Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa
File:                     eaUEznDo2V7hJiCVsfkyDA0c7i8.roa (raw, json)
Hash identifier:          GKvrPw4HBHaYk6yANmhzWHIPOoN87G1S5beiP14bZmQ=
Subject key identifier:   79:A5:04:CE:70:E8:D9:5E:E1:26:20:95:B1:F9:32:0C:0D:1C:EE:2F
Certificate issuer:       /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial:       0190E3525EEF7AD6733D5D317AE2C664594E
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa
Signing time:             Wed 24 Jul 2024 05:59:04 +0000
ROA not before:           Wed 24 Jul 2024 05:59:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39521
IP address blocks:        91.227.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 Jul 2024 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e3:52:5e:ef:7a:d6:73:3d:5d:31:7a:e2:c6:64:59:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
        Validity
            Not Before: Jul 24 05:59:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=79a504ce70e8d95ee1262095b1f9320c0d1cee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:bf:49:53:09:a5:1e:0c:f2:49:44:74:08:
                    3d:96:ac:dd:6a:7b:33:e1:e3:c9:b9:c7:c5:16:a0:
                    b6:1b:87:17:f0:4d:3d:6f:d9:14:4c:b6:63:f5:8b:
                    00:b4:9f:1d:e6:de:50:21:f3:e7:f1:7a:6b:c5:ba:
                    6f:b9:ff:29:18:e4:b9:5e:96:0f:7d:41:52:8e:d0:
                    ba:c7:16:7a:46:13:62:93:d9:1d:fe:65:87:5d:1a:
                    44:89:7f:98:63:c2:fe:4e:e4:b0:e6:19:4b:44:20:
                    ee:36:63:60:d9:12:6d:b6:6c:6b:1e:1f:ff:01:69:
                    0e:65:c3:4f:ea:2a:a2:94:a2:b4:51:a6:c6:96:0f:
                    e1:bb:b7:f8:12:f1:89:9a:49:68:bc:f3:d0:79:45:
                    87:10:c2:2c:46:2c:98:e7:3c:04:ed:30:a9:3a:bb:
                    44:22:5c:a5:22:de:cd:42:7e:b6:19:36:a3:2c:b9:
                    02:6b:24:bd:28:cc:1e:84:06:c8:6d:6c:db:e1:ea:
                    1e:81:d1:10:dd:6e:7b:dc:2d:2b:68:ac:7a:da:20:
                    49:06:18:0a:d4:89:0c:c3:22:0d:92:39:e7:02:a7:
                    d0:92:28:6f:df:5e:72:a6:80:9a:22:a7:6d:69:45:
                    63:ab:b5:01:47:e6:76:f7:b2:2f:03:b5:50:9f:2b:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:04:CE:70:E8:D9:5E:E1:26:20:95:B1:F9:32:0C:0D:1C:EE:2F
            X509v3 Authority Key Identifier:
                keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eaUEznDo2V7hJiCVsfkyDA0c7i8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:d0:bb:e7:60:2e:f1:e1:60:f3:51:e5:37:77:82:6e:a4:
         c4:7c:64:85:55:e7:e1:58:d0:59:fc:fa:8f:40:b8:ab:ea:95:
         3d:d0:d2:f3:ea:61:82:d1:69:a4:7f:72:08:cb:da:02:50:e9:
         67:3a:f4:74:dd:17:e6:f8:8c:40:d2:31:87:4b:d9:5e:f6:95:
         61:be:0a:99:a7:1c:d2:d4:dd:9c:95:c1:b5:9c:da:85:04:89:
         67:8c:1f:13:3d:37:60:3c:0a:62:e6:21:38:66:0f:9a:49:7d:
         1b:46:c3:4a:05:3d:af:7e:0a:5e:90:ac:9b:69:05:8c:e6:34:
         00:d3:88:7d:eb:95:8e:9b:6c:1f:38:be:ae:af:8b:d5:74:7e:
         05:aa:98:b8:d5:0f:fc:af:12:fd:39:fd:74:f0:8e:f3:3b:1e:
         74:ea:87:f2:e4:38:be:10:39:54:bb:c9:0d:8e:e9:2f:5d:80:
         d9:81:c7:36:4d:bc:26:08:10:1b:a4:9b:a6:ab:74:6a:29:f6:
         71:9f:b8:de:44:70:b4:52:6a:db:5f:46:87:4c:9a:8c:b2:6a:
         be:12:29:76:cc:c1:d5:d8:c8:fd:d8:c5:c3:a1:a4:a7:72:09:
         45:ec:6e:5a:c0:8e:63:ef:51:f1:e0:06:96:e8:0b:02:2e:38:
         a8:1c:dc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 18:12:30 2024 by rpki-client on console-fra.rpki-client.org