Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/eWoJplmfoqenuap0h_acoqHkOk4.roa
File:                     eWoJplmfoqenuap0h_acoqHkOk4.roa (raw, json)
Hash identifier:          f2qkaTLDoqMDIuglK4YafrEMNxf5j2WeyBrmkbRmatg=
Subject key identifier:   79:6A:09:A6:59:9F:A2:A7:A7:B9:AA:74:87:F6:9C:A2:A1:E4:3A:4E
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       018B6AF9500DC6FF08957AE1F5815BE69F12
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/eWoJplmfoqenuap0h_acoqHkOk4.roa
Signing time:             Thu 26 Oct 2023 07:53:25 +0000
ROA not before:           Thu 26 Oct 2023 07:53:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20756
IP address blocks:        81.92.90.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 26 Oct 2023 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:f9:50:0d:c6:ff:08:95:7a:e1:f5:81:5b:e6:9f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Oct 26 07:53:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=796a09a6599fa2a7a7b9aa7487f69ca2a1e43a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:09:e3:02:90:13:78:cf:32:83:16:47:22:
                    57:76:56:33:d9:86:2e:18:b4:59:78:39:81:b2:1d:
                    48:ae:2d:6d:d1:20:cb:b1:96:be:b2:6c:98:9a:a5:
                    5d:fd:64:f5:f8:54:2c:1c:ff:12:10:f1:26:f6:5a:
                    3e:b7:ea:55:ee:1d:0c:2a:21:d2:04:2b:9e:f4:89:
                    01:af:41:ad:0a:12:ad:bb:67:d4:07:f1:6c:82:22:
                    79:d0:b5:41:bb:1d:68:c0:bb:7a:f3:3d:d0:66:70:
                    fc:1c:a6:bb:72:36:37:df:08:59:4c:d9:e6:43:c1:
                    7e:4a:cf:22:0b:61:03:e7:bc:80:ed:3d:4b:f9:27:
                    12:64:9c:41:8e:5d:97:8f:d4:13:19:f6:44:8e:ef:
                    d1:d0:b3:f1:74:1b:f9:92:87:b3:02:ec:c4:8f:40:
                    7f:94:74:2e:16:e5:ef:91:e1:d9:62:df:44:2c:07:
                    07:fd:d9:d4:ee:4a:03:d1:f0:42:b2:6b:f7:09:b9:
                    d9:9c:26:0e:c6:38:58:f6:9e:61:7a:61:41:0c:68:
                    0b:1d:a7:38:f5:8c:02:bc:04:2c:25:f0:63:db:dc:
                    4d:26:c3:38:51:e7:cd:ba:31:96:b8:f8:30:00:8a:
                    89:f5:4c:01:eb:04:e5:0e:c4:80:f8:7a:2d:96:82:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:09:A6:59:9F:A2:A7:A7:B9:AA:74:87:F6:9C:A2:A1:E4:3A:4E
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/eWoJplmfoqenuap0h_acoqHkOk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.92.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:18:54:c3:d0:45:c9:57:fd:93:fc:40:63:d8:52:f6:a0:
         1e:2f:53:a2:6f:1a:57:f2:f7:99:a1:9c:26:e7:3e:0b:9c:26:
         ef:0c:bc:1a:35:e4:d3:79:c8:54:36:9a:3c:96:c2:ce:5b:18:
         8a:49:90:1b:50:2e:d7:29:77:f7:ce:cf:69:5a:68:0f:6d:02:
         c4:56:47:51:b9:91:97:4a:d1:49:a2:af:7b:67:b5:cb:c6:84:
         27:08:5b:5f:03:f3:e0:e6:2d:40:46:af:0b:b3:a8:c8:dc:d4:
         cb:20:44:dd:1d:96:a7:4d:19:9c:97:0f:4a:78:33:d3:d6:65:
         4a:7e:20:7c:1b:51:3f:03:a0:b0:3e:f4:e0:af:2a:b7:78:7e:
         b7:17:af:71:06:c1:6a:94:a4:96:fb:0e:b3:57:a4:c2:bf:dc:
         14:6c:bd:46:a5:dc:f0:73:60:a3:5c:da:fc:ff:03:fb:b5:c6:
         0a:6d:2f:09:d9:f3:66:ff:0a:e5:0b:c1:eb:30:73:9b:c5:34:
         8e:be:be:86:de:04:13:02:12:88:df:e8:00:91:4e:c3:63:ff:
         95:68:b0:65:77:b9:f4:8c:8d:7c:38:cb:d7:82:ba:38:d0:44:
         b3:4d:81:85:23:aa:fd:ab:c0:37:25:96:e4:a2:dd:1b:0a:93:
         1f:25:bb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org