Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EL7RgAKLUkx8T3YRghJU9CAdS1M.roa
File:                     EL7RgAKLUkx8T3YRghJU9CAdS1M.roa (raw, json)
Hash identifier:          EDGHs3kD9tZvrVODtlBtM+fCeoBGs8HNn4IUE83s4Qo=
Subject key identifier:   10:BE:D1:80:02:8B:52:4C:7C:4F:76:11:82:12:54:F4:20:1D:4B:53
Certificate issuer:       /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial:       01856F0B623510423DB831E235AB0193E19E
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EL7RgAKLUkx8T3YRghJU9CAdS1M.roa
Signing time:             Sun 01 Jan 2023 20:34:55 +0000
ROA not before:           Sun 01 Jan 2023 20:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210655
IP address blocks:        185.130.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:0b:62:35:10:42:3d:b8:31:e2:35:ab:01:93:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
        Validity
            Not Before: Jan  1 20:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10bed180028b524c7c4f7611821254f4201d4b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:ef:7f:09:06:8c:64:5a:d6:58:74:af:6c:
                    f6:f3:7b:99:2f:43:60:5f:6e:d0:91:2a:95:3d:29:
                    65:4c:43:af:4e:7b:56:1e:62:ef:12:8d:72:d5:ca:
                    e8:db:8a:a5:aa:2c:7f:0a:23:2e:78:71:0e:45:76:
                    45:ee:af:eb:3e:56:b4:14:09:1a:24:1f:bb:e9:0f:
                    89:cd:1f:36:88:20:a9:aa:81:dc:6e:f3:21:d0:0d:
                    73:72:5f:5d:05:be:0d:49:13:6f:9c:42:be:4a:fa:
                    fd:81:70:6f:2c:0a:47:4c:1d:d5:93:80:f6:5a:fa:
                    92:94:53:ff:85:66:67:1e:f3:cc:e6:fa:d9:96:95:
                    ee:1f:78:04:28:a4:55:03:fd:32:13:46:f8:37:aa:
                    7d:81:1c:b7:7a:ab:79:7f:89:74:fc:88:83:7f:28:
                    4f:0f:b9:83:0f:ff:d0:50:cc:fc:4f:fc:a0:dd:f3:
                    13:43:46:d7:a0:6d:b0:bf:4e:18:1d:e1:68:ff:fb:
                    9a:8b:c3:76:c7:fd:6c:9c:db:29:21:a4:fd:82:e2:
                    1e:e0:d2:bf:bd:d3:eb:73:27:ec:bb:d7:63:97:52:
                    92:4f:e5:b6:e0:8a:fa:a2:20:39:e2:f6:e2:69:12:
                    63:b6:68:c0:96:e8:31:78:6c:eb:29:9d:32:de:89:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:D1:80:02:8B:52:4C:7C:4F:76:11:82:12:54:F4:20:1D:4B:53
            X509v3 Authority Key Identifier:
                keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/EL7RgAKLUkx8T3YRghJU9CAdS1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:97:b9:4b:b6:e4:29:2f:3c:7e:a3:b9:7e:55:56:0b:e0:93:
         a0:17:6d:f4:a3:d1:27:a3:63:9d:2b:56:d6:43:f8:71:60:9f:
         14:dc:03:1c:25:28:b4:33:74:4e:19:89:31:07:38:a3:30:de:
         23:26:be:6f:b3:dc:b7:9a:22:00:e1:af:bb:c6:74:15:26:77:
         b2:bb:29:1f:18:b0:1e:0e:fb:6a:09:e8:36:af:6f:c2:72:5b:
         66:72:4c:86:f7:81:c8:44:dc:d3:3b:bc:70:28:05:6f:28:43:
         80:98:5b:f9:00:3f:08:d3:bb:c8:c2:9a:5f:7c:dd:df:55:c5:
         22:8d:9b:ec:80:c0:6e:e9:85:41:21:ce:70:5a:d8:1f:d0:be:
         74:9b:2d:61:da:e9:20:c2:40:cb:d2:26:37:85:1e:c8:01:43:
         2b:b3:5b:e5:1d:4b:b2:05:8c:56:ba:69:96:05:fb:ab:7c:9d:
         4a:c5:56:a7:ae:39:e9:a6:3b:cf:c2:da:1f:01:78:7f:08:de:
         f7:3b:25:86:8b:a0:55:03:33:76:2b:bb:e6:9d:d0:3c:b2:24:
         8f:91:76:5d:ee:6e:be:92:ab:e1:f7:fa:34:ec:35:23:4a:98:
         3f:8f:5d:eb:2d:33:ff:ff:ac:bd:4e:00:19:d1:61:4f:5c:07:
         f6:73:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org