Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EIRixxS-35npK3GdkAeYLVAgJ1s.roa
File:                     EIRixxS-35npK3GdkAeYLVAgJ1s.roa (raw, json)
Hash identifier:          YRVONA+/Pk5bGnOOuQAWHFyqajX45j0e4hKAcyea9RM=
Subject key identifier:   10:84:62:C7:14:BE:DF:99:E9:2B:71:9D:90:07:98:2D:50:20:27:5B
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       0188A3F48998B1853624A330325033808496
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EIRixxS-35npK3GdkAeYLVAgJ1s.roa
Signing time:             Sat 10 Jun 2023 06:18:12 +0000
ROA not before:           Sat 10 Jun 2023 06:18:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.81.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a3:f4:89:98:b1:85:36:24:a3:30:32:50:33:80:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jun 10 06:18:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=108462c714bedf99e92b719d9007982d5020275b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:a9:e1:a9:c9:2f:15:d2:cd:62:96:09:b2:
                    e7:0f:ab:5e:3e:00:b3:aa:b0:26:db:b4:f2:1e:7f:
                    b4:68:3f:38:69:e8:ef:7b:88:84:92:19:9c:ec:3b:
                    b0:b9:93:90:da:41:b5:8d:39:02:d5:48:70:8d:43:
                    75:e5:b2:10:db:83:48:0a:8e:27:fd:b6:cf:17:8b:
                    6e:c8:58:75:ab:93:c6:a7:4e:db:36:43:97:c4:e0:
                    8c:bd:d8:69:f9:34:b4:1f:9e:4d:9c:43:a5:74:8c:
                    a0:99:56:9e:55:6b:fa:f1:50:d8:00:96:47:73:8a:
                    a4:4a:1f:d8:61:86:6c:c1:18:b4:51:ec:f2:35:2a:
                    3c:ec:7d:d0:da:08:e1:5b:cc:ec:53:e9:de:35:50:
                    3b:c9:42:90:3a:8d:03:c0:41:ff:63:58:cc:94:56:
                    ed:26:96:8f:d6:4c:42:a5:88:be:e7:78:66:91:d6:
                    30:c4:41:b4:38:09:15:33:6c:b2:61:fa:95:c6:ce:
                    25:0f:cf:db:74:39:da:c8:e5:36:f6:6e:af:cf:08:
                    12:33:09:19:28:19:42:2a:16:fb:62:c9:9d:81:5c:
                    ef:cd:c7:70:40:72:08:ef:43:ca:23:4c:be:23:d5:
                    ba:bd:0a:ca:6e:a5:5c:14:09:6c:11:7e:53:2a:9a:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:84:62:C7:14:BE:DF:99:E9:2B:71:9D:90:07:98:2D:50:20:27:5B
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/EIRixxS-35npK3GdkAeYLVAgJ1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:dc:d5:13:66:7d:72:d2:5c:87:f6:d2:0a:8f:ed:f1:09:
         fd:e6:ed:37:29:72:e5:68:52:81:c4:72:0e:7e:34:24:25:04:
         3f:d3:d4:7e:32:16:d2:d5:e4:b1:7c:d6:a5:5f:bd:34:d3:b8:
         4d:f9:91:2f:26:73:a4:94:1e:67:8b:3a:c5:d8:46:a4:a8:a3:
         cc:b2:50:cf:98:a1:b3:a7:6d:7c:1e:99:6d:ac:54:1f:1d:0a:
         c8:dd:80:df:df:50:5b:e1:6e:06:85:85:07:5b:b7:bf:a6:40:
         ec:9b:b5:fb:9a:88:da:14:5c:7f:96:18:93:36:84:db:28:25:
         2c:bc:87:9c:56:1b:2d:d6:da:4c:9c:ef:c7:0c:25:68:9d:cf:
         aa:03:4f:99:db:81:75:fa:fd:6d:7f:f7:9d:e1:b8:99:d6:b9:
         b1:04:0f:e3:89:1a:2d:16:f9:63:b6:3f:28:28:12:6e:5d:14:
         1d:87:17:b8:64:48:e9:3d:e2:a4:09:6a:88:87:25:13:50:aa:
         eb:2b:1f:7f:3b:7d:00:62:99:51:bb:b7:25:26:9a:44:4e:be:
         f1:af:16:5d:29:f7:e4:ff:06:67:c3:c0:a6:05:b1:1c:73:ac:
         79:cd:b5:bd:e1:8c:4b:dc:f3:62:d5:cf:9a:7a:81:20:04:ee:
         fe:64:59:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org