Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/eMTIynxyRGw5M-p4HjpMbTNF_fQ.roa
File:                     eMTIynxyRGw5M-p4HjpMbTNF_fQ.roa (raw, json)
Hash identifier:          Co7UeEeHvEXpg+VxQiI1oOWjYVR3Gp9s0SctNTueEUo=
Subject key identifier:   78:C4:C8:CA:7C:72:44:6C:39:33:EA:78:1E:3A:4C:6D:33:45:FD:F4
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       0186A105AD9B3A38C5379813266A5532628F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/eMTIynxyRGw5M-p4HjpMbTNF_fQ.roa
Signing time:             Thu 02 Mar 2023 06:32:29 +0000
ROA not before:           Thu 02 Mar 2023 06:32:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200081
IP address blocks:        185.75.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a1:05:ad:9b:3a:38:c5:37:98:13:26:6a:55:32:62:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Mar  2 06:32:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78c4c8ca7c72446c3933ea781e3a4c6d3345fdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:53:11:e0:a1:c2:01:46:c0:73:6d:da:c2:
                    81:22:3e:16:10:e5:f5:3b:6e:03:f6:f4:9b:91:0b:
                    6e:cb:b5:c6:3b:70:d3:8c:3f:7a:c3:08:36:db:8d:
                    e7:3a:fb:6b:10:47:9b:35:1e:3e:16:bc:c7:e7:24:
                    7b:6c:33:b2:4a:2d:35:43:4a:3c:77:49:a6:52:22:
                    53:0f:03:19:3c:32:59:ee:fa:62:d5:86:cb:0b:a1:
                    18:9b:7f:3b:4a:e7:6f:bb:a0:b5:40:99:e8:64:bc:
                    ef:40:4c:71:22:04:c7:05:01:0b:f3:06:12:1c:01:
                    26:9b:f0:eb:bd:c6:08:44:76:ad:b8:4a:68:0e:6c:
                    86:09:d9:64:3f:ed:96:03:4d:b2:86:89:be:ed:6c:
                    46:70:01:43:87:33:48:dc:65:37:c3:3c:a0:c8:32:
                    77:a1:1b:7a:74:23:35:c0:40:3b:1d:84:33:33:dd:
                    d4:e6:28:96:b5:2e:48:7d:d9:71:97:37:ce:37:51:
                    04:55:04:b9:fa:83:b7:22:78:a0:5c:c2:88:1f:bd:
                    78:de:aa:aa:6b:61:32:c9:3c:d7:56:3c:96:15:28:
                    b6:7c:64:40:4a:8f:4c:dd:b0:de:7a:c5:ca:5b:75:
                    e4:3c:2c:96:2b:6c:61:4b:e5:4a:f9:65:a9:f2:ae:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C4:C8:CA:7C:72:44:6C:39:33:EA:78:1E:3A:4C:6D:33:45:FD:F4
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/eMTIynxyRGw5M-p4HjpMbTNF_fQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:14:74:d8:15:ce:72:22:07:fc:e5:5a:81:5a:ba:b7:54:
         f3:7e:ca:ae:a3:62:1e:67:e5:7e:16:1c:0e:e0:95:f2:45:9a:
         dd:71:a3:de:e2:6e:d1:43:07:66:6d:ac:d5:6c:9d:b3:d4:d2:
         83:9c:df:37:01:3e:a4:36:35:80:b4:e0:0d:19:86:6a:65:85:
         5d:81:f6:d4:93:2f:06:d2:ab:5d:37:76:49:07:29:05:e4:38:
         0e:af:3e:97:e7:2c:da:d7:b4:a3:f0:2a:d9:3e:d2:f4:48:8e:
         3e:41:ea:19:2a:d7:f6:30:aa:9d:f2:52:1c:67:f4:ac:e0:fc:
         98:43:f2:21:f6:0a:b3:06:c0:81:e5:2b:35:07:4e:85:fd:1f:
         0e:1d:ba:68:db:c5:8b:60:c1:8d:c4:90:af:32:c3:84:e2:59:
         87:74:16:1a:f5:b4:4d:ff:52:cf:7d:68:7a:3d:51:ca:41:35:
         24:d9:b6:f2:64:8b:1e:80:02:6c:70:0d:88:2d:63:10:b2:84:
         df:be:58:fe:e5:f5:15:b5:1f:8a:67:52:3a:0c:13:eb:82:f0:
         c6:7d:c3:16:37:ad:bb:94:87:e3:3a:48:fd:18:c8:35:a2:38:
         82:15:49:d3:48:66:8b:e9:9b:3a:f3:ca:07:93:c5:7a:98:4f:
         e8:18:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org