Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa
File:                     EUJHeS70u5HlcPS1KoauiaTHA6o.roa (raw, json)
Hash identifier:          plzA71yHKUjl+Tb+cJeecpyxkALrCGWn0TkM/3c+Wy4=
Subject key identifier:   11:42:47:79:2E:F4:BB:91:E5:70:F4:B5:2A:86:AE:89:A4:C7:03:AA
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       01856BDC94B6A46837D119A94073D3BDF2CA
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa
Signing time:             Sun 01 Jan 2023 05:44:56 +0000
ROA not before:           Sun 01 Jan 2023 05:44:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43905
IP address blocks:        82.146.182.0/24 maxlen: 24
                          82.146.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:94:b6:a4:68:37:d1:19:a9:40:73:d3:bd:f2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jan  1 05:44:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=114247792ef4bb91e570f4b52a86ae89a4c703aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:1a:9c:38:b4:7d:91:80:da:9a:a4:37:10:
                    c2:b7:5a:1b:dc:ef:ca:25:71:50:ff:e1:56:60:38:
                    b1:7a:83:a9:3b:51:9d:7a:95:e8:f0:c4:4f:38:d4:
                    14:c0:53:fd:e1:99:2c:10:5a:7b:8b:cd:ee:1b:96:
                    94:21:e5:bc:b1:74:6c:d5:27:2c:8f:7a:a0:ed:fe:
                    a3:0c:89:2c:9e:28:b9:8a:2c:93:cd:c4:25:d6:3b:
                    f2:ee:5f:fa:dc:4e:28:5c:bd:31:cd:ec:26:2e:62:
                    d7:30:7a:d9:f8:e9:b4:cb:71:6c:f2:34:3d:2e:d1:
                    ab:c6:3a:17:50:10:ea:e3:73:ec:b7:f1:13:e0:95:
                    1d:3f:38:29:d9:62:93:8b:43:ff:37:0c:03:8f:db:
                    63:2b:5a:ec:53:ee:dc:4b:44:2d:01:15:55:2f:e2:
                    a9:ae:d3:26:7d:01:c0:2a:45:ef:16:50:58:1d:bd:
                    11:07:04:72:43:ea:2c:28:a1:62:71:3d:00:2d:71:
                    57:d3:65:95:f8:74:86:bf:c6:5b:12:d5:50:79:96:
                    36:03:8a:b7:ff:bd:f6:fa:ab:8e:44:dc:65:f1:8d:
                    a9:8a:92:23:6e:4c:da:fa:51:a0:ad:d0:51:af:73:
                    24:e7:f4:4c:e7:55:fd:47:b8:88:b3:49:b1:10:0f:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:42:47:79:2E:F4:BB:91:E5:70:F4:B5:2A:86:AE:89:A4:C7:03:AA
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EUJHeS70u5HlcPS1KoauiaTHA6o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.146.180.0/24
                  82.146.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:64:26:8c:1d:a2:a9:5d:30:f2:8a:bc:13:9b:55:04:26:
         2c:64:69:22:30:01:8e:8d:11:da:2b:29:2b:0f:ac:c3:24:f6:
         01:38:2d:78:00:84:e6:0d:5d:30:3e:26:ac:54:5f:11:b8:56:
         31:76:2b:0e:78:bc:58:04:10:8d:05:78:9a:f5:21:ee:2b:78:
         1f:43:51:b8:fa:ac:d1:9b:29:3f:fc:20:78:0a:30:6e:12:10:
         34:24:ad:eb:65:18:5b:1e:4f:3d:bb:38:f5:d7:4b:b3:45:00:
         99:ad:ce:c2:f9:3b:42:3d:50:2a:29:04:9b:7b:3b:50:33:25:
         b3:16:0b:55:95:13:66:60:9f:a1:5c:0a:1e:b0:d4:f9:85:48:
         9e:fb:6f:76:28:f6:f8:90:76:e2:51:0a:30:0d:32:86:c7:5d:
         2f:98:38:63:c0:ab:70:0b:87:a1:d0:0e:00:29:fd:78:3d:44:
         49:e5:be:62:18:3c:c3:dd:6e:94:2f:70:7b:b6:c7:99:24:a7:
         a9:41:1b:4f:bf:b7:9a:10:1c:fd:48:38:70:3e:b1:93:d2:ed:
         f2:4a:0e:3f:6c:c3:c8:eb:65:40:1b:fb:21:9d:15:5d:ea:2d:
         9d:64:86:8a:cb:c0:29:b4:76:eb:ab:e4:93:f3:0e:37:f2:16:
         8d:91:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:05 2024 by rpki-client on console-ams.rpki-client.org