Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa
File:                     ej9a5PKRdnFGE82HPE4bVdrqkOA.roa (raw, json)
Hash identifier:          WOKcFcDW8DEHYgxRTZN6RI52DTioszAI69/Bg9w3K6w=
Subject key identifier:   7A:3F:5A:E4:F2:91:76:71:46:13:CD:87:3C:4E:1B:55:DA:EA:90:E0
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       018571F0E4A43F122A88D21176EB51C2A53A
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa
Signing time:             Mon 02 Jan 2023 10:04:50 +0000
ROA not before:           Mon 02 Jan 2023 10:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3302
IP address blocks:        185.169.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:f0:e4:a4:3f:12:2a:88:d2:11:76:eb:51:c2:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Jan  2 10:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a3f5ae4f29176714613cd873c4e1b55daea90e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:07:6c:63:90:d7:ed:f6:f1:5e:6b:23:d6:
                    72:9f:14:f1:96:06:87:99:02:fc:e5:62:89:11:ab:
                    72:e4:5b:92:09:da:db:96:95:da:2f:54:29:01:8e:
                    c6:ae:95:c1:e9:91:ad:1e:e6:71:87:fe:73:1d:f1:
                    ed:c2:20:d3:97:cc:5d:7f:1c:59:78:e7:37:43:f3:
                    18:e4:68:bf:d1:f5:22:93:72:94:a9:3d:ce:20:ce:
                    28:1a:31:2f:28:bb:52:b5:6a:1a:e6:24:9e:ac:fe:
                    5f:5d:2b:27:c1:e7:6e:f1:b6:9a:5b:f6:70:53:53:
                    50:e1:69:25:00:fe:75:42:e6:45:5b:5d:b1:e5:6a:
                    e8:f9:da:cb:de:ad:a1:20:94:05:3b:36:55:88:4a:
                    fd:12:e5:45:56:50:69:96:9c:2a:41:08:88:f7:f0:
                    02:ab:05:27:92:d5:cb:b0:d9:b9:69:77:ab:cb:06:
                    bd:38:4f:75:dd:28:d3:72:fc:0b:46:46:96:d7:72:
                    fd:a1:0c:ba:ef:f6:46:b7:6c:5a:cb:49:b9:1b:13:
                    43:9a:54:ba:dc:3d:c5:e4:64:94:f5:95:93:a6:f7:
                    69:b0:8a:82:d2:a6:5b:80:f7:27:d1:fd:2f:98:05:
                    25:df:8a:ac:a5:de:5c:40:3c:13:83:d0:00:10:98:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:5A:E4:F2:91:76:71:46:13:CD:87:3C:4E:1B:55:DA:EA:90:E0
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/ej9a5PKRdnFGE82HPE4bVdrqkOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:f6:ee:33:70:e6:00:ee:85:db:1f:24:75:6f:d4:06:6c:
         ba:8f:24:48:41:d4:76:db:32:e3:0a:ba:e0:3a:9c:c9:20:6b:
         b2:8f:9e:67:5d:6e:23:cd:9e:51:76:1e:51:2c:f7:65:63:80:
         41:db:bf:a3:a0:c6:99:f6:d8:89:a8:83:54:24:78:16:68:f2:
         a2:1c:bf:14:67:47:f7:be:28:94:24:39:92:32:32:b7:99:74:
         8e:ac:bf:1d:1e:05:29:3d:fd:dc:ed:d5:62:f7:f5:32:da:c1:
         35:34:a3:74:e7:8a:ad:de:3a:f9:fc:8e:a2:a2:2c:ee:9e:59:
         93:0b:54:4d:53:ea:4b:76:64:d6:30:af:88:9b:7d:c0:3b:cf:
         78:2d:e7:a0:17:05:36:86:42:3d:17:09:25:30:9f:ec:02:2c:
         78:9f:3b:59:25:12:b5:72:03:7d:73:a8:02:32:7f:8d:95:d5:
         d7:26:66:75:ea:22:e8:b7:7a:1e:ac:2e:bb:8f:68:15:55:68:
         80:0f:f8:98:0e:be:22:ff:44:92:3b:c8:12:cd:63:8d:3f:31:
         60:16:2e:20:a4:cc:d5:af:60:36:be:b0:73:eb:08:50:98:26:
         16:5c:fe:31:b4:cd:66:2a:a8:b4:f9:e4:57:8b:ff:fd:7d:4f:
         68:e5:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:29 2024 by rpki-client on console-fra.rpki-client.org