Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/ED_eyrwMDWpY9vETiK7ooV8X4bQ.roa
File:                     ED_eyrwMDWpY9vETiK7ooV8X4bQ.roa (raw, json)
Hash identifier:          7MYATbyjiWjqmRnR3DQaqfX+K6R8krNpEDRm/vcumfs=
Subject key identifier:   10:3F:DE:CA:BC:0C:0D:6A:58:F6:F1:13:88:AE:E8:A1:5F:17:E1:B4
Certificate issuer:       /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial:       018BDC251C76C1A6D9564A855637CDBA89E2
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/ED_eyrwMDWpY9vETiK7ooV8X4bQ.roa
Signing time:             Fri 17 Nov 2023 07:18:21 +0000
ROA not before:           Fri 17 Nov 2023 07:18:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213296
IP address blocks:        195.5.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:25:1c:76:c1:a6:d9:56:4a:85:56:37:cd:ba:89:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
        Validity
            Not Before: Nov 17 07:18:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=103fdecabc0c0d6a58f6f11388aee8a15f17e1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:29:c9:55:e4:c3:6b:96:2b:dd:9b:28:90:
                    85:29:6e:40:42:84:11:c7:fa:a9:99:15:1e:de:b8:
                    fb:45:39:93:2e:1d:d7:00:fc:53:f7:01:0c:84:7c:
                    fd:3b:e4:32:e9:b3:34:27:fd:7b:0e:1d:ab:08:c1:
                    da:b2:f0:27:54:2a:dd:bb:c2:d0:f3:e4:ab:05:cb:
                    d9:cd:ad:7d:ce:32:7f:22:3b:8a:46:b9:92:2e:d3:
                    6f:68:f0:96:36:58:8d:1b:8d:90:64:c6:2a:a1:25:
                    e7:4c:57:1d:df:7e:a7:31:a5:10:e0:9b:95:e7:1e:
                    cc:5f:dd:1f:23:68:05:26:f0:2d:27:1f:91:c5:00:
                    d3:2a:5e:d4:ee:2e:48:ab:da:50:7c:fd:01:6c:51:
                    a0:21:ba:02:a2:bc:9e:a6:84:bb:eb:ef:e7:63:3a:
                    23:0d:5e:21:b3:7c:af:3a:0e:4a:b9:36:e0:74:2c:
                    53:1c:80:97:62:da:37:fc:3d:df:27:8d:9d:ab:02:
                    90:2d:53:2b:cf:e7:2a:82:2a:bc:77:c4:50:dd:12:
                    4f:ff:35:9e:9e:e6:fc:c3:85:fa:15:c2:e4:51:ec:
                    3f:14:94:86:3b:e3:cf:61:72:59:18:c2:63:95:34:
                    a2:1f:88:4f:63:59:c5:36:a8:25:56:f3:90:5f:f2:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3F:DE:CA:BC:0C:0D:6A:58:F6:F1:13:88:AE:E8:A1:5F:17:E1:B4
            X509v3 Authority Key Identifier:
                keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/ED_eyrwMDWpY9vETiK7ooV8X4bQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:df:f3:ba:f0:d0:e8:1b:ad:8f:4d:d1:25:5f:d9:53:34:00:
         b8:60:1c:38:e7:54:38:f3:9d:7d:ce:9c:48:89:08:4c:49:5d:
         be:ec:78:74:c6:6c:f1:84:f6:33:5b:0b:3f:03:15:fe:78:da:
         0b:38:25:33:1c:17:63:7c:66:83:bc:91:bc:5e:e9:ed:b8:1f:
         80:10:b8:15:4c:d0:00:23:9e:4c:18:3f:57:a7:cf:6b:e7:d5:
         c6:46:de:15:65:91:d1:c8:19:5b:87:01:71:00:6f:70:03:bb:
         90:4b:58:28:b7:5e:db:13:e0:b5:15:7b:46:f2:db:3b:8a:28:
         21:43:fd:ac:28:1f:bc:8d:60:85:08:3a:7f:c0:05:bb:3e:68:
         e2:22:89:df:de:0b:c8:89:a6:9a:aa:ea:f3:f7:15:2e:9f:04:
         40:66:9d:7f:fe:06:57:96:5c:3e:44:30:1f:e7:1e:38:f2:a0:
         bb:59:ae:11:94:44:da:d7:82:f1:20:d1:10:7d:7b:1d:5e:73:
         e1:ab:df:2f:be:90:7a:2e:f5:0f:cd:88:1e:56:55:c7:73:f6:
         79:3e:1c:27:05:31:aa:90:9d:02:91:0e:7c:23:85:41:6a:b5:
         55:02:c1:f9:77:70:c5:c6:2e:73:15:af:25:8c:fd:b5:d2:f8:
         80:fa:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:36 2024 by rpki-client on console-ams.rpki-client.org