Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/EdUII8oH0n-ogDCae9Gx6jogCI4.roa
File:                     EdUII8oH0n-ogDCae9Gx6jogCI4.roa (raw, json)
Hash identifier:          +sL7ZqS52mavNMhEkL2c0kTSEHTkMUKlJuERrK7lqxI=
Subject key identifier:   11:D5:08:23:CA:07:D2:7F:A8:80:30:9A:7B:D1:B1:EA:3A:20:08:8E
Certificate issuer:       /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial:       018668CF3BDB35CB364B1B32B7324A018310
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/EdUII8oH0n-ogDCae9Gx6jogCI4.roa
Signing time:             Sun 19 Feb 2023 08:34:17 +0000
ROA not before:           Sun 19 Feb 2023 08:34:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        193.176.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:68:cf:3b:db:35:cb:36:4b:1b:32:b7:32:4a:01:83:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
        Validity
            Not Before: Feb 19 08:34:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11d50823ca07d27fa880309a7bd1b1ea3a20088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:ac:28:cb:14:a2:6e:e0:eb:a9:83:84:26:
                    de:b3:ca:ea:01:ab:fe:a4:92:0e:0c:0f:63:42:11:
                    37:e0:c8:f6:eb:ca:3f:97:8e:cb:be:8f:8c:a5:d2:
                    da:d5:9d:0b:2d:20:71:4b:26:75:cf:7f:74:67:e2:
                    33:64:49:4b:93:1a:d2:1d:70:6b:22:6b:9f:02:be:
                    04:58:e6:b1:bd:96:bd:a6:d9:e9:81:a7:19:75:81:
                    e6:ec:58:7a:8a:a6:3f:6b:97:4e:cb:2f:4d:b5:98:
                    ac:75:62:05:1f:64:93:e1:db:14:60:2a:57:56:50:
                    b3:b2:86:3d:76:40:45:5e:e9:d9:4c:f1:3c:39:6b:
                    ee:40:ef:9b:e6:7b:88:66:cb:3b:aa:21:06:8e:d3:
                    2e:66:90:d3:e3:2d:0e:92:03:53:0e:6d:a6:dc:64:
                    42:03:23:60:2e:5b:a9:29:22:2d:40:df:bd:6b:6e:
                    72:5a:11:2e:52:cc:5b:05:ef:8b:fc:aa:3a:dd:d4:
                    03:58:5d:ee:46:a5:c6:97:b3:fb:3a:9a:49:83:4f:
                    18:76:1d:e3:f3:94:6e:bd:9b:34:60:c4:be:c9:8a:
                    a4:a6:d4:40:db:41:cf:bc:9d:bd:fe:9f:ee:96:14:
                    a3:2f:d7:d2:30:1e:31:67:37:a1:88:7c:75:95:e7:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:08:23:CA:07:D2:7F:A8:80:30:9A:7B:D1:B1:EA:3A:20:08:8E
            X509v3 Authority Key Identifier:
                keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/EdUII8oH0n-ogDCae9Gx6jogCI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:9b:33:5d:53:a3:e8:b9:b5:eb:21:28:83:2c:4b:98:ea:47:
         08:f6:25:c8:5d:16:f5:eb:25:78:7a:aa:35:26:b2:a2:22:eb:
         9c:37:d5:cc:c2:b0:2d:30:bf:23:e8:58:9c:de:89:b9:ee:dc:
         9e:cc:36:bd:24:b5:41:68:d3:6d:cd:98:ea:07:ea:de:05:bf:
         1d:28:e1:72:c2:d2:e1:1f:c3:87:11:f8:22:01:59:9a:f1:b8:
         80:2b:cf:71:ff:db:83:76:01:19:32:05:8a:5d:5e:8f:6d:7d:
         b8:b8:ec:fd:c4:21:ec:b8:2a:94:01:aa:72:06:16:86:c1:10:
         88:95:b3:23:d7:31:49:bc:b7:6f:51:b0:66:8a:7a:79:e1:aa:
         7a:ee:88:3a:fc:4f:d1:c7:0b:95:56:1f:31:a3:48:1e:8f:bc:
         73:49:7c:2f:09:13:5e:70:8e:81:e7:7e:c4:27:35:d4:64:eb:
         28:7f:fe:10:41:66:05:26:ce:07:a5:17:68:05:af:e6:08:52:
         ff:cf:2b:96:7a:29:55:9e:18:db:5d:4f:dd:59:d1:72:98:d1:
         86:4a:a0:ef:06:5e:4a:28:28:c1:12:f7:1b:2b:8b:b8:5b:a7:
         9d:37:6a:5f:39:da:97:18:1f:a0:b0:c2:be:2e:45:66:7a:22:
         61:fd:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:24 2024 by rpki-client on console-ams.rpki-client.org