Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/4eXrjAG1fCVFPe_Yalt3nTlxbl0.roa
File:                     4eXrjAG1fCVFPe_Yalt3nTlxbl0.roa (raw, json)
Hash identifier:          5m+E13VvS7FiNdVo/0l+ma1Vumoxbl7eMk8H4QFKSik=
Subject key identifier:   E1:E5:EB:8C:01:B5:7C:25:45:3D:EF:D8:6A:5B:77:9D:39:71:6E:5D
Certificate issuer:       /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial:       01882CECC8A861FF9D67E4D7FDF04211BEC5
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/4eXrjAG1fCVFPe_Yalt3nTlxbl0.roa
Signing time:             Thu 18 May 2023 03:34:55 +0000
ROA not before:           Thu 18 May 2023 03:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.218.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2c:ec:c8:a8:61:ff:9d:67:e4:d7:fd:f0:42:11:be:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
        Validity
            Not Before: May 18 03:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e1e5eb8c01b57c25453defd86a5b779d39716e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c3:db:30:30:63:5c:65:4e:6b:90:26:8e:39:
                    21:a9:11:2d:71:89:25:45:74:75:55:26:da:1b:74:
                    71:15:a7:84:87:04:8c:b4:22:71:76:d4:54:01:5f:
                    2d:ee:52:6a:e5:15:41:85:9f:51:f1:0f:b7:60:3c:
                    92:73:c7:0d:7d:8b:80:20:3b:27:73:67:85:f3:6a:
                    89:05:ca:70:02:41:fe:f9:c0:a9:a3:b8:2b:e7:02:
                    8e:e3:5e:b6:2c:55:52:27:9e:14:14:f0:f3:9e:d1:
                    9d:0d:46:11:26:7e:ba:b4:72:16:77:a6:23:7d:70:
                    e6:b0:76:a2:22:77:fa:86:5e:62:7f:2b:3a:61:19:
                    a4:83:85:69:b2:85:c3:6e:a4:c4:e7:e2:24:5d:f1:
                    92:b1:14:95:a7:81:be:21:a2:14:2d:c5:b2:bc:c7:
                    8c:a8:99:71:ef:a3:64:4e:e7:33:58:62:6d:33:2c:
                    62:34:d6:dc:d1:45:53:ba:28:30:8a:a6:c4:8c:96:
                    15:70:39:03:03:b8:14:cf:02:a9:51:85:5a:da:9c:
                    2b:9e:44:17:be:af:f7:5b:6d:f3:60:76:bf:86:e4:
                    4d:36:49:48:ff:a1:e9:60:87:c2:ae:4d:42:09:20:
                    cc:b0:99:04:71:73:63:4c:59:5e:0c:b4:52:40:70:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:EB:8C:01:B5:7C:25:45:3D:EF:D8:6A:5B:77:9D:39:71:6E:5D
            X509v3 Authority Key Identifier:
                keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/4eXrjAG1fCVFPe_Yalt3nTlxbl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:8f:40:d1:19:cf:ee:ed:91:33:ac:79:3d:f1:16:ac:f5:89:
         ce:12:df:1f:a4:7c:3d:19:d0:e6:23:73:45:7c:f7:2b:e4:a7:
         39:05:cc:c9:53:9d:0a:95:db:b1:c9:9c:e6:d6:29:6f:25:be:
         a6:84:03:df:be:e9:b4:a8:5f:2f:5f:7a:5a:68:84:ea:7d:4a:
         2d:25:aa:80:fb:39:8d:17:fd:6e:64:a3:59:80:2a:a3:99:56:
         63:ad:bf:6c:34:08:f8:e3:91:37:c6:db:ca:16:d4:71:3c:ae:
         00:75:04:a1:fa:82:8d:7f:da:22:73:b3:a2:a6:80:ab:37:57:
         b4:98:3b:41:f1:bd:75:46:96:4f:f9:30:20:20:51:46:60:fa:
         f6:c4:fb:09:24:73:47:9f:4d:ec:30:33:a0:25:8c:ab:d4:38:
         7f:14:66:98:c8:67:90:cd:9e:99:d8:fb:0e:3b:86:d3:99:7c:
         eb:19:06:86:61:78:02:08:ae:2d:17:6a:e7:df:90:59:8b:ba:
         19:07:7a:f1:24:0d:a8:ca:ab:c3:08:32:fc:b1:d4:46:f4:57:
         d8:96:d8:c6:e1:fa:a2:4f:95:7e:87:66:c0:27:ad:7b:8b:d4:
         c0:e2:25:33:13:89:7a:5b:31:a2:36:7f:af:bc:23:b4:c6:39:
         6a:59:68:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 20:41:21 2023 by rpki-client on console-fra.rpki-client.org