Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/E1C0uYFfEPF2v2lBywXqyI1YBjk.roa
File:                     E1C0uYFfEPF2v2lBywXqyI1YBjk.roa (raw, json)
Hash identifier:          KjLhOeDDyHhh2I0n6PLi+ZGLI8aYGgszpqDdzIvGbWQ=
Subject key identifier:   13:50:B4:B9:81:5F:10:F1:76:BF:69:41:CB:05:EA:C8:8D:58:06:39
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       01905A98246C83E835F4AF343C5B78F68D87
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/E1C0uYFfEPF2v2lBywXqyI1YBjk.roa
Signing time:             Thu 27 Jun 2024 16:47:18 +0000
ROA not before:           Thu 27 Jun 2024 16:47:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49217
IP address blocks:        94.154.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 15:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5a:98:24:6c:83:e8:35:f4:af:34:3c:5b:78:f6:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Jun 27 16:47:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1350b4b9815f10f176bf6941cb05eac88d580639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:73:96:57:de:7e:23:17:b7:06:1d:41:b3:
                    1d:3c:9a:b4:70:06:f0:f6:92:a5:e0:46:cf:16:44:
                    27:f4:59:ef:37:3e:d9:2f:ba:e1:e5:ee:e8:2d:2e:
                    29:2f:0d:15:8d:84:02:6a:af:8f:a0:d5:63:2d:b3:
                    38:57:a9:81:c6:dd:03:52:5e:4b:bf:cf:eb:a0:3d:
                    0f:28:65:be:ce:a5:7d:e2:b2:db:c6:f2:82:14:90:
                    6b:05:ab:9d:0c:61:88:e9:9e:f8:71:9e:8c:cb:52:
                    27:e8:35:d1:2d:4c:56:be:8c:b1:76:6c:5f:57:8d:
                    f8:36:7b:d5:88:d0:0d:59:49:38:16:af:de:39:7c:
                    1e:ef:ca:1f:2a:ce:8d:1d:86:0f:e0:cd:b4:a7:07:
                    ff:85:c7:77:b9:09:20:05:81:27:6d:d0:33:7b:51:
                    81:e4:1c:df:61:c1:13:e7:46:42:bc:be:c8:67:55:
                    0f:2f:3a:79:e7:7f:e2:e1:48:00:be:7f:ed:b0:e5:
                    fd:93:c5:f1:d6:c3:f3:00:5d:ca:5a:f5:61:dc:aa:
                    bd:d8:c2:0a:ee:95:1d:da:3e:93:34:e9:9a:46:49:
                    99:ab:eb:25:dc:28:f4:8c:84:20:42:c5:36:ae:1c:
                    c5:a9:e5:dc:53:08:7a:32:0f:c0:d9:ef:7c:fc:28:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:B4:B9:81:5F:10:F1:76:BF:69:41:CB:05:EA:C8:8D:58:06:39
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/E1C0uYFfEPF2v2lBywXqyI1YBjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:74:5f:ff:d4:2b:86:20:ed:85:9d:65:89:0e:80:7c:81:
         c3:d3:a8:3f:99:6d:37:46:81:ac:ce:72:ab:35:e2:2e:e8:08:
         14:7d:ad:5e:50:fe:96:94:80:e4:c5:cf:2c:75:ab:74:2a:4c:
         ca:d0:ef:af:30:6e:8f:c2:ad:65:d6:1a:2c:04:81:1d:34:5c:
         7c:4e:8a:42:90:90:ac:af:eb:0c:ae:86:4f:87:9e:02:25:27:
         fc:2c:75:4b:75:0a:e5:ba:dc:3d:0c:23:4a:69:99:5d:d0:3b:
         05:ab:1b:78:bc:72:e2:a9:2d:d9:90:53:c6:1e:57:00:bf:0c:
         f9:dd:db:51:9f:68:8f:23:66:09:18:37:88:75:df:2e:86:1e:
         c2:79:c4:6f:2b:e5:e7:b0:98:c9:43:69:71:6d:64:22:34:a4:
         69:be:e0:2d:59:d6:1f:9d:65:39:d7:22:2d:f7:ac:94:17:16:
         85:a2:c2:f8:a3:88:67:5f:9d:43:d3:c5:2b:3f:f3:0a:09:22:
         59:01:63:bb:59:ad:6b:89:b1:36:83:ab:a9:98:27:38:32:92:
         0d:08:8f:fe:e4:da:ce:60:1c:34:e3:9b:db:30:c3:42:59:c6:
         7d:b2:92:fa:2f:c0:84:ab:d0:e1:77:87:50:63:3f:71:ad:a0:
         7b:35:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:51 2024 by rpki-client on console-ams.rpki-client.org