Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eU1cqgWApUne-eeeVDdis5Dk13Y.roa
File:                     eU1cqgWApUne-eeeVDdis5Dk13Y.roa (raw, json)
Hash identifier:          C/L/iNXTQYRf45aHgwCvJBIqbt8hnlBQ+mAH3xzjzWo=
Subject key identifier:   79:4D:5C:AA:05:80:A5:49:DE:F9:E7:9E:54:37:62:B3:90:E4:D7:76
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       018D54209D5190FF7D5487D796C6E9464CBE
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eU1cqgWApUne-eeeVDdis5Dk13Y.roa
Signing time:             Mon 29 Jan 2024 07:30:40 +0000
ROA not before:           Mon 29 Jan 2024 07:30:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59432
IP address blocks:        185.191.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 07:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:54:20:9d:51:90:ff:7d:54:87:d7:96:c6:e9:46:4c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Jan 29 07:30:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=794d5caa0580a549def9e79e543762b390e4d776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:b6:f2:7c:8a:ed:66:b8:b3:b1:38:33:d9:
                    5b:de:c8:bf:69:9d:41:06:cc:3d:23:33:08:bd:88:
                    22:a2:b6:a9:aa:79:b7:08:fa:ae:03:d6:85:f8:8a:
                    6b:cf:cd:7d:ba:e5:cc:30:0d:43:f2:e6:2b:5e:d4:
                    cc:af:9a:3b:a8:e4:0d:64:7d:bd:c2:f1:08:4b:c7:
                    5d:db:3f:9e:c8:45:eb:a2:31:22:3e:51:b6:35:5a:
                    66:91:26:bc:40:1a:93:30:59:a7:02:8e:e0:80:0f:
                    e0:19:26:df:97:86:8d:ce:cf:2e:8d:5a:f9:22:ed:
                    57:4a:b6:3a:3e:0e:97:19:da:e4:e5:c6:ee:1f:2c:
                    2f:4d:56:63:99:fe:b3:c1:93:e9:4d:fd:28:3a:b2:
                    ac:b1:ba:11:19:95:a7:ff:15:74:7c:82:dd:01:46:
                    27:db:26:bc:17:24:14:08:68:a3:f2:3f:ac:df:a5:
                    08:8c:d3:f0:fe:3b:18:c3:95:ae:9c:c6:2d:da:5f:
                    7c:b0:16:4c:4f:b0:b6:18:55:05:e3:81:d1:71:a7:
                    92:a5:46:5a:8a:62:2b:0f:5d:93:16:4d:cf:cd:a0:
                    e8:6e:84:c1:0f:69:b0:0b:1c:8c:c8:d1:51:60:00:
                    42:1d:04:b8:8a:28:6d:a5:3c:ab:86:1e:53:ff:62:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4D:5C:AA:05:80:A5:49:DE:F9:E7:9E:54:37:62:B3:90:E4:D7:76
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/eU1cqgWApUne-eeeVDdis5Dk13Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.191.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:34:e7:0b:b1:be:ad:5f:fd:b3:89:c5:fc:2a:f8:25:a5:63:
         a1:03:77:e6:2c:af:83:df:1e:09:02:8a:e4:ab:54:b9:51:4b:
         15:c0:39:5a:81:25:79:c3:a9:05:70:74:d3:bb:29:3c:11:59:
         83:99:0c:08:db:9f:58:bc:30:fb:66:5b:e2:bb:b8:8a:c6:85:
         95:52:2a:c7:56:ec:31:19:6f:04:f4:c5:6d:86:6b:d7:d9:62:
         ae:c7:62:4b:29:c6:15:4d:e3:53:0a:22:c5:c0:7b:da:da:5d:
         76:c1:aa:ab:97:62:a9:de:eb:fc:ae:33:5b:9c:53:f1:11:3f:
         dd:a2:36:73:78:08:44:33:4e:3e:5b:bc:1d:3c:51:fa:a1:7b:
         76:7f:00:f9:53:53:b5:4e:18:75:52:94:cd:6f:51:a3:4d:6e:
         92:2a:bf:d2:31:88:89:08:3a:3a:78:a8:55:41:24:e2:bd:f7:
         27:84:f0:ce:02:e4:9c:2c:ad:ff:b8:59:5f:ba:67:fb:40:e5:
         3f:e1:54:38:68:46:b3:52:bf:4f:67:8b:01:36:dc:58:de:8c:
         ec:5d:b8:c0:c9:9c:4c:6f:98:1c:ee:c9:bc:fd:3c:30:34:8d:
         46:0f:e0:7d:1d:16:15:29:08:1c:13:5f:49:4d:66:09:ae:03:
         2d:59:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:00 2024 by rpki-client on console-fra.rpki-client.org