Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa
File:                     7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa (raw, json)
Hash identifier:          4ZHFxKKGODn8G9i5f/IINhj7Iaqdx/0eGIEwCvqrLbo=
Subject key identifier:   ED:B0:0E:17:59:32:00:60:E7:6D:8C:B4:D1:21:04:70:D9:77:0A:5E
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       018EBCA1A62DEB2166E93A95651953113066
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa
Signing time:             Mon 08 Apr 2024 07:34:54 +0000
ROA not before:           Mon 08 Apr 2024 07:34:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        88.218.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 18:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bc:a1:a6:2d:eb:21:66:e9:3a:95:65:19:53:11:30:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Apr  8 07:34:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=edb00e1759320060e76d8cb4d1210470d9770a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:22:0b:4f:fd:d2:5b:d2:f8:78:f6:38:18:
                    fd:ef:c0:78:de:e3:64:0e:f1:29:89:37:3f:b9:d7:
                    f2:5c:d2:06:c9:db:3a:71:6e:a7:ab:6c:1e:cf:37:
                    96:3b:ba:82:6d:1b:e3:b6:14:94:02:9f:0b:34:a4:
                    e8:1b:d7:9c:eb:d0:7f:25:7b:38:da:11:3c:de:ae:
                    70:23:2d:07:91:76:7f:dc:62:b7:db:e5:b5:79:6d:
                    b1:80:9d:1e:1f:24:9f:74:76:71:51:6e:e3:5b:c2:
                    e0:a0:c1:23:0b:44:4c:87:38:fb:a8:7d:63:ef:10:
                    26:37:3a:ba:e2:e9:0b:de:e5:97:76:66:e3:d6:3e:
                    d8:2a:9d:e7:3b:fd:e8:97:63:e5:48:39:3d:72:5b:
                    c5:10:78:85:68:28:f9:f6:52:5a:22:c3:d7:c3:30:
                    66:ed:dd:6e:ce:4f:74:42:77:34:3a:59:ff:0f:d0:
                    91:08:aa:49:32:fd:1e:ef:93:e9:45:e6:65:2a:3d:
                    cd:c2:51:03:ed:7c:31:2a:47:01:09:f4:fb:8f:d0:
                    96:1c:7f:23:2c:e9:7e:62:2f:83:2e:ac:61:c0:1e:
                    0e:65:5b:f0:d7:50:71:d4:95:c1:39:b0:00:b9:10:
                    67:df:31:31:2e:83:e0:f4:53:78:89:a7:59:b3:12:
                    d6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B0:0E:17:59:32:00:60:E7:6D:8C:B4:D1:21:04:70:D9:77:0A:5E
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/7bAOF1kyAGDnbYy00SEEcNl3Cl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:9b:a4:6b:50:96:44:61:6a:28:ed:29:9b:2e:cd:e2:7e:a0:
         9a:e1:7a:dc:77:5f:8a:93:60:5a:8d:cc:4c:e0:d6:27:62:a3:
         21:79:0a:79:6e:84:ed:7c:28:80:59:6e:f4:95:01:a3:f6:85:
         e9:05:2b:5e:4c:ac:fd:be:73:64:45:34:f9:be:f8:76:ac:d1:
         77:91:0f:4c:bb:ee:4a:93:1f:19:a2:11:06:24:46:85:a3:2b:
         b3:e2:ca:1a:3a:6f:88:1d:41:0b:c6:b9:f0:a4:9c:cf:61:58:
         21:b1:7c:8e:cd:26:2c:40:43:b5:4d:b4:54:92:59:b5:f0:c5:
         43:18:c9:0f:f7:18:80:d7:21:6d:86:a5:7e:fb:30:4c:01:5b:
         c8:36:36:20:cb:5a:f9:65:4a:53:ad:81:ff:5e:ae:59:a4:ad:
         cb:b5:d3:7f:7d:d5:53:ac:e0:c7:db:a3:0b:92:59:ea:75:33:
         4a:f4:36:3b:d0:48:5f:ff:03:a3:51:3a:2f:fa:af:86:b2:cd:
         31:57:52:57:c0:92:7c:a2:8e:35:53:9d:f1:10:55:29:bc:63:
         69:b5:8d:6e:8d:7f:00:83:3d:0c:82:77:46:c6:80:04:00:29:
         b7:1a:22:9d:31:f6:36:5b:22:55:29:a3:80:9b:bd:e7:67:a5:
         71:14:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 19:33:52 2024 by rpki-client on console-ams.rpki-client.org