Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EfJjqjfGhY9E5M-68P54jgZr9wc.roa
File:                     EfJjqjfGhY9E5M-68P54jgZr9wc.roa (raw, json)
Hash identifier:          j2bixquw6ulE4ZLqFhPmMLy4HjArA787g66bfXN3aMw=
Subject key identifier:   11:F2:63:AA:37:C6:85:8F:44:E4:CF:BA:F0:FE:78:8E:06:6B:F7:07
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       01875B42E0AB6643C5821314984ED14E48C9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EfJjqjfGhY9E5M-68P54jgZr9wc.roa
Signing time:             Fri 07 Apr 2023 10:28:42 +0000
ROA not before:           Fri 07 Apr 2023 10:28:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206119
IP address blocks:        78.135.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5b:42:e0:ab:66:43:c5:82:13:14:98:4e:d1:4e:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Apr  7 10:28:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11f263aa37c6858f44e4cfbaf0fe788e066bf707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:a5:a6:7c:ed:d9:af:46:40:8d:1c:44:64:
                    47:ce:39:80:ab:8f:5f:4f:5e:dd:9e:38:d1:66:28:
                    6f:96:b7:20:c4:53:8b:9e:48:71:b9:58:ae:3a:95:
                    1f:9f:4e:9f:77:56:ed:25:a7:6f:2c:ff:fd:57:0d:
                    f6:11:25:c0:f2:7d:13:d3:f9:34:a1:bb:ad:82:63:
                    5c:fd:34:b3:2f:e9:e0:a2:08:14:fd:f0:5c:39:d9:
                    21:6f:13:cb:d6:32:11:bc:81:78:07:2e:19:6f:91:
                    3c:1e:13:6b:78:f3:71:01:ed:96:85:c2:a5:40:ca:
                    89:f9:64:57:c6:d7:f2:a0:65:8c:06:23:e5:2c:25:
                    a1:b7:00:3a:39:4f:ca:a5:a2:01:0b:49:95:65:18:
                    3a:34:bf:cc:70:6d:4e:ea:5b:7a:07:38:e8:8c:b2:
                    14:6f:cd:9c:3a:94:3a:05:0a:cd:69:b7:68:bf:81:
                    1a:79:ba:6c:b3:68:e4:ba:67:12:3d:3d:ba:b6:b2:
                    ab:36:24:76:66:c3:65:4b:60:1b:65:21:17:38:c8:
                    45:95:b6:19:57:fd:8e:85:29:c2:be:8c:55:f4:27:
                    8a:03:a3:1a:9c:2b:8b:2b:85:5c:22:ae:4f:ea:d5:
                    04:21:49:4d:8a:73:60:01:39:9d:7b:60:d8:b6:88:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:63:AA:37:C6:85:8F:44:E4:CF:BA:F0:FE:78:8E:06:6B:F7:07
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EfJjqjfGhY9E5M-68P54jgZr9wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:bd:0e:5c:59:f6:8f:12:65:3d:1b:e2:02:97:2b:b8:72:
         b1:28:d1:4c:b7:68:a7:b3:b1:92:77:78:44:cb:66:5e:89:45:
         51:28:dd:05:1e:c3:31:ed:bb:4c:ef:3e:f7:ff:10:86:32:ec:
         32:38:55:2c:d5:ee:e1:91:49:19:68:76:13:48:37:ef:da:dd:
         86:7b:3f:27:2c:87:5a:71:b8:dc:b4:4d:24:47:63:d2:56:b6:
         17:fb:d4:79:27:77:8d:84:1a:c1:17:cf:6b:31:8e:46:d4:99:
         5b:cb:15:36:c4:cd:e3:d4:d3:5e:35:a3:a9:1e:f5:fb:bd:47:
         f8:c3:c5:36:9f:1f:c5:e5:87:cf:d2:38:67:2f:96:b4:13:57:
         83:24:86:99:6c:bc:82:7c:b9:21:ec:6a:40:74:77:6a:e5:92:
         46:c9:10:96:23:ec:e8:9a:1b:1a:1f:6f:92:5a:24:69:8e:2f:
         e0:c2:90:08:fb:79:c9:91:44:43:07:64:ef:dd:f9:9d:96:2e:
         21:d6:e8:f3:69:5f:f7:f6:25:e1:a6:d5:f4:af:33:bb:62:c3:
         c4:2d:e4:6a:58:c5:d8:37:92:74:31:6f:cf:38:c4:e0:9c:f2:
         82:28:56:f6:f1:87:86:88:7f:de:6a:c2:5b:90:69:e5:07:68:
         28:ae:07:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org