Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/EE1RxYLLMRhfRB85oIbEBNzGcxU.roa
File:                     EE1RxYLLMRhfRB85oIbEBNzGcxU.roa (raw, json)
Hash identifier:          tUulB9YzIzg73+UacnM8zeOtTLiSsas8Og3Mjm2ZVtg=
Subject key identifier:   10:4D:51:C5:82:CB:31:18:5F:44:1F:39:A0:86:C4:04:DC:C6:73:15
Certificate issuer:       /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial:       01856EAFEB3F16E2701716F719525547D148
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/EE1RxYLLMRhfRB85oIbEBNzGcxU.roa
Signing time:             Sun 01 Jan 2023 18:55:00 +0000
ROA not before:           Sun 01 Jan 2023 18:55:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34984
IP address blocks:        88.214.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:af:eb:3f:16:e2:70:17:16:f7:19:52:55:47:d1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
        Validity
            Not Before: Jan  1 18:55:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=104d51c582cb31185f441f39a086c404dcc67315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:c4:db:c1:3d:4e:f8:c1:a7:48:23:34:71:
                    3f:93:8e:ae:b7:65:6d:b9:c2:df:2d:cd:73:1b:f7:
                    86:20:e2:9e:81:bf:e7:45:80:6a:73:58:5f:7b:50:
                    57:ae:b4:c7:c8:93:07:28:39:e6:ee:2a:f4:5a:1b:
                    59:8e:e9:5a:50:1c:22:c7:18:1c:99:49:64:f9:a3:
                    83:67:53:ee:8f:ed:7e:b2:62:84:df:14:b0:e1:0d:
                    12:46:10:3d:3c:2f:3a:ff:a1:eb:9c:9a:b4:16:ee:
                    c6:32:3b:f8:d6:5c:01:70:6d:9b:2f:59:46:8d:69:
                    23:33:dd:14:d8:fc:62:ff:64:b6:ea:33:10:1d:ae:
                    a6:5c:9d:9b:6a:ed:d1:82:1c:c3:7d:e6:0f:14:ea:
                    24:d1:cb:ca:d8:5a:ee:3a:9b:63:32:46:f1:ac:f3:
                    b7:ce:81:eb:5b:5d:9d:91:b0:48:f0:23:df:c8:80:
                    07:03:3f:a8:e7:dd:26:09:14:25:f2:21:3e:0a:f2:
                    d7:4f:f1:77:11:88:e7:43:f3:ec:5c:76:b0:d3:d4:
                    e1:f7:6e:1d:37:03:a3:19:f3:c4:0e:63:41:d5:fd:
                    af:12:43:1d:68:63:93:c2:2b:fb:6f:e4:a2:a0:7f:
                    e3:33:8a:a1:8d:0d:6c:d5:94:32:97:4e:fd:20:27:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:51:C5:82:CB:31:18:5F:44:1F:39:A0:86:C4:04:DC:C6:73:15
            X509v3 Authority Key Identifier:
                keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/EE1RxYLLMRhfRB85oIbEBNzGcxU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:da:98:40:0b:58:67:af:ad:45:d1:65:75:65:ff:0b:4e:
         9d:a1:1a:ef:cd:5d:fb:b6:93:0a:58:04:68:ce:e2:30:72:73:
         c6:d4:2f:17:3a:3e:fe:26:1b:fe:9d:ca:e1:60:03:03:96:58:
         4b:66:29:ce:27:d8:95:3c:9f:33:13:73:2f:f3:38:f6:df:ea:
         0e:b3:dc:6d:9d:ea:eb:f7:a2:31:11:6e:d2:37:b5:fc:8d:68:
         3b:1d:f7:f6:08:52:ed:20:29:64:19:48:ce:73:9c:85:ae:0b:
         8d:04:64:13:0d:63:10:92:71:35:04:6d:64:c6:3d:dd:28:82:
         56:31:34:18:bf:a0:5f:28:08:53:cc:f6:38:cc:8d:3c:d6:f6:
         6b:c1:62:68:e8:81:a1:05:e7:02:c0:6a:a7:a8:40:f8:ef:ab:
         f7:7d:f4:5f:32:7c:d8:9f:cf:d8:ba:93:8d:3d:cc:67:84:22:
         a8:59:d6:a7:a7:46:d6:7e:c4:e2:1a:5c:0f:4b:cd:a1:50:6e:
         d0:67:b4:1e:59:6f:30:e5:7d:75:ae:4b:9d:90:67:1c:4d:04:
         d4:24:ef:c9:67:29:35:c8:00:ce:14:9c:10:fb:5c:49:a6:e1:
         3a:82:33:d2:fd:0a:0d:ec:96:25:d4:0a:e0:d2:a8:4f:9c:2c:
         03:cf:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org