Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/eAGKsmEh0-hwHFB7cNFTb1HsxaM.roa
File:                     eAGKsmEh0-hwHFB7cNFTb1HsxaM.roa (raw, json)
Hash identifier:          y3PeWtWfPBsji2Ty/S+S53viCr3NAhL05Ps0P1WrUgE=
Subject key identifier:   78:01:8A:B2:61:21:D3:E8:70:1C:50:7B:70:D1:53:6F:51:EC:C5:A3
Certificate issuer:       /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial:       01864F1C76048A0C0FD2A68E1024039F4C36
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/eAGKsmEh0-hwHFB7cNFTb1HsxaM.roa
Signing time:             Tue 14 Feb 2023 08:48:30 +0000
ROA not before:           Tue 14 Feb 2023 08:48:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7155
IP address blocks:        185.84.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4f:1c:76:04:8a:0c:0f:d2:a6:8e:10:24:03:9f:4c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
        Validity
            Not Before: Feb 14 08:48:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78018ab26121d3e8701c507b70d1536f51ecc5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:26:2a:88:41:9d:10:5a:8e:a2:c3:5e:be:
                    4e:ee:13:0f:98:be:61:0b:1d:3a:c8:2f:c9:b3:da:
                    e9:ac:13:a4:78:2a:12:ab:97:dc:25:52:7e:16:0c:
                    10:49:4a:f3:89:f8:ff:ad:4b:85:7d:9d:5d:97:7f:
                    86:b1:78:ac:a0:1a:34:f2:07:56:e2:d8:d8:82:51:
                    66:94:cd:be:7e:50:6c:6e:fe:8d:de:00:a0:a2:bb:
                    ec:f3:18:49:c9:53:58:59:11:1f:45:b6:3a:8c:37:
                    63:a4:63:24:a6:53:c9:34:10:66:92:6e:ef:6f:07:
                    94:27:a0:7b:b4:c0:58:08:b3:27:e7:53:8e:41:48:
                    f1:39:21:af:0c:8d:1d:05:1a:40:a1:2c:dc:7a:f7:
                    4c:f3:5e:96:d3:2a:f6:ae:7f:6c:33:cd:cf:e6:5d:
                    e1:91:2c:4d:fd:95:32:2e:e6:92:93:67:da:39:07:
                    34:19:75:92:44:d5:26:d8:9d:09:30:59:a5:7e:72:
                    d5:82:d7:a3:40:19:d1:01:74:76:10:6e:e8:3e:81:
                    76:c2:36:2e:4b:74:17:5e:e0:bc:b6:62:ca:88:a7:
                    7d:80:b8:a8:04:93:54:cc:51:63:28:82:44:5c:38:
                    f9:b7:ee:65:a5:f3:78:3b:77:d8:3b:0f:34:94:e7:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:8A:B2:61:21:D3:E8:70:1C:50:7B:70:D1:53:6F:51:EC:C5:A3
            X509v3 Authority Key Identifier:
                keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/eAGKsmEh0-hwHFB7cNFTb1HsxaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.84.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:38:41:9f:e7:5a:39:fb:d3:21:ce:99:52:24:9d:c6:5b:
         30:b9:f9:cd:86:32:e8:e4:bb:67:2a:66:2b:7f:9f:a5:d8:43:
         8d:85:f8:33:48:03:7f:af:74:0d:bb:14:86:80:e3:3f:c0:f2:
         93:7b:d9:c8:af:c2:7a:60:07:a8:62:29:4d:52:77:d6:e7:75:
         dd:4d:09:04:e6:c6:61:30:ea:fa:c7:d8:48:6e:da:2c:fc:60:
         db:d5:2b:c7:6e:2b:d9:ba:1e:46:da:a0:dc:db:80:34:81:3f:
         ff:62:c4:77:08:9c:4f:40:9f:1a:77:94:17:a4:89:88:82:b0:
         3c:63:a7:a4:18:1c:71:8d:cd:c8:a3:db:e4:57:bc:88:cf:95:
         b1:d9:8c:59:83:43:04:e0:42:24:66:52:86:4c:07:bd:2e:10:
         e5:1e:03:28:91:85:3a:51:5b:df:82:c9:9e:d6:04:58:91:d9:
         de:75:ee:d2:e6:70:1e:a2:40:ad:45:73:1e:0c:30:62:da:e3:
         af:df:89:fd:a3:a9:45:15:f0:5c:36:4b:36:00:e6:4f:b4:b0:
         26:a2:6f:22:39:63:12:e9:39:40:bb:1d:85:56:3d:e7:5b:26:
         fb:19:f5:09:ae:26:48:4c:bd:5f:19:8b:4c:32:36:05:8a:4b:
         80:19:31:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org