Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ejLazezsdaiRIyFmHzihC2lRBUc.roa
File:                     ejLazezsdaiRIyFmHzihC2lRBUc.roa (raw, json)
Hash identifier:          DKquyuXMF3LCKRsvznmCD/NvQTIw+9/1C/DEClIXZEQ=
Subject key identifier:   7A:32:DA:CD:EC:EC:75:A8:91:23:21:66:1F:38:A1:0B:69:51:05:47
Certificate issuer:       /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial:       01907493739D0F4639553B844D9F9E56FD23
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ejLazezsdaiRIyFmHzihC2lRBUc.roa
Signing time:             Tue 02 Jul 2024 17:52:18 +0000
ROA not before:           Tue 02 Jul 2024 17:52:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        141.193.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 22:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:93:73:9d:0f:46:39:55:3b:84:4d:9f:9e:56:fd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
        Validity
            Not Before: Jul  2 17:52:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a32dacdecec75a8912321661f38a10b69510547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:9e:b9:b5:55:e0:f8:dd:24:8b:4d:b3:28:
                    cf:02:4f:cb:5d:c5:10:de:58:a0:45:1f:88:0c:53:
                    c2:3c:bd:51:b8:4a:21:4f:16:bf:12:8b:fe:d6:2e:
                    ed:16:2e:5b:62:de:41:8e:e1:46:7c:58:13:65:ec:
                    40:8b:00:de:5c:8e:14:90:16:17:c2:44:35:ed:a6:
                    bd:00:24:b2:4e:84:ce:d3:49:c4:92:23:ec:55:8a:
                    58:ac:7e:50:de:fe:84:2d:37:f3:a9:ca:70:42:f7:
                    db:39:bc:d4:81:21:0c:91:f8:1e:68:59:66:1f:6f:
                    35:6b:2c:a4:ea:04:ae:b2:18:cb:53:1d:00:00:34:
                    c7:01:3a:05:a8:f5:74:bc:85:d1:97:0f:94:bf:44:
                    2e:22:fa:d6:91:99:f3:8e:cc:6c:6e:9b:5d:ae:07:
                    1f:17:82:8f:76:15:ca:7d:e0:4c:c6:05:05:3e:27:
                    b4:7a:51:c1:6c:65:7d:8d:bf:b8:3c:8b:66:7e:1a:
                    9b:9b:88:3b:90:a7:04:f7:e5:17:fd:f4:38:3a:88:
                    e3:92:fc:10:c7:f1:50:48:1b:94:5c:41:71:bc:76:
                    da:17:5f:df:1a:55:38:2c:2d:46:f8:8d:bc:b4:9c:
                    dc:ab:0d:11:bd:1e:b9:38:4b:ae:51:77:27:6c:a2:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:32:DA:CD:EC:EC:75:A8:91:23:21:66:1F:38:A1:0B:69:51:05:47
            X509v3 Authority Key Identifier:
                keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/ejLazezsdaiRIyFmHzihC2lRBUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a9:7e:2c:77:55:ea:25:41:80:cf:db:88:4f:4d:52:b4:b8:
         a4:6d:ec:27:19:a8:fd:40:dd:5c:df:b4:e1:43:13:54:08:ba:
         c5:41:9c:0c:36:88:e6:08:10:6b:5b:ba:43:46:e4:68:e8:00:
         df:e0:d7:32:cf:8d:10:73:a8:99:f5:24:7b:fd:10:72:ea:c9:
         f8:93:1e:1e:44:88:3a:81:15:d7:e9:0c:bc:b1:a6:e1:07:a6:
         f2:3e:80:86:b4:65:01:eb:41:66:c7:39:05:d9:a1:61:fe:a8:
         a6:0b:aa:fd:96:58:42:71:d8:74:54:ea:81:6d:1b:32:4c:fc:
         15:66:48:00:2c:e9:18:1f:30:6a:4b:4f:cb:45:f5:00:71:d7:
         31:40:75:97:67:75:93:78:82:3c:f6:dd:84:ce:8a:33:b0:7d:
         8a:64:1b:52:8f:90:38:60:18:70:40:e7:22:f9:b2:3b:27:f9:
         08:f2:cd:71:7d:07:7b:a2:3b:e2:eb:4a:d4:b0:2d:39:3b:8d:
         b4:93:d3:78:6a:6b:0a:ac:72:48:bf:7f:37:4f:a8:c6:81:57:
         00:c3:c0:24:c5:d3:5c:b0:7c:a9:08:db:1d:c8:80:0b:5e:8b:
         c4:36:1e:f3:66:bf:9f:b9:b6:44:a4:1a:4c:12:e5:93:ae:17:
         63:8f:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 00:50:57 2024 by rpki-client on console-fra.rpki-client.org