Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa
File:                     x8B_euEG7NWH6ZPdnVGikW6WtHI.roa (raw, json)
Hash identifier:          ZHxk7KrcMB637MqML5EPg5jeFJd9qYXiincBb7Td3nM=
Subject key identifier:   C7:C0:7F:7A:E1:06:EC:D5:87:E9:93:DD:9D:51:A2:91:6E:96:B4:72
Certificate issuer:       /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial:       01856BD36B3996DAF3AF762C2DC9C7F27A8F
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa
Signing time:             Sun 01 Jan 2023 05:34:55 +0000
ROA not before:           Sun 01 Jan 2023 05:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42012
IP address blocks:        194.36.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:6b:39:96:da:f3:af:76:2c:2d:c9:c7:f2:7a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
        Validity
            Not Before: Jan  1 05:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7c07f7ae106ecd587e993dd9d51a2916e96b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:0a:a0:ab:9e:79:b5:03:d5:c3:be:ac:ba:
                    e9:3a:7c:6a:77:f5:88:e8:3c:8a:13:b5:d9:d3:26:
                    42:c2:8b:3e:0e:da:a5:86:51:8f:c5:66:92:da:17:
                    95:b6:94:9c:7d:26:42:20:bd:9b:c0:17:cb:8e:9e:
                    4b:e4:67:76:da:de:1d:47:64:27:ba:25:39:84:78:
                    44:67:5b:01:d0:14:ef:73:f0:40:f5:ab:4f:6f:64:
                    21:64:fb:56:5d:9f:27:72:99:6d:fe:2f:2a:85:6d:
                    42:a4:c1:44:7b:4f:83:2d:9a:e1:da:6f:d5:e3:9d:
                    3f:e9:9f:e0:e0:6d:59:31:79:34:61:b4:08:6c:fa:
                    48:4b:39:a5:4d:d5:60:1f:c9:5e:0d:2d:50:95:bf:
                    a3:2b:eb:cd:82:eb:c1:77:ef:eb:b9:e8:2f:26:1d:
                    cf:b5:d3:61:f3:5c:e7:13:62:c9:22:9d:1f:31:ea:
                    d1:0d:9c:7a:b9:3c:1a:2e:9d:77:e4:e1:a6:09:47:
                    25:72:32:d5:1a:b7:e5:7b:47:c0:47:2b:34:35:2e:
                    b6:87:85:56:47:56:5b:c7:82:db:c2:32:c8:9f:19:
                    17:78:d8:2e:aa:08:e8:cc:8e:f7:51:7e:1e:9f:e1:
                    31:fb:9f:1b:14:fa:fe:98:1b:10:e6:43:16:fc:70:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C0:7F:7A:E1:06:EC:D5:87:E9:93:DD:9D:51:A2:91:6E:96:B4:72
            X509v3 Authority Key Identifier:
                keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/x8B_euEG7NWH6ZPdnVGikW6WtHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b0:85:b8:12:1c:28:95:3c:bd:12:a8:7b:11:7c:12:96:88:
         c0:c5:b4:3c:bc:d7:cd:e5:56:3d:d8:92:66:c5:16:42:e9:c7:
         3d:24:6b:0c:94:06:e2:1d:f5:d9:91:1f:1c:26:48:fb:e0:1c:
         bf:7a:d7:a8:9d:4e:4b:c8:7e:cd:e2:2c:d0:18:61:16:da:a0:
         72:c1:19:d6:08:ad:df:45:a7:84:44:16:ce:e3:d2:6b:36:10:
         9c:f1:f4:58:ac:d3:c1:ff:c9:d2:f3:61:14:55:5e:a0:e3:96:
         84:19:f1:a5:d8:ec:84:6d:6d:38:04:e8:22:aa:57:d9:9b:58:
         7b:7e:a7:a0:64:42:d6:b5:2a:fb:04:3b:f3:96:bc:a0:57:b7:
         34:03:bd:3c:49:27:82:fd:37:ab:97:cd:0f:56:40:21:7d:1e:
         39:0e:05:e4:0e:69:b7:89:87:69:d4:15:33:da:78:49:a6:08:
         a1:75:70:87:ea:3c:6a:73:cc:54:5f:3a:48:99:3d:56:f1:38:
         5f:6b:b8:41:ab:6d:bf:5e:ea:be:7c:e2:42:72:08:e5:c1:a5:
         25:ab:ea:20:6d:a5:5f:c9:b5:2d:95:8c:0f:f9:c3:b0:a3:7a:
         2d:55:93:28:3a:ea:c6:0b:f6:62:7e:0e:8b:24:11:fc:70:5c:
         7c:41:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:47 2024 by rpki-client on console-ams.rpki-client.org