Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/eue0ETLWM5R5ta5QJuryjxOXsYg.roa
File:                     eue0ETLWM5R5ta5QJuryjxOXsYg.roa (raw, json)
Hash identifier:          KPYnbxV8Y2HcXdZI1BfHfsQ7Ys8vt81+OTLN95b0h2w=
Subject key identifier:   7A:E7:B4:11:32:D6:33:94:79:B5:AE:50:26:EA:F2:8F:13:97:B1:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       019156B973B375A7918C1E10501372DEADC1
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/eue0ETLWM5R5ta5QJuryjxOXsYg.roa
Signing time:             Thu 15 Aug 2024 15:47:59 +0000
ROA not before:           Thu 15 Aug 2024 15:47:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43260
IP address blocks:        91.228.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 10:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:56:b9:73:b3:75:a7:91:8c:1e:10:50:13:72:de:ad:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Aug 15 15:47:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ae7b41132d6339479b5ae5026eaf28f1397b188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:07:ca:71:99:44:8c:a1:3a:8c:ba:73:2b:5c:
                    76:eb:28:2d:1c:44:4b:39:c2:e6:24:65:99:c5:42:
                    e1:75:81:2f:52:a1:c1:a0:48:70:12:1d:12:b6:84:
                    ad:06:0e:bf:0b:52:d7:d9:16:09:2b:20:47:cc:f0:
                    9c:df:d4:c1:51:47:07:3e:01:13:37:cc:f4:1f:aa:
                    8c:76:cb:c1:78:6f:69:5b:1f:6d:e4:83:12:09:f6:
                    94:db:57:b4:15:10:db:48:b0:3b:6e:14:16:51:dd:
                    d5:9a:b4:1d:c0:67:16:24:08:28:fc:07:cb:4e:38:
                    a2:88:64:66:05:c7:fc:9c:cc:0a:d2:6b:c3:ba:3b:
                    02:30:00:e3:3c:e0:27:2a:fc:1b:9b:29:01:7d:32:
                    5a:1d:43:78:ce:37:a4:4c:e7:bc:e5:c1:2b:57:6c:
                    49:46:16:c7:06:10:fb:a9:94:69:ee:20:d3:cb:b0:
                    72:8a:4e:68:0c:a2:57:48:df:21:be:9d:3e:bf:3a:
                    3e:3e:f1:0c:9f:f8:14:96:dd:10:66:17:ce:d8:11:
                    98:ad:22:f3:a1:19:9b:a2:bf:3a:53:d5:55:58:fd:
                    ba:6b:40:08:52:11:3c:84:f7:7b:da:37:29:65:ec:
                    a9:ab:de:cc:a1:ab:aa:eb:86:a3:c0:28:60:a1:51:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:B4:11:32:D6:33:94:79:B5:AE:50:26:EA:F2:8F:13:97:B1:88
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/eue0ETLWM5R5ta5QJuryjxOXsYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:b9:1a:01:a6:73:f8:66:b5:3c:05:a8:4a:c3:c5:f2:16:6f:
         c6:cf:d6:e9:95:39:3a:85:f4:61:80:53:bc:e0:93:05:4b:b8:
         1b:a2:46:d9:83:0d:bf:f4:10:70:dc:55:75:59:46:01:db:c3:
         c6:0d:bb:bf:c5:94:e6:d6:ab:33:5e:bf:29:ea:53:30:e4:24:
         49:4a:bd:9c:6c:05:4a:1a:5e:35:b8:ba:37:37:cb:87:f4:cf:
         90:5f:68:4d:79:20:27:84:ac:90:38:ba:df:32:04:46:50:bc:
         ff:ab:17:1d:6d:84:6e:d7:a0:02:65:12:f9:c5:70:f7:22:ee:
         dc:4e:a3:7d:0e:40:74:68:d3:3a:e3:f5:92:d4:76:f8:0d:0e:
         d0:56:57:d9:d1:e9:06:25:45:2b:df:43:7f:02:10:3f:81:b9:
         f3:75:74:d1:8b:83:3b:fd:c2:80:48:b9:15:87:c5:3f:ee:f4:
         31:b2:20:81:fd:54:b4:18:ec:06:cc:f4:22:2f:7b:70:7e:a9:
         73:39:e5:53:af:90:1f:b2:26:f7:f3:27:3d:5b:89:fb:ee:83:
         b7:6c:55:4d:a1:21:fc:25:ed:fa:92:42:67:ab:9f:ca:cd:e8:
         79:19:36:98:e7:a5:26:1c:c6:b9:cd:4d:ad:fe:30:6a:9a:de:
         ad:ed:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 13:38:18 2024 by rpki-client on console-ams.rpki-client.org