Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eZeioWQYs3HzKq6D_ueuiu4jwLg.roa
File:                     eZeioWQYs3HzKq6D_ueuiu4jwLg.roa (raw, json)
Hash identifier:          IUbZUxZBVh8vXeTYUW0VODJPJIivj6V/3vI5l0GjUio=
Subject key identifier:   79:97:A2:A1:64:18:B3:71:F3:2A:AE:83:FE:E7:AE:8A:EE:23:C0:B8
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       01856FCB86C3672CAF5A5C1EA785B345B815
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eZeioWQYs3HzKq6D_ueuiu4jwLg.roa
Signing time:             Mon 02 Jan 2023 00:04:47 +0000
ROA not before:           Mon 02 Jan 2023 00:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35448
IP address blocks:        95.158.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:86:c3:67:2c:af:5a:5c:1e:a7:85:b3:45:b8:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  2 00:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7997a2a16418b371f32aae83fee7ae8aee23c0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:71:ae:d2:f5:75:4a:18:b7:da:97:45:4d:
                    08:c3:c9:10:dc:08:15:7a:61:f0:2f:de:bf:15:11:
                    27:35:39:9c:ad:1c:2e:ec:13:65:e2:eb:b1:1a:a5:
                    3e:99:a8:fa:3f:0f:5d:ec:70:36:78:f2:88:c2:cb:
                    c9:05:f5:18:03:ce:ca:4d:be:90:db:95:a1:c4:f0:
                    d7:2e:a3:4a:92:1a:31:bd:59:0e:8c:a0:62:8f:06:
                    7a:fb:55:fb:ed:b0:a2:8b:64:fe:ba:3d:dc:8d:f0:
                    58:e7:06:1c:93:89:17:85:19:fd:f3:2b:4d:ae:b4:
                    8a:57:04:4a:0b:f1:58:15:60:7e:63:2b:cc:8d:be:
                    73:e9:27:29:9e:8f:bd:48:2c:9d:80:09:4e:91:73:
                    f8:e9:f7:82:31:39:f8:76:a2:ae:05:25:cc:90:55:
                    17:0e:b5:04:21:7c:80:fc:50:d5:fa:2d:7b:e0:09:
                    67:f3:1f:13:c1:e8:11:b7:c0:26:7f:8a:48:1f:80:
                    ff:89:bc:b6:a3:60:f7:a3:e2:37:81:35:4a:0e:2e:
                    3a:1c:29:95:52:56:4d:19:db:c7:3f:8e:73:a8:d2:
                    0d:68:1a:fc:8c:30:64:1e:cf:a9:86:aa:79:e2:20:
                    da:b6:6f:2c:27:3e:c3:69:7e:50:bd:b5:a8:ef:3e:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:A2:A1:64:18:B3:71:F3:2A:AE:83:FE:E7:AE:8A:EE:23:C0:B8
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eZeioWQYs3HzKq6D_ueuiu4jwLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.158.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:71:69:96:28:82:cf:cf:2e:29:47:10:69:e2:22:03:84:59:
         b9:03:72:02:a7:ad:3a:57:69:0d:a4:ae:a0:07:4b:a7:8d:dc:
         96:fc:79:df:e5:60:da:25:f3:fc:48:45:ec:8d:5e:05:ff:60:
         e2:b5:9b:d6:2c:20:06:5c:ea:99:11:59:ff:04:6a:4c:19:d1:
         0d:65:1b:59:1c:50:31:1a:28:c1:2e:30:0d:36:86:0e:5b:41:
         a5:bc:1d:d9:85:fc:53:cf:3d:95:39:c4:35:35:41:2a:b9:b1:
         3d:f1:91:fc:3a:cb:0f:41:0b:5d:d1:74:87:ac:71:c8:35:4b:
         e6:24:88:75:ba:47:21:ca:cf:df:ac:ce:90:24:6b:81:ab:cd:
         4e:a1:e4:09:f4:a6:1b:fb:12:4a:7a:c6:f9:e7:dc:b2:75:4f:
         dd:e9:39:a1:30:13:00:6c:18:6f:14:a9:44:21:25:db:6c:8f:
         f7:75:c0:5d:5d:82:26:39:ec:1f:e8:f0:78:e5:3b:2b:32:54:
         d6:13:fc:1c:3b:18:0a:73:20:9d:24:14:75:3b:b6:cf:05:22:
         f2:94:4f:fd:ee:96:c5:82:31:a3:82:fd:45:f2:33:25:03:f0:
         0e:2c:52:83:16:c1:f9:2f:8f:fb:d6:e9:d4:26:d7:73:cd:cd:
         2b:36:3b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org