Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/emLMeu1sMV187t5LoC88fv8fNIg.roa
File:                     emLMeu1sMV187t5LoC88fv8fNIg.roa (raw, json)
Hash identifier:          Y1ZMINBGPW324u/pLSy55RD80Xueiyc1J6OJTgYDG/c=
Subject key identifier:   7A:62:CC:7A:ED:6C:31:5D:7C:EE:DE:4B:A0:2F:3C:7E:FF:1F:34:88
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       01856DA6634A6AC953BEB6152A3A27BC120F
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/emLMeu1sMV187t5LoC88fv8fNIg.roa
Signing time:             Sun 01 Jan 2023 14:04:59 +0000
ROA not before:           Sun 01 Jan 2023 14:04:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396982
IP address blocks:        195.245.86.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:63:4a:6a:c9:53:be:b6:15:2a:3a:27:bc:12:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Jan  1 14:04:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a62cc7aed6c315d7ceede4ba02f3c7eff1f3488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:0e:fa:c6:98:17:b7:1d:66:91:71:23:5b:
                    3a:50:77:ea:81:c0:50:ac:89:0c:d7:ea:d4:86:9e:
                    45:d6:96:7e:41:f1:ed:f7:84:aa:e5:b9:11:54:8e:
                    73:54:db:ef:3a:14:b4:37:b5:4b:c6:6c:ea:f6:a7:
                    7a:7c:32:4e:f7:ed:a5:9d:f3:11:35:c9:a2:13:d9:
                    5b:67:2b:77:85:99:d0:09:83:7e:bd:34:1e:81:7c:
                    71:10:c5:16:4b:16:65:f7:56:58:ff:6b:01:9c:9d:
                    70:28:60:3d:28:96:fb:e7:0f:e7:06:95:3f:68:7a:
                    d6:56:29:ab:0e:c5:af:7b:08:a3:39:79:97:3a:31:
                    22:21:0c:c4:49:f5:6d:3c:31:ad:a6:65:3d:e1:b1:
                    b2:90:4e:39:90:65:37:de:f8:38:ca:c9:03:79:61:
                    52:f9:49:a8:0a:0f:d9:6a:04:1d:83:9f:4a:d1:de:
                    4b:7c:cb:5b:b5:2b:18:31:5e:90:70:10:c4:3f:f6:
                    2d:b8:cc:30:79:51:71:1a:fa:2a:bb:81:6c:58:05:
                    4d:ce:df:24:95:38:94:b8:0e:55:68:68:de:c4:73:
                    5c:68:00:51:4d:74:ce:39:50:f4:ab:b0:77:13:74:
                    eb:c7:b4:22:5a:99:ce:10:01:17:10:18:52:f9:f0:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:CC:7A:ED:6C:31:5D:7C:EE:DE:4B:A0:2F:3C:7E:FF:1F:34:88
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/emLMeu1sMV187t5LoC88fv8fNIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.245.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:f0:55:39:26:3a:c5:d5:8b:52:e0:63:f0:43:44:28:76:97:
         56:3e:43:43:a1:01:8a:f4:57:9e:23:64:6e:79:b9:df:26:cd:
         7e:74:2d:63:d5:5d:61:92:71:71:f9:87:82:7f:37:2c:df:7e:
         fc:ee:69:a4:06:e7:28:ea:5a:e8:41:14:8b:f1:16:c3:a5:06:
         a9:5d:c5:d0:57:ad:42:42:7a:77:45:7e:a1:58:c0:8b:7a:4d:
         76:ad:15:52:b1:b8:bc:37:81:44:60:67:41:1e:a7:58:04:a9:
         59:fc:f1:22:d0:80:88:cb:bf:00:86:b3:99:5a:ce:24:6c:d7:
         90:d1:47:0e:29:97:42:5b:97:fb:07:33:d3:ce:01:fe:69:bd:
         ec:af:3d:fd:db:d6:c1:25:52:40:ca:9b:ad:d4:d0:c5:b0:d3:
         af:68:f7:8d:49:59:7d:ef:c4:a4:b0:ec:9b:aa:51:fe:de:39:
         fc:c9:9a:3a:3d:66:01:cd:61:d3:4a:61:6c:2f:39:1c:34:b1:
         d0:2a:60:2b:dd:7f:42:2d:9d:6b:f1:bc:06:c9:cc:5a:5f:d3:
         ba:c4:2c:1a:ef:cf:6a:bf:0b:0f:57:a0:6f:37:88:33:87:4d:
         6a:2d:0b:bb:81:3f:1d:8d:48:f5:e9:6c:29:63:6e:58:e5:63:
         88:11:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:04 2024 by rpki-client on console-ams.rpki-client.org