Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/eLeND3O0-Gaw_ro9ZLSquoHtpLI.roa
File:                     eLeND3O0-Gaw_ro9ZLSquoHtpLI.roa (raw, json)
Hash identifier:          d7Zw7TzzlFeUX1zZb5vyQSEMbOxRiSt+3PPaY6PeuYc=
Subject key identifier:   78:B7:8D:0F:73:B4:F8:66:B0:FE:BA:3D:64:B4:AA:BA:81:ED:A4:B2
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       01856F42AAD92EF831E8EE39B22A19FF195D
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/eLeND3O0-Gaw_ro9ZLSquoHtpLI.roa
Signing time:             Sun 01 Jan 2023 21:35:18 +0000
ROA not before:           Sun 01 Jan 2023 21:35:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207207
IP address blocks:        185.32.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:aa:d9:2e:f8:31:e8:ee:39:b2:2a:19:ff:19:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jan  1 21:35:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b78d0f73b4f866b0feba3d64b4aaba81eda4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:20:0b:01:02:20:36:f5:97:28:b5:3a:02:
                    b2:ab:b1:4e:d9:df:da:19:1c:19:e0:23:86:a9:4b:
                    1f:e1:4e:f8:8a:ca:e2:8b:6d:59:c0:2b:76:05:0a:
                    c7:6c:9f:44:9c:21:0f:f4:fe:fb:2f:30:2d:79:32:
                    38:5e:c6:10:18:46:d3:12:15:b3:59:d4:69:35:d2:
                    56:0d:0a:9f:0a:96:d9:c6:7c:29:35:3e:64:ba:e1:
                    65:e8:be:4e:7f:58:cc:35:a0:c4:ad:78:fe:4a:d6:
                    79:86:ba:db:26:70:2c:30:59:e1:5b:8e:b6:c7:d2:
                    24:65:f1:c0:54:a8:b4:de:c9:4e:79:6b:8b:f8:dc:
                    0a:0f:13:d0:d0:6f:43:39:18:a2:b3:5b:e6:e5:63:
                    e6:31:5c:9d:0e:6a:31:09:2c:1d:39:2c:41:36:31:
                    61:67:37:e2:71:eb:a6:3d:23:10:ed:80:5d:c6:35:
                    94:a0:e3:39:9c:4b:5d:0a:a0:58:93:bc:da:21:28:
                    57:be:2d:35:f7:cf:86:04:9c:a9:c9:19:ba:95:a9:
                    4f:d1:81:7c:9c:ee:eb:36:76:73:37:ba:0d:85:d4:
                    22:b2:7e:91:b3:bc:08:80:fb:45:75:2e:5b:58:c9:
                    3f:18:fe:32:a1:29:b5:7d:55:98:11:29:70:49:97:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B7:8D:0F:73:B4:F8:66:B0:FE:BA:3D:64:B4:AA:BA:81:ED:A4:B2
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/eLeND3O0-Gaw_ro9ZLSquoHtpLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:aa:59:8f:8b:f6:c1:dc:84:02:e6:09:cf:35:de:67:1e:59:
         92:cb:80:15:d4:e3:33:e9:27:1b:89:3a:0e:70:35:85:82:a4:
         e3:8e:a6:e8:be:36:30:21:12:ff:8f:9e:a7:7c:b8:1a:20:bd:
         4b:db:63:ec:b3:80:23:99:3f:d5:a1:99:84:b4:d3:ec:37:de:
         07:32:59:aa:7a:32:f4:4b:39:ab:dd:15:79:9c:39:94:55:ab:
         f1:a7:b7:8a:47:e5:2b:2a:9d:da:57:56:d0:10:0f:57:de:32:
         47:c5:e8:ff:b5:16:60:3c:b0:0c:69:a5:e3:c8:2d:08:d5:44:
         ee:79:3c:84:b3:b5:b7:5f:8e:0e:1e:4f:30:77:29:0f:ed:f3:
         a5:06:09:d2:bb:9d:a5:4d:63:c2:9f:75:47:2b:bc:af:81:81:
         c1:7a:f9:4d:fa:69:f9:f9:7e:7b:ae:95:c8:c9:78:d4:d4:c9:
         bf:2c:1c:05:b8:f7:2f:e8:52:78:73:5b:4b:dc:47:cc:c4:6c:
         e3:cf:75:08:a6:09:0e:ea:4a:2d:56:50:4d:c2:45:ef:50:77:
         2a:b4:31:dd:a3:be:02:53:be:1c:91:1a:26:61:27:62:d4:4d:
         1e:df:dd:c3:f5:60:e8:5f:3a:74:02:6d:a9:f8:6e:4f:e9:7d:
         17:f6:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org