Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/Ie_DVQKwTk0bqGxakvjDMIBg8mo.roa
File:                     Ie_DVQKwTk0bqGxakvjDMIBg8mo.roa (raw, json)
Hash identifier:          YPQydpsVvJgdNOe022/ry133PU2qipYqN0FTw11CoTY=
Subject key identifier:   21:EF:C3:55:02:B0:4E:4D:1B:A8:6C:5A:92:F8:C3:30:80:60:F2:6A
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       0188B4E19C41D361C5F24A1D93776C7CE8FA
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/Ie_DVQKwTk0bqGxakvjDMIBg8mo.roa
Signing time:             Tue 13 Jun 2023 13:11:04 +0000
ROA not before:           Tue 13 Jun 2023 13:11:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55154
IP address blocks:        37.148.218.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 12 Jul 2023 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b4:e1:9c:41:d3:61:c5:f2:4a:1d:93:77:6c:7c:e8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Jun 13 13:11:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=21efc35502b04e4d1ba86c5a92f8c3308060f26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:5d:f8:62:14:33:7c:9f:3c:94:0d:cc:c5:
                    d5:b9:37:e3:85:68:59:d8:e2:05:8a:5d:7e:9c:29:
                    43:4c:b9:59:f4:86:ce:6d:dd:7d:0a:49:47:98:35:
                    71:da:c3:dd:9f:53:ff:29:65:c8:c0:4b:af:4e:f2:
                    d9:78:2b:48:05:90:12:6d:d9:49:3b:6c:22:e4:47:
                    35:1f:c2:d3:63:23:c0:7e:a8:b7:e7:c7:94:a2:00:
                    c3:40:ab:0c:b1:a0:04:2d:29:98:30:10:52:f9:ff:
                    10:dd:ab:d6:51:f6:71:5d:89:45:15:14:08:b1:fc:
                    00:7f:46:96:8a:1f:3b:ef:aa:b6:2a:f6:8c:3a:20:
                    5e:51:cc:c8:55:2a:10:87:f1:86:fa:df:d8:30:e1:
                    e1:df:8a:4d:a4:63:ff:4f:73:b9:11:0e:79:ea:a3:
                    be:94:b5:c2:4c:4f:1d:d2:c9:9f:11:67:39:e2:8a:
                    2d:b8:12:83:f8:27:5e:1f:15:44:33:e4:e9:93:8c:
                    1d:ac:3d:f2:cc:22:d7:77:a5:1b:7f:d6:59:93:8e:
                    d9:e9:de:24:69:9c:90:fe:fc:6e:a7:52:fb:89:15:
                    15:25:2c:77:e1:b6:94:f4:a6:73:da:2e:a6:c3:4d:
                    19:be:44:00:f8:fe:e4:b6:01:04:5e:e5:c8:07:a0:
                    f1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EF:C3:55:02:B0:4E:4D:1B:A8:6C:5A:92:F8:C3:30:80:60:F2:6A
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/Ie_DVQKwTk0bqGxakvjDMIBg8mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:c2:57:fb:84:1e:b7:e0:c9:f2:c3:63:b6:65:f0:ca:22:21:
         8c:f8:0d:52:c5:d2:48:12:3c:70:e7:66:56:37:06:53:12:7d:
         7e:d4:f0:49:35:b3:27:ae:c0:e9:5b:d6:8c:05:e1:ec:d2:c5:
         9d:5f:76:14:e0:9b:37:38:df:47:81:75:9b:a6:00:78:12:9d:
         9f:c9:1d:fd:23:ef:02:c8:a7:06:47:5f:45:89:1f:8b:f4:8d:
         33:21:1f:54:b4:7b:fc:a4:90:ce:94:a1:ce:1a:cf:59:b2:6b:
         21:af:60:56:eb:e3:fb:50:e6:dc:cc:13:1a:d5:80:48:87:0f:
         9b:4e:6e:d7:f4:c9:9c:45:aa:94:19:51:f1:95:8b:10:34:77:
         80:c5:04:9b:9f:b8:80:ed:f2:6b:48:bd:58:79:c6:36:bf:a8:
         ab:c3:4f:b7:e2:e8:80:87:0f:57:87:26:a6:e7:d8:70:f3:b5:
         19:ac:52:96:3a:46:9b:d7:59:cf:0e:18:68:c2:e0:be:6f:b3:
         b3:9d:f7:ab:7d:e8:b2:9a:df:37:1f:bb:82:da:19:63:09:33:
         3c:ea:35:ca:b1:92:3f:48:b8:30:53:9d:80:0e:69:d2:b9:bb:
         e8:96:bf:79:bb:ba:15:a9:6a:b0:63:f6:79:e4:e7:df:ce:fd:
         0e:cf:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:08 2024 by rpki-client on console-fra.rpki-client.org