Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eeMAKWX0OwiOfI10rwaGbn7r4Ak.roa
File:                     eeMAKWX0OwiOfI10rwaGbn7r4Ak.roa (raw, json)
Hash identifier:          u+9eiSKMONqRcB0BaRTLJZEk9+ab+U0B9uA7pWs8/C0=
Subject key identifier:   79:E3:00:29:65:F4:3B:08:8E:7C:8D:74:AF:06:86:6E:7E:EB:E0:09
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       0192288D1B5D64638F498E0E11CB966A7563
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eeMAKWX0OwiOfI10rwaGbn7r4Ak.roa
Signing time:             Wed 25 Sep 2024 09:39:48 +0000
ROA not before:           Wed 25 Sep 2024 09:39:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42375
IP address blocks:        194.26.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 25 Sep 2024 12:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:28:8d:1b:5d:64:63:8f:49:8e:0e:11:cb:96:6a:75:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Sep 25 09:39:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79e3002965f43b088e7c8d74af06866e7eebe009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:10:3f:ac:da:c0:98:1c:43:81:92:a1:fe:
                    1a:8f:ae:26:8c:19:0a:90:b2:3e:ef:50:9b:f5:85:
                    8f:10:6a:cb:c9:3e:d9:e6:e6:2e:52:d2:6f:84:90:
                    75:92:89:fc:71:12:f0:35:cd:67:7d:ea:e5:52:d7:
                    e1:96:5b:59:4b:e7:e8:8c:2a:8f:06:01:8c:c6:9b:
                    8c:ad:89:d3:05:e1:bc:4f:7f:66:5f:d7:6a:bf:9c:
                    89:94:31:1f:a5:c2:f1:ca:4a:e6:68:ef:4e:6c:8d:
                    60:28:5a:61:fd:b9:71:3f:5b:17:d2:95:75:99:f8:
                    91:07:13:3c:84:f7:9f:60:aa:a3:42:45:5b:d0:60:
                    6c:17:d6:9e:ed:f7:5b:4c:99:2d:f7:b0:c4:8c:09:
                    7d:c1:8c:7a:ed:17:56:ac:4b:84:d9:a9:a1:66:40:
                    7e:cf:44:e6:16:f0:5b:b7:7d:ee:d9:8b:23:0d:cc:
                    ad:ea:0c:e7:8f:bc:a1:77:01:cc:8e:d0:45:42:59:
                    48:a6:0b:2f:05:62:6b:b7:5c:b8:12:9a:87:43:62:
                    9c:fb:ef:06:c2:24:cf:a1:e7:cc:53:e7:4a:aa:bb:
                    fa:3a:af:89:30:2a:cb:ef:e8:d3:92:46:17:c7:6f:
                    e1:1a:40:d1:f5:a6:7b:8f:56:4c:1f:4b:bf:4b:b3:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:00:29:65:F4:3B:08:8E:7C:8D:74:AF:06:86:6E:7E:EB:E0:09
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eeMAKWX0OwiOfI10rwaGbn7r4Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:65:23:5a:5c:30:d7:0d:d1:b2:8e:b3:12:09:f6:7e:c8:
         80:7e:9a:56:1f:12:ce:86:53:48:c4:be:14:3b:e3:e9:2b:99:
         42:b8:11:9a:69:0f:94:f5:46:a8:8d:ed:f3:97:5b:c6:4b:37:
         fa:8a:7c:ab:dd:41:0d:f3:02:59:e1:a4:d0:c8:57:fd:2d:27:
         79:c9:94:bc:95:36:e2:ff:2d:f3:25:91:22:ff:87:9d:cf:ed:
         a0:d5:ac:0a:24:b1:70:34:16:2a:c8:ec:da:b6:f4:86:5b:d1:
         72:a7:5a:87:2a:e2:46:8d:55:72:42:59:97:fd:b1:65:96:70:
         66:ea:02:83:e4:7f:2f:48:cf:17:a7:71:e5:b7:b0:46:7e:7e:
         ca:c0:b1:46:cc:12:ce:7f:cb:67:00:e7:6d:fe:9a:66:a6:83:
         ea:0b:96:0c:b2:89:c8:a2:4a:1a:45:82:68:db:16:e6:e3:3b:
         e1:2f:71:03:fa:84:9e:fb:5d:68:ae:1f:fd:1d:c7:42:df:2d:
         e9:6c:48:78:04:4a:c0:ff:be:16:bc:ef:08:2e:30:78:1a:d8:
         d3:bf:7b:b9:11:cc:ce:cf:ad:25:93:23:12:e9:47:f6:ee:f3:
         d9:84:28:c9:0f:c9:89:a5:14:b1:8e:23:22:19:c1:81:0a:15:
         76:68:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 15:26:30 2024 by rpki-client on console-fra.rpki-client.org