Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa
File:                     Evvq2coQgf0-6Ge3uBhR4NWrseU.roa (raw, json)
Hash identifier:          JdTIjEesskkbJlklR3mZN1hhewMGx4lRk8For6+S8z4=
Subject key identifier:   12:FB:EA:D9:CA:10:81:FD:3E:E8:67:B7:B8:18:51:E0:D5:AB:B1:E5
Certificate issuer:       /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial:       01899764B7F157F14F6146DD53E1961EF697
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa
Signing time:             Thu 27 Jul 2023 12:48:27 +0000
ROA not before:           Thu 27 Jul 2023 12:48:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        89.187.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 28 Aug 2023 12:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:97:64:b7:f1:57:f1:4f:61:46:dd:53:e1:96:1e:f6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
        Validity
            Not Before: Jul 27 12:48:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12fbead9ca1081fd3ee867b7b81851e0d5abb1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:40:ed:06:f4:83:af:70:b2:81:1a:a5:34:
                    74:4e:42:95:f9:89:25:8a:97:93:a8:69:57:57:e8:
                    22:19:a2:3b:f4:d3:6d:06:7e:28:29:ee:97:de:dd:
                    03:fb:4a:cf:5e:ce:af:1c:c3:46:ae:8f:16:2b:ed:
                    c2:3c:d9:68:3a:31:a9:aa:67:94:e6:d2:07:94:c8:
                    92:01:a2:0f:f3:fc:5d:cc:65:bb:08:f7:8d:b9:df:
                    90:79:e6:ed:cc:95:4c:d2:0d:8e:42:9c:e4:48:a3:
                    7f:01:62:85:68:4e:f4:23:b1:18:cd:70:cb:26:eb:
                    53:ba:9c:b3:62:1f:59:70:61:69:ee:89:99:12:4e:
                    25:b6:0f:f8:9f:37:6d:ae:12:d4:bc:1b:e3:e1:34:
                    aa:3a:d2:c6:39:36:3b:2b:1f:4d:ae:9c:20:10:e8:
                    95:b9:6e:f8:8d:42:09:11:c4:8f:19:cd:dd:33:67:
                    2c:fa:41:c1:c1:b5:de:d6:96:98:3f:bf:b1:ae:03:
                    8d:87:a9:70:5a:f3:c0:78:00:02:10:2f:c6:21:33:
                    63:58:0d:10:ac:13:c4:5c:33:90:28:fe:ea:a3:49:
                    f0:d1:a9:14:38:ed:0e:35:1c:44:53:eb:d0:a2:41:
                    bb:96:b4:63:f4:be:a2:f4:b6:5f:63:18:b0:f4:82:
                    6d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:EA:D9:CA:10:81:FD:3E:E8:67:B7:B8:18:51:E0:D5:AB:B1:E5
            X509v3 Authority Key Identifier:
                keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/Evvq2coQgf0-6Ge3uBhR4NWrseU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:46:1c:32:de:cb:e3:f2:c0:25:1b:6d:bd:8a:18:dc:36:31:
         9f:64:18:39:5e:a9:75:24:72:14:b6:e6:aa:5d:03:c1:f7:39:
         38:bc:42:f4:4d:9d:92:c4:ca:0e:11:eb:df:0b:4d:b7:87:1c:
         47:e9:62:cd:c9:57:8f:8a:37:b9:70:ed:6d:f1:cd:da:4f:02:
         0b:93:7d:29:41:29:fe:ef:b7:2f:a5:31:8d:7c:60:20:a2:17:
         4e:7a:83:a6:fd:b1:b4:44:52:d9:d7:d3:f3:6a:b5:7d:1f:bb:
         34:54:e1:da:5c:7b:f0:db:b3:93:56:64:18:94:cc:e8:17:5c:
         a3:3c:fb:a1:c8:ef:04:bc:1f:54:29:e6:9f:e6:45:6a:a1:aa:
         a4:4e:cf:9b:45:30:fa:02:18:3a:82:f2:74:c3:64:f4:f0:39:
         fc:08:1f:52:7a:68:dc:a9:d6:cc:75:41:8f:98:d2:ae:57:1d:
         bf:d1:24:24:6e:6c:6d:2b:3d:17:23:0c:c8:2f:3d:45:de:9f:
         f8:7a:c1:4f:a8:f0:96:d5:b6:1e:01:92:bc:e3:f4:5b:44:69:
         53:33:c0:47:79:cc:66:40:8f:43:4c:be:9b:94:97:70:9c:b4:
         cf:7d:3f:86:ab:9b:90:13:94:99:6f:d6:6f:fc:91:d2:30:45:
         96:59:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:03 2024 by rpki-client on console-ams.rpki-client.org