Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa
File:                     EGAuphPvCzbEYZzt_JGqAEsms6Q.roa (raw, json)
Hash identifier:          Ck1aIlHHIQbhy5DIlVBOqu/3Z0wyyE8hA346jYqMZOA=
Subject key identifier:   10:60:2E:A6:13:EF:0B:36:C4:61:9C:ED:FC:91:AA:00:4B:26:B3:A4
Certificate issuer:       /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial:       01856E820373359FD6CDEC0994B2908B0D04
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa
Signing time:             Sun 01 Jan 2023 18:04:52 +0000
ROA not before:           Sun 01 Jan 2023 18:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50414
IP address blocks:        212.46.55.0/24 maxlen: 24
                          2a12:bc0:2::/48 maxlen: 48
                          2a12:bc0::/48 maxlen: 48
                          2a12:bc0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:82:03:73:35:9f:d6:cd:ec:09:94:b2:90:8b:0d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
        Validity
            Not Before: Jan  1 18:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10602ea613ef0b36c4619cedfc91aa004b26b3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:4e:ef:99:98:c5:00:73:9f:8b:25:af:9a:
                    85:a2:46:85:1f:21:d8:5c:1a:10:4e:7c:72:3a:f1:
                    b9:6d:45:9a:3c:0b:b7:05:b5:e1:26:6b:6c:34:de:
                    6e:b5:9f:d9:da:64:f9:0f:5d:91:5a:1b:c5:9d:aa:
                    e4:ad:30:13:a3:1e:fe:7a:95:b3:76:4b:4a:34:b4:
                    15:8d:0c:b2:5f:0b:a2:ef:cb:55:ab:93:bf:6f:60:
                    4e:43:e0:21:38:04:38:09:80:b7:7f:d8:c5:9c:0c:
                    61:d0:72:6e:16:78:73:a1:1a:50:32:76:7d:b9:74:
                    68:88:ba:a8:c9:13:02:cc:f3:45:ae:4e:43:19:1a:
                    a9:fd:44:60:d1:eb:ef:26:fe:e5:6f:e8:f1:cb:8a:
                    23:49:30:3a:c3:4d:ce:b5:c1:20:c5:95:1c:9e:46:
                    b3:dc:64:71:1f:a8:1a:67:56:32:9b:c2:9c:2f:0c:
                    78:ac:58:71:ba:e6:c4:32:48:b8:0a:48:bb:79:1b:
                    96:2c:63:90:03:49:5a:3d:24:df:fa:29:05:82:f6:
                    19:90:be:27:60:e0:e3:52:7a:90:d3:9f:5f:0e:09:
                    ce:3e:72:90:27:96:dc:64:d9:08:84:c3:53:b0:71:
                    d8:66:e7:3e:6d:8f:e7:c0:ee:42:d9:e2:44:45:fa:
                    57:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:2E:A6:13:EF:0B:36:C4:61:9C:ED:FC:91:AA:00:4B:26:B3:A4
            X509v3 Authority Key Identifier:
                keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/EGAuphPvCzbEYZzt_JGqAEsms6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.55.0/24
                IPv6:
                  2a12:bc0::-2a12:bc0:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         41:71:a5:9d:3e:42:e4:32:05:a1:8c:0a:a1:31:15:cc:98:8f:
         5f:0f:86:12:63:27:9b:12:c5:6e:8b:7e:18:bb:88:97:6c:f2:
         38:76:bf:da:1d:3a:60:bd:2e:03:9e:11:e3:c6:e6:a8:03:01:
         0a:be:9b:af:1b:4f:70:05:71:cd:f6:29:1b:4f:5d:1e:aa:d4:
         21:9f:95:b1:ef:d6:dd:70:aa:51:9f:3d:f4:fa:b7:14:30:69:
         42:ad:33:be:7b:18:7a:a7:e6:9c:88:c5:44:df:ed:34:3e:4d:
         49:28:76:9c:66:64:13:6b:6a:0a:ee:d2:df:cb:21:c9:de:67:
         b4:72:1c:4b:3f:f2:fb:32:a9:f5:87:90:7f:52:f7:21:2b:7f:
         6e:60:14:fa:65:5e:e0:41:25:8a:f8:2c:78:ce:77:a3:9d:ae:
         fe:51:5e:70:59:21:32:bf:55:7e:74:af:3a:12:46:ae:14:46:
         8d:e2:49:1c:5a:63:de:16:fb:a6:70:5a:19:4f:90:25:55:db:
         a3:57:e5:08:7d:0c:52:49:52:57:9a:e8:a6:ad:73:8b:51:96:
         76:bf:a8:fa:d5:cf:89:6a:e9:a0:3c:70:cd:9b:50:da:00:c2:
         f3:f5:2b:29:65:09:df:7a:67:ee:a1:75:25:97:b8:7f:d6:6a:
         b5:d5:b9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:15 2024 by rpki-client on console-ams.rpki-client.org