Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa
File:                     EycoxCNOnqpIj4e9EBL-95I3iaY.roa (raw, json)
Hash identifier:          kySPOGan10/nFQ6rSFzkGIv47OMB5IARRpxo+u62OWs=
Subject key identifier:   13:27:28:C4:23:4E:9E:AA:48:8F:87:BD:10:12:FE:F7:92:37:89:A6
Certificate issuer:       /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial:       018CC349010CE87DCE2075E29512747E38BE
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa
Signing time:             Mon 01 Jan 2024 04:29:50 +0000
ROA not before:           Mon 01 Jan 2024 04:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47952
IP address blocks:        185.225.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 08:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:01:0c:e8:7d:ce:20:75:e2:95:12:74:7e:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
        Validity
            Not Before: Jan  1 04:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=132728c4234e9eaa488f87bd1012fef7923789a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:46:9a:42:db:49:44:fa:29:87:d7:f9:16:
                    d9:86:c3:99:d2:5d:a0:7d:a0:56:8e:c8:e3:7d:03:
                    1f:03:4f:e9:a5:6b:03:2e:51:eb:6c:f7:61:f1:5b:
                    87:22:50:37:71:f3:88:c2:16:ee:84:dd:f6:4a:f9:
                    40:2a:b1:3d:b6:e2:da:19:38:56:a5:eb:0c:bb:c4:
                    0c:b7:b3:08:5c:a1:97:30:e6:56:ae:37:d5:24:07:
                    89:05:6a:8e:0e:5b:18:67:96:f5:ef:00:3a:4e:34:
                    10:1c:00:22:a5:a5:7c:52:44:0c:84:cd:ef:47:a4:
                    6f:62:61:61:7c:bb:df:d8:c4:09:cb:c6:a1:8d:9f:
                    09:c2:66:55:aa:70:23:c5:f2:f2:7b:78:15:2b:1c:
                    83:03:57:ea:35:d2:a4:67:cf:de:63:ea:56:66:bc:
                    96:58:62:a2:bd:34:05:9f:d0:c4:a9:69:5f:a0:e1:
                    1b:10:33:e0:54:ee:4b:20:2f:71:e0:f2:4a:f7:2c:
                    47:cd:a9:08:b6:53:73:0b:b8:ec:23:de:7d:3d:cc:
                    8d:b0:84:60:fb:c8:91:c8:c6:4f:33:e0:e4:fd:c1:
                    63:f1:19:f2:ba:4f:16:98:00:f0:d5:e3:60:6e:7f:
                    64:0f:8a:76:d6:67:ad:c2:e9:45:3b:b7:5b:37:11:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:27:28:C4:23:4E:9E:AA:48:8F:87:BD:10:12:FE:F7:92:37:89:A6
            X509v3 Authority Key Identifier:
                keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/EycoxCNOnqpIj4e9EBL-95I3iaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:29:af:fe:9c:4b:4e:72:79:22:3a:2c:b1:3f:09:d6:fe:
         e0:07:bb:d9:d4:32:77:8a:6e:5b:27:fd:99:35:6a:bf:ad:2c:
         73:23:f3:60:a3:4d:df:d6:6f:40:b5:b0:eb:96:42:0e:cf:ab:
         14:60:4f:a2:31:2e:94:83:86:5e:42:4c:18:96:f7:55:8a:44:
         bc:95:76:3f:1e:4e:28:d3:aa:36:ab:87:5c:b2:8f:eb:eb:c1:
         f2:57:fa:f4:d8:28:61:b9:84:64:0d:ec:23:37:b7:d1:e0:ee:
         7c:bf:29:a3:33:22:86:1b:d7:99:6b:36:aa:1e:05:d8:aa:99:
         87:70:e6:45:fb:94:ca:d0:92:cd:51:14:12:76:6d:15:53:47:
         b0:75:9f:a8:23:26:7f:f1:64:aa:16:11:11:5b:b8:64:43:16:
         6a:c7:cd:77:11:95:6c:05:eb:b0:52:b1:bc:01:e2:18:58:3c:
         2e:a9:ba:fd:95:84:97:cb:c1:af:14:9a:ad:ea:62:91:97:68:
         7a:a1:29:b0:56:8a:f3:96:be:55:51:3c:08:0d:56:9c:b4:29:
         42:31:3d:18:56:35:db:7e:00:0e:01:fe:b6:d9:14:81:2b:cf:
         4c:9a:84:8b:be:12:a2:31:d5:45:76:14:f5:97:ae:fe:ba:ca:
         72:a7:93:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSQEM6H3OIHXilRJ0fji+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NGJmNTgxMTljZmU5OWYxNzQ5YmNkOWJkMTI0NzAyYmE5
Y2I3MTMwHhcNMjQwMTAxMDQyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzI3MjhjNDIzNGU5ZWFhNDg4Zjg3YmQxMDEyZmVmNzkyMzc4OWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5GmkLbSUT6KYfX+RbZhsOZ0l2g
faBWjsjjfQMfA0/ppWsDLlHrbPdh8VuHIlA3cfOIwhbuhN32SvlAKrE9tuLaGThW
pesMu8QMt7MIXKGXMOZWrjfVJAeJBWqODlsYZ5b17wA6TjQQHAAipaV8UkQMhM3v
R6RvYmFhfLvf2MQJy8ahjZ8JwmZVqnAjxfLye3gVKxyDA1fqNdKkZ8/eY+pWZryW
WGKivTQFn9DEqWlfoOEbEDPgVO5LIC9x4PJK9yxHzakItlNzC7jsI959PcyNsIRg
+8iRyMZPM+Dk/cFj8Rnyuk8WmADw1eNgbn9kD4p21metwulFO7dbNxH82wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMnKMQjTp6qSI+HvRAS/veSN4mmMB8GA1UdIwQY
MBaAFEVL9YEZz+mfF0m82b0SRwK6nLcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAt
MGE2ZTZkZmJkMmUzLzEvRXljb3hDTk9ucXBJajRlOUVCTC05NUkzaWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNmQwOTItY2M2MC00YTUxLWIwMTAtMGE2ZTZkZmJkMmUz
LzEvUlV2MWdSblA2WjhYU2J6WnZSSkhBcnFjdHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueGnMA0G
CSqGSIb3DQEBCwUAA4IBAQB7Yimv/pxLTnJ5IjossT8J1v7gB7vZ1DJ3im5bJ/2Z
NWq/rSxzI/Ngo03f1m9AtbDrlkIOz6sUYE+iMS6Ug4ZeQkwYlvdVikS8lXY/Hk4o
06o2q4dcso/r68HyV/r02ChhuYRkDewjN7fR4O58vymjMyKGG9eZazaqHgXYqpmH
cOZF+5TK0JLNURQSdm0VU0ewdZ+oIyZ/8WSqFhERW7hkQxZqx813EZVsBeuwUrG8
AeIYWDwuqbr9lYSXy8GvFJqt6mKRl2h6oSmwVorzlr5VUTwIDVactClCMT0YVjXb
fgAOAf622RSBK89MmoSLvhKiMdVFdhT1l67+uspyp5MR
-----END CERTIFICATE-----
Generated at Mon Mar 25 12:45:38 2024 by rpki-client on console-ams.rpki-client.org