Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EnmmJuOGOnk30FylJKw0v2yS2ps.roa
File:                     EnmmJuOGOnk30FylJKw0v2yS2ps.roa (raw, json)
Hash identifier:          yb74tmtXNqLfIW0LpVJBHqF6it3R0PhaOq0SZNS2QWs=
Subject key identifier:   12:79:A6:26:E3:86:3A:79:37:D0:5C:A5:24:AC:34:BF:6C:92:DA:9B
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       01856B4A21A3DEA8BB52A334F46C36E504B0
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EnmmJuOGOnk30FylJKw0v2yS2ps.roa
Signing time:             Sun 01 Jan 2023 03:04:58 +0000
ROA not before:           Sun 01 Jan 2023 03:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        188.72.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:4a:21:a3:de:a8:bb:52:a3:34:f4:6c:36:e5:04:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 03:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1279a626e3863a7937d05ca524ac34bf6c92da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:21:5a:1a:cd:7a:fc:59:2c:71:50:9e:d9:
                    08:b8:32:fc:3e:01:e7:56:a5:3f:5a:4f:78:55:05:
                    0f:b3:57:67:00:2d:cb:de:0c:0f:84:bc:65:bf:4d:
                    ee:22:4e:28:ff:43:54:e5:ec:a2:69:06:85:62:06:
                    dd:1f:95:bf:4d:c0:51:b1:0e:5c:c0:44:24:2d:d7:
                    92:b9:e5:f2:5a:c3:87:fd:f0:2a:e0:f5:2e:10:e8:
                    2d:46:76:cf:9f:f4:82:51:2f:74:fa:44:8b:40:a1:
                    b8:f5:a6:7d:7a:e4:df:1e:0a:b0:e1:a2:ad:64:be:
                    ef:3a:b2:77:1c:e7:16:e0:76:69:de:d5:2d:2a:ce:
                    6e:e3:3e:70:e8:60:df:dc:9e:b3:30:b4:f1:5b:1b:
                    70:71:fa:02:2b:45:7e:05:36:61:0a:83:cf:38:29:
                    ea:5b:58:d3:f7:26:3c:e8:3b:ac:c9:a9:da:10:d0:
                    66:52:c5:ff:df:87:a3:29:16:64:5b:8f:78:25:43:
                    f1:1b:b2:fd:97:c8:c4:8d:1d:fc:03:97:a1:6a:35:
                    a6:a7:11:d2:36:7e:36:f9:17:b3:50:e9:ab:68:ae:
                    8a:7f:b8:b3:16:3c:04:b7:c4:7d:66:13:e8:f8:8f:
                    a1:21:ea:b2:aa:e6:b6:e6:9c:e6:d6:aa:02:88:21:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:79:A6:26:E3:86:3A:79:37:D0:5C:A5:24:AC:34:BF:6C:92:DA:9B
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EnmmJuOGOnk30FylJKw0v2yS2ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:a0:61:ad:6c:05:43:66:5d:01:71:67:5d:77:45:43:21:e6:
         01:7b:91:a7:7b:d0:4f:30:2e:04:1c:86:b9:ae:15:9a:08:c5:
         a5:47:82:fb:e3:68:0f:7c:4c:ed:45:53:57:b2:ec:ff:9b:61:
         fb:03:52:ae:e9:35:c8:1a:3c:1f:a6:4b:b5:25:ff:3b:02:80:
         62:4e:b2:6a:ac:89:32:b9:64:e2:90:58:ed:f0:76:3d:80:b9:
         8e:fb:42:7c:3f:8a:10:a9:db:e1:36:d0:4c:7d:60:a5:49:51:
         2c:83:ac:1e:74:7b:78:61:46:30:79:ac:bc:e2:ab:e3:d6:58:
         a2:6b:19:78:93:30:75:4a:98:85:b5:47:c7:00:c0:83:cd:2a:
         60:1f:ad:f2:13:9f:b8:36:1a:15:26:b4:b9:5a:89:53:48:4c:
         dd:75:0d:e2:fd:b4:52:14:d5:25:29:46:79:83:bd:ca:12:f1:
         71:ff:2a:3e:da:22:60:31:1b:46:f8:32:74:5c:1b:bc:de:25:
         19:f8:76:a3:7d:fe:d0:99:7e:ac:fb:da:b4:db:45:0a:2d:c9:
         7c:23:a5:45:4b:f0:9f:9e:8b:56:00:09:bc:9f:b4:58:ca:93:
         70:3a:3f:e6:ba:8c:d2:3d:ad:12:0c:88:fb:a3:87:92:10:dc:
         42:6c:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org