Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/eodiiGT_5DwYPtt7iu4wqPgcO8c.roa
File:                     eodiiGT_5DwYPtt7iu4wqPgcO8c.roa (raw, json)
Hash identifier:          j5bOix26vxOgSQw1q6z/buynyfeG9IF8Y6hanTmKkJ0=
Subject key identifier:   7A:87:62:88:64:FF:E4:3C:18:3E:DB:7B:8A:EE:30:A8:F8:1C:3B:C7
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       018AD4B7744A1C9F344E88346242E8B47153
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/eodiiGT_5DwYPtt7iu4wqPgcO8c.roa
Signing time:             Wed 27 Sep 2023 03:38:27 +0000
ROA not before:           Wed 27 Sep 2023 03:38:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48108
IP address blocks:        94.247.137.0/24 maxlen: 24
                          185.235.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 07 Oct 2023 05:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d4:b7:74:4a:1c:9f:34:4e:88:34:62:42:e8:b4:71:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Sep 27 03:38:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a87628864ffe43c183edb7b8aee30a8f81c3bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:c6:2d:23:bf:4b:a7:e3:75:83:58:08:f8:
                    36:f7:20:10:9d:5d:ef:46:1d:e1:dd:33:9f:19:94:
                    fb:f8:bb:eb:1c:2b:1d:70:eb:93:c2:5c:6c:0c:33:
                    28:59:d0:1f:a1:58:56:01:c1:28:e2:f0:0e:86:09:
                    cb:83:2f:ed:f5:e5:b4:47:14:a8:62:83:d6:89:ef:
                    6d:21:2c:73:43:91:25:6a:83:a1:35:e2:38:5c:ef:
                    61:ec:25:32:99:77:b9:7a:43:e5:6d:4c:34:75:eb:
                    c6:3d:c2:8d:d7:84:c5:07:42:41:71:e7:44:09:dd:
                    ab:22:0b:12:f9:37:40:e1:1f:fa:98:46:1c:89:4e:
                    2d:f9:23:f9:f9:1f:f0:4e:56:29:7e:2f:b2:9f:55:
                    8d:89:c5:26:98:3d:35:68:87:fe:23:9e:07:b4:ea:
                    fe:2f:0a:be:34:b6:82:34:b9:de:db:19:95:15:98:
                    43:51:f5:f5:52:a7:62:fe:f2:79:ff:28:a5:3b:b0:
                    e6:14:e0:e9:ad:1b:14:b0:a1:0e:ae:d3:1d:4c:71:
                    88:97:94:7e:30:30:ef:01:91:21:38:32:38:78:3d:
                    ab:b5:59:13:41:b9:c2:55:09:e1:86:79:00:e0:65:
                    fe:83:0a:91:18:b0:06:a3:17:f7:a3:f5:75:49:61:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:62:88:64:FF:E4:3C:18:3E:DB:7B:8A:EE:30:A8:F8:1C:3B:C7
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/eodiiGT_5DwYPtt7iu4wqPgcO8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.137.0/24
                  185.235.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:cc:c2:92:f2:80:69:d4:c0:ef:5b:86:e5:3f:f9:c8:2e:
         da:90:bd:2a:d7:25:e6:35:f8:56:73:d4:a6:f0:a7:f8:97:63:
         5f:55:f6:4f:da:ba:c6:ea:43:fb:7d:4c:5d:fe:de:48:87:33:
         28:e0:25:a1:b8:e2:95:f4:a2:06:bc:e0:55:5b:98:07:00:41:
         9e:a1:67:2a:6c:89:86:4a:e3:8c:ea:df:ce:f1:0f:84:59:9b:
         d3:d4:21:a5:7e:fa:ea:d2:e4:50:13:60:83:a7:ff:5e:9b:f6:
         c8:74:4c:be:15:9c:ca:4d:c9:a0:47:62:f4:74:18:77:ca:ab:
         91:6f:7b:1a:2e:f3:19:3b:99:a2:06:58:ae:3f:a4:c6:a0:c2:
         5c:e6:b5:d2:78:c0:79:f8:5b:c5:37:2d:eb:1c:6b:15:2d:da:
         d5:27:64:8f:93:6e:f7:ec:da:4d:f9:ae:9b:f4:ed:b5:d4:b0:
         ba:bb:32:02:f9:c5:6a:c7:fd:2d:fa:e7:c8:06:1d:bc:66:e9:
         93:30:10:ad:44:6c:74:e9:24:12:1e:f6:ff:4d:2c:a5:1a:c7:
         97:b1:38:dc:a9:1f:9d:d8:b9:e3:b1:66:07:27:a3:c1:e7:15:
         49:74:93:0e:06:d7:41:1c:4e:59:30:8a:0c:85:60:0c:fc:96:
         a5:ff:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-fra.rpki-client.org