Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eiTmKLn3ATg_eyR4nGJDcme5oPI.roa
File:                     eiTmKLn3ATg_eyR4nGJDcme5oPI.roa (raw, json)
Hash identifier:          mErR6GrHHygD5wbdB8xhfrcK/EpWGZ0FOvsTeiSdi7s=
Subject key identifier:   7A:24:E6:28:B9:F7:01:38:3F:7B:24:78:9C:62:43:72:67:B9:A0:F2
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01904117C484BD75E66A5AB403C11EBA7C9C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eiTmKLn3ATg_eyR4nGJDcme5oPI.roa
Signing time:             Sat 22 Jun 2024 17:56:34 +0000
ROA not before:           Sat 22 Jun 2024 17:56:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        176.57.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Jun 2024 15:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:17:c4:84:bd:75:e6:6a:5a:b4:03:c1:1e:ba:7c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jun 22 17:56:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a24e628b9f701383f7b24789c62437267b9a0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:c6:ca:40:2f:b0:6a:60:fd:c6:06:6c:9d:
                    59:34:e4:94:03:5e:c5:31:89:6e:c1:d6:21:b7:09:
                    0a:ca:2e:16:14:da:f6:fa:2b:bd:de:17:cf:41:af:
                    ff:75:11:bb:d8:48:7d:ae:2f:c8:a8:7e:3c:6c:35:
                    56:5e:4f:23:91:65:8d:bb:7f:6c:c6:8f:9e:9d:09:
                    db:87:97:9b:33:8d:09:4a:41:97:b0:14:1b:7e:32:
                    b2:9f:62:7b:d3:ac:41:d5:67:62:b5:e4:8b:09:ff:
                    48:98:8c:d9:85:9c:a5:99:09:6c:7e:de:1b:fc:fe:
                    93:41:66:fa:79:44:15:72:b1:80:f7:99:41:4d:eb:
                    04:f4:5c:c7:48:d5:fa:b4:25:49:d6:90:1b:b4:47:
                    66:49:91:67:fa:bd:0a:27:e4:ea:a8:a4:e6:de:03:
                    7e:02:72:d1:c6:fa:26:66:ef:ab:8a:d5:a5:8b:a3:
                    0b:e1:11:a0:50:bc:b1:1c:08:95:a0:3e:fc:0e:dc:
                    3f:76:b0:d6:df:8a:a7:f3:76:55:cd:e3:2d:3a:8e:
                    3e:af:78:a2:1a:98:c2:79:44:a7:dc:59:5a:dc:a9:
                    c2:43:13:0e:64:8c:93:40:f2:48:51:a7:3e:14:4a:
                    d3:75:34:28:dd:ac:a4:64:59:7a:57:29:ef:32:8d:
                    2f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:E6:28:B9:F7:01:38:3F:7B:24:78:9C:62:43:72:67:B9:A0:F2
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/eiTmKLn3ATg_eyR4nGJDcme5oPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:24:68:8c:0f:ee:ad:cc:00:57:76:2c:cd:3c:79:65:79:06:
         3a:8c:7b:dc:97:56:34:0c:31:c0:db:46:cc:34:50:7a:31:05:
         80:90:7b:e9:05:0c:ef:f0:ed:80:ec:7b:37:c7:5c:14:0d:fd:
         1d:f2:7c:85:59:27:d7:33:68:d7:e6:46:27:31:e5:e1:f5:85:
         b1:14:63:0d:67:ba:68:22:9c:1f:55:a1:a8:89:b1:a0:5f:cd:
         65:ef:af:a2:53:11:b1:36:35:5b:74:a0:c4:a2:7d:ce:4d:56:
         a0:70:42:fc:db:e2:d9:76:be:d7:db:6d:43:83:28:2f:23:66:
         f5:9b:53:49:6b:7d:5c:14:e9:d9:58:1f:38:0e:5f:06:37:84:
         ce:1a:71:2c:4f:c7:bb:b7:32:ce:fa:5b:ed:a5:b5:f4:09:e4:
         30:3b:63:23:52:12:d5:b0:d4:15:56:18:9c:f0:21:b0:66:2f:
         7f:e9:d9:a1:b2:a7:52:d9:90:0b:93:88:cd:2e:e6:82:e3:e6:
         3b:6b:14:1a:8b:c3:6d:94:aa:f4:21:12:55:3b:e4:1b:81:4a:
         a0:eb:5b:81:4f:f4:c6:f6:a2:fe:2d:3c:8e:cd:31:1a:c8:0a:
         47:82:6f:20:ba:5a:ff:93:91:a3:a1:0b:d0:14:f8:d1:01:0b:
         dd:ca:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:20:30 2024 by rpki-client on console-ams.rpki-client.org