Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/EbcB0dp9lRA4vDx9hNQaI3UcXrw.roa
File:                     EbcB0dp9lRA4vDx9hNQaI3UcXrw.roa (raw, json)
Hash identifier:          OY8uo52qtVvSXPuQ73c+CEEAlr2hQLPriVThdNCcIKk=
Subject key identifier:   11:B7:01:D1:DA:7D:95:10:38:BC:3C:7D:84:D4:1A:23:75:1C:5E:BC
Certificate issuer:       /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial:       01856D5CF41AED5805D20B965B600DB14B34
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/EbcB0dp9lRA4vDx9hNQaI3UcXrw.roa
Signing time:             Sun 01 Jan 2023 12:44:46 +0000
ROA not before:           Sun 01 Jan 2023 12:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200348
IP address blocks:        185.179.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:5c:f4:1a:ed:58:05:d2:0b:96:5b:60:0d:b1:4b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
        Validity
            Not Before: Jan  1 12:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11b701d1da7d951038bc3c7d84d41a23751c5ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:47:59:64:ab:b7:ef:26:27:91:02:89:02:
                    60:58:0a:c1:ce:d8:a6:88:12:33:b2:d1:5b:ec:d1:
                    37:a2:7c:d5:ce:11:f0:29:5b:03:6a:c4:9e:6f:f6:
                    1a:83:bf:5c:61:67:f1:bc:08:ec:aa:7b:82:3c:87:
                    f8:7f:fc:42:af:a7:2e:9f:ad:4e:a9:1f:bd:d8:b9:
                    f8:f5:b9:d4:84:14:ad:3d:28:b3:a9:d8:12:cf:b0:
                    2a:9b:26:17:25:8a:86:52:93:6e:ad:46:e2:61:52:
                    03:f8:e2:ed:95:14:ce:00:5d:f4:2a:ea:37:8d:b5:
                    96:7e:34:90:6e:db:d9:ff:f4:c1:e0:93:00:fe:45:
                    7a:9f:f1:1b:4c:af:0a:47:31:de:47:b0:64:4c:52:
                    1a:12:b8:05:53:01:bb:2b:e2:98:d1:75:b6:4a:6e:
                    49:df:08:53:d4:85:e9:af:72:de:b8:e1:e4:6b:76:
                    47:e4:fc:3f:24:82:3c:9f:f0:0c:1d:2b:57:1b:db:
                    68:77:4d:05:d2:41:1b:35:4b:81:8a:12:e0:15:f5:
                    c9:f5:51:a1:57:06:85:4c:72:cd:5c:08:50:47:80:
                    95:3c:5a:37:c9:62:85:d5:da:8a:a5:37:55:87:8b:
                    14:35:cf:72:23:af:bd:8a:5f:c2:0e:f6:33:15:58:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:01:D1:DA:7D:95:10:38:BC:3C:7D:84:D4:1A:23:75:1C:5E:BC
            X509v3 Authority Key Identifier:
                keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/EbcB0dp9lRA4vDx9hNQaI3UcXrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:a4:f2:89:fa:ff:c8:b6:16:d6:1f:d5:c3:3e:95:17:1d:
         76:74:14:94:33:65:73:96:ea:be:b9:2c:a1:65:aa:c9:16:94:
         c9:b6:2c:a7:23:1f:e2:2c:0b:22:c3:fd:d5:41:e2:21:e4:c7:
         20:43:23:0f:f3:13:6b:80:4c:6c:b9:10:59:4b:f7:55:26:0c:
         7b:8e:4b:25:dd:54:75:2a:2b:2a:b0:e1:f5:2f:7e:17:f8:81:
         42:06:e8:28:8f:d9:26:7a:91:e0:d0:00:40:94:0a:95:31:6d:
         b2:b2:07:53:ac:e9:b5:16:03:59:4a:b0:e3:74:a7:e5:27:a6:
         ee:de:c3:f1:fe:4c:d4:3f:56:7b:4a:3b:65:0f:ea:6e:f4:9f:
         dc:7d:ab:62:95:08:b1:66:17:68:78:c7:e6:b6:3e:de:73:7d:
         c5:46:90:98:b5:9a:2d:cf:44:b6:81:b8:7d:c7:48:24:10:3e:
         4b:a1:c4:76:5e:87:56:cf:3d:10:70:a3:aa:11:70:55:7e:58:
         2d:09:f2:ab:ea:6f:21:b5:40:cb:5a:cb:75:27:97:99:9d:f3:
         f5:03:a4:1a:6a:eb:fe:1b:cc:39:46:c8:14:89:8b:1d:c9:35:
         b9:9c:80:bb:60:48:dc:34:ab:2b:3c:17:33:b1:50:db:b3:c3:
         d9:4f:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org