:e6:60:d4:
         9e:a9:af:21:b1:56:30:c6:67:db:8e:f1:d9:a4:21:70:24:bb:
         e6:7e:8f:20:3b:ca:9f:dd:ce:a0:c5:9b:89:56:5d:62:36:39:
         88:3b:c8:f8:31:e4:9d:1e:7c:6e:c1:76:cc:e2:be:ce:ee:fd:
         78:a9:d8:da:bd:c2:33:20:2d:3f:f8:64:58:96:2e:69:9e:00:
         a0:09:0c:31:9a:48:5b:69:f6:b5:63:85:50:19:71:b5:e6:ec:
         96:d2:0f:9f:db:8d:7d:6f:a6:7d:ad:1d:c3:1a:a2:85:87:2b:
         23:26:3d:72:86:45:cb:28:8d:5b:fe:3b:e1:8d:11:d7:02:dc:
         ed:ff:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org