Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/EB2Ijzq_vzhQiRMn4VL-QqgVVis.roa
File:                     EB2Ijzq_vzhQiRMn4VL-QqgVVis.roa (raw, json)
Hash identifier:          ODrIrpCTFrO/7s42+Mh3viwJh1ICTp6tGyM/gMzHj/c=
Subject key identifier:   10:1D:88:8F:3A:BF:BF:38:50:89:13:27:E1:52:FE:42:A8:15:56:2B
Certificate issuer:       /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial:       01856FF95EA659CDF8CECCA2CA0FD4680A4A
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/EB2Ijzq_vzhQiRMn4VL-QqgVVis.roa
Signing time:             Mon 02 Jan 2023 00:54:51 +0000
ROA not before:           Mon 02 Jan 2023 00:54:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60126
IP address blocks:        185.46.234.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 04 Jul 2023 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:5e:a6:59:cd:f8:ce:cc:a2:ca:0f:d4:68:0a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
        Validity
            Not Before: Jan  2 00:54:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=101d888f3abfbf3850891327e152fe42a815562b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:d8:01:f8:c3:7e:3c:b0:6e:16:98:a4:72:
                    8d:ce:fe:a7:43:77:fc:16:de:98:2a:2c:74:0e:92:
                    55:78:ea:01:d9:b0:e3:ef:d1:47:7f:f8:53:f2:19:
                    a2:4d:7e:b5:41:f1:90:03:f3:d1:0a:57:fa:7a:67:
                    47:3d:61:7b:5c:71:37:b4:d1:77:45:8b:8d:f6:3a:
                    d7:8a:8b:bc:48:8e:a6:99:d1:dc:2e:eb:db:a0:ef:
                    2a:3e:19:a4:91:e9:a1:42:c6:15:e8:8d:d1:33:45:
                    d1:c6:11:3f:1f:1e:35:14:1a:35:0f:7d:ca:75:57:
                    ec:10:0c:e3:31:86:f8:37:64:b1:8f:9d:73:9b:c2:
                    da:0b:0c:78:14:69:05:49:81:91:c8:c9:13:05:63:
                    52:02:c9:f3:cd:79:5c:78:46:24:4f:f9:0d:61:9e:
                    4f:74:df:c6:5e:e6:b0:ab:90:1c:a7:46:a5:5b:a1:
                    9f:b6:73:8b:1d:6f:60:16:ca:90:a0:3b:93:6a:c5:
                    ee:19:02:c6:67:67:89:21:f7:bc:cc:b1:f0:e8:71:
                    b8:96:71:d5:59:50:e1:69:da:11:dd:5e:85:9c:a4:
                    23:66:eb:e9:b4:3a:61:30:31:4b:1a:da:04:e1:67:
                    54:06:69:af:7b:94:df:39:c3:08:c9:6e:70:96:b7:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1D:88:8F:3A:BF:BF:38:50:89:13:27:E1:52:FE:42:A8:15:56:2B
            X509v3 Authority Key Identifier:
                keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/EB2Ijzq_vzhQiRMn4VL-QqgVVis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:88:a0:ac:71:dc:73:af:f3:7a:37:5d:db:14:1b:ff:fc:48:
         c4:47:27:7e:ff:e1:a8:cf:56:7c:c6:81:aa:4e:30:ee:f4:8f:
         31:ea:ae:f9:c1:ae:d5:a2:44:cc:f8:85:c8:c1:af:23:e8:4d:
         9e:60:7d:54:69:fc:9d:16:c3:f2:79:e1:f6:41:aa:5e:80:ad:
         b2:2a:1c:86:5d:1c:6f:bb:74:bf:6d:33:60:77:f9:07:6c:e4:
         f5:0f:46:b3:f4:d8:04:64:59:c0:9d:d9:a7:20:94:47:1c:ba:
         d4:01:01:2d:19:1d:52:79:4e:73:56:91:c9:88:ff:c9:7b:ab:
         43:88:3d:bb:5e:05:b2:8e:a6:8f:e6:08:4a:b5:99:b6:0d:d9:
         7d:7e:a1:13:f3:6a:f6:94:24:28:76:03:a1:42:aa:6f:c2:dc:
         e2:64:88:2a:c5:0c:b2:69:ae:cd:ae:5b:bc:d4:37:61:c2:2e:
         05:61:8b:70:31:1c:bb:eb:38:2b:e0:0e:88:74:1b:11:52:08:
         71:75:5a:e5:56:55:9e:9d:08:f6:b5:6d:6c:f4:ed:65:7c:83:
         6c:8c:10:d3:41:19:34:cf:e3:a6:b6:ec:67:2b:6c:cf:f2:6a:
         8a:ee:87:ee:6e:b9:33:63:9f:c8:25:15:5c:34:a9:1e:d7:d5:
         17:87:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:02 2024 by rpki-client on console-ams.rpki-client.org