Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa
File:                     EaGrG_kVC0t6kDdfbm23U8uAieo.roa (raw, json)
Hash identifier:          zXQyfdZXXgcr5P50DFguIKkPGyCNsPBElD9oOrmhDQM=
Subject key identifier:   11:A1:AB:1B:F9:15:0B:4B:7A:90:37:5F:6E:6D:B7:53:CB:80:89:EA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0185C07A4FAA8D5E47543229EF0E81AE89F4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa
Signing time:             Tue 17 Jan 2023 16:05:19 +0000
ROA not before:           Tue 17 Jan 2023 16:05:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        81.168.116.0/24 maxlen: 24
                          82.153.79.0/24 maxlen: 24
                          81.168.35.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Jan 2023 09:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c0:7a:4f:aa:8d:5e:47:54:32:29:ef:0e:81:ae:89:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan 17 16:05:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11a1ab1bf9150b4b7a90375f6e6db753cb8089ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:0c:da:54:b0:a0:ff:85:00:50:c4:90:4c:
                    9d:b1:b5:bf:ff:85:4b:09:02:81:9d:77:b5:e1:4c:
                    5f:73:66:21:81:83:d6:ef:b4:f1:05:95:40:b9:df:
                    f8:de:e8:4c:88:1a:5a:36:97:11:61:75:fd:2a:37:
                    ed:b0:c1:93:a2:48:b1:1e:03:64:74:74:d0:d7:f3:
                    ee:dd:f2:ca:1e:14:9f:13:6b:fb:14:d7:89:20:5c:
                    87:30:d9:76:3f:f4:5b:19:6b:38:17:cb:ad:31:69:
                    20:12:39:fd:d2:7b:87:6d:a2:8a:e9:5c:09:ff:29:
                    08:a7:1f:31:77:8d:94:db:d7:52:66:74:f6:a2:1c:
                    fe:81:11:44:bb:14:d4:41:5e:9a:84:d3:12:b9:f5:
                    4a:6d:42:00:55:1a:53:ae:59:dd:e2:2f:1e:58:ba:
                    a0:be:e0:46:cf:7f:6a:b4:73:0d:07:f6:be:0a:47:
                    d3:74:66:bf:d5:1f:23:0d:3b:10:38:84:fd:ca:6c:
                    d6:73:70:d4:3a:b6:40:df:db:bf:dc:fe:b9:8a:56:
                    5d:11:22:5f:64:32:c4:aa:53:9d:ae:e9:d9:06:8e:
                    ec:fb:88:18:8d:7b:ee:ab:a4:3f:c4:12:64:7b:91:
                    97:31:e2:2a:92:97:d9:25:e2:ee:5d:97:7d:ea:2e:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A1:AB:1B:F9:15:0B:4B:7A:90:37:5F:6E:6D:B7:53:CB:80:89:EA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/EaGrG_kVC0t6kDdfbm23U8uAieo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.168.35.0/24
                  81.168.116.0/24
                  82.153.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:f3:b5:b6:58:68:c3:fd:5d:a4:ed:d1:66:c7:a6:95:b1:
         23:f0:df:8a:b0:18:1c:20:0f:e6:b4:9b:a6:fa:5e:68:9f:b7:
         2a:11:ad:6b:47:88:b9:d3:1f:d4:c5:84:bc:52:b7:7d:ac:1b:
         3f:03:3c:82:89:59:f7:50:dc:ac:5c:27:cc:77:c4:5e:f9:58:
         72:67:df:64:5c:b8:f6:4f:71:2f:f9:4f:6e:4a:2a:9d:a7:31:
         fa:57:92:54:08:b7:a5:cc:8e:45:51:80:26:26:76:a5:92:7d:
         bb:d7:d2:1f:7e:ef:59:20:09:2a:77:5a:12:1a:a0:ca:a9:ff:
         c9:f8:45:f7:80:b7:dd:d5:5e:f7:97:bb:d6:71:c1:e1:e6:4b:
         88:76:0b:a4:95:2b:a4:fc:7e:39:b2:ac:f9:c5:87:b1:82:bd:
         ab:26:bd:c0:92:75:1b:e3:d3:ca:c2:2c:17:6d:b0:29:f9:45:
         20:e0:7e:5a:ef:89:1f:03:06:e2:15:62:38:66:72:d0:fc:1c:
         8d:6c:0c:00:58:ca:f9:96:ff:3f:e5:74:5a:70:ef:0d:62:97:
         8a:23:d2:33:58:0b:e2:f0:00:28:18:ed:59:3c:a4:26:31:39:
         c1:10:28:69:b3:d3:27:e1:c8:e8:f0:f5:58:56:e3:67:67:bc:
         7c:1a:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org