Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/jHYr8oB_pn5MVLSSlofiHYtN0I4.roa
File:                     jHYr8oB_pn5MVLSSlofiHYtN0I4.roa (raw, json)
Hash identifier:          n2wUnf8uITLvdNRWVXGo6zxFoienwQRho05Ao18nFjo=
Subject key identifier:   8C:76:2B:F2:80:7F:A6:7E:4C:54:B4:92:96:87:E2:1D:8B:4D:D0:8E
Certificate issuer:       /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial:       0190BAE2F5741D80E8BCC0E6C8B6F0CB7F11
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/jHYr8oB_pn5MVLSSlofiHYtN0I4.roa
Signing time:             Tue 16 Jul 2024 09:32:34 +0000
ROA not before:           Tue 16 Jul 2024 09:32:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25122
IP address blocks:        194.126.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jul 2024 10:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:e2:f5:74:1d:80:e8:bc:c0:e6:c8:b6:f0:cb:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
        Validity
            Not Before: Jul 16 09:32:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8c762bf2807fa67e4c54b4929687e21d8b4dd08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:d8:0a:00:a8:0a:1c:a1:ef:81:0b:98:ee:
                    95:ba:b3:40:ab:3a:ca:f6:39:ab:ed:9a:d8:cd:f3:
                    bc:6f:37:2c:fd:26:73:48:90:50:b2:e0:e8:6d:26:
                    f7:c7:07:dd:20:50:72:94:ab:f8:56:2c:d3:d8:af:
                    49:b4:f8:e9:49:29:ad:ed:92:ad:28:aa:1b:9b:5f:
                    22:8c:17:cf:51:43:76:a5:90:ea:a7:f9:f9:fa:4b:
                    9e:a9:61:2b:f8:e1:1e:31:b7:73:be:85:70:9f:c6:
                    70:95:52:23:a4:de:1d:9a:b7:19:dc:fc:dd:97:6a:
                    e3:52:58:14:75:b7:c6:90:9d:1c:36:db:f3:de:8b:
                    f3:d8:e7:1a:cb:4a:32:60:00:46:fd:14:ab:a5:68:
                    ac:8d:dd:21:a6:4f:69:0c:60:49:c6:5d:0c:4c:d7:
                    75:b4:e9:ed:70:eb:36:8a:0f:08:b1:4d:39:27:cb:
                    a9:c1:57:09:88:98:b3:c8:52:2c:84:39:83:03:27:
                    a3:5e:61:ce:d8:5b:5d:59:bb:a9:1d:a6:53:08:53:
                    ce:a1:3f:d8:d9:67:ee:21:76:9c:eb:de:ed:bd:9b:
                    8c:90:0c:c1:bf:51:61:49:e0:06:82:be:a8:58:fb:
                    b5:a8:62:b2:2e:b6:6f:2f:77:ce:24:70:85:9d:0d:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:76:2B:F2:80:7F:A6:7E:4C:54:B4:92:96:87:E2:1D:8B:4D:D0:8E
            X509v3 Authority Key Identifier:
                keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/jHYr8oB_pn5MVLSSlofiHYtN0I4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:cc:0e:6c:06:c0:ea:55:c6:5a:dc:4d:d3:85:87:ae:70:
         ca:40:23:b4:e0:c9:aa:be:91:b0:50:6c:27:e9:7a:34:1a:f5:
         61:f2:aa:7b:bd:10:38:8a:9d:ec:65:ca:d3:b3:15:b1:d3:b4:
         fd:87:19:ae:b8:37:e1:e1:e1:72:0a:7a:05:fa:9e:2f:30:78:
         a1:f4:c6:1c:da:a1:93:81:1c:2c:98:e6:94:91:dd:9d:e8:c7:
         4d:9e:0d:fe:c7:75:c7:3c:30:77:b5:41:ff:52:69:ec:fd:f3:
         86:1b:f8:80:33:2a:eb:a4:5a:31:86:ae:d9:ae:1f:e9:45:a6:
         11:b1:93:30:c3:10:09:88:79:50:bc:03:9e:91:68:b5:20:ef:
         cc:dc:b5:89:c5:70:69:ff:aa:86:cd:16:28:07:8c:ee:86:f7:
         26:12:34:55:90:10:65:12:fb:b5:57:55:b1:c8:a7:5a:76:c0:
         16:cf:e2:c8:1b:55:58:77:0a:35:6b:96:69:5c:6e:8d:ff:3b:
         0c:ae:a9:6d:28:18:09:f2:5b:94:5b:bb:03:27:64:97:28:4b:
         06:9b:c4:d9:7b:50:2e:d3:94:d9:d3:e1:5f:bd:f8:ea:67:7e:
         f9:b5:36:52:e2:45:db:1a:2c:02:76:7f:40:f5:d5:51:eb:56:
         8f:0f:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 12:56:39 2024 by rpki-client on console-ams.rpki-client.org