Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/EVilFbFMRlW23_TzJ757-3T9qiw.roa
File:                     EVilFbFMRlW23_TzJ757-3T9qiw.roa (raw, json)
Hash identifier:          BD7xrLt2mugBrldW6WU7QAKxtreHuS96hcs8c0TRKIY=
Subject key identifier:   11:58:A5:15:B1:4C:46:55:B6:DF:F4:F3:27:BE:7B:FB:74:FD:AA:2C
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       018A1233E4BDB0F07092B7BEB6A521C9B4CA
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/EVilFbFMRlW23_TzJ757-3T9qiw.roa
Signing time:             Sun 20 Aug 2023 09:08:25 +0000
ROA not before:           Sun 20 Aug 2023 09:08:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202391
IP address blocks:        94.199.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:12:33:e4:bd:b0:f0:70:92:b7:be:b6:a5:21:c9:b4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: Aug 20 09:08:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1158a515b14c4655b6dff4f327be7bfb74fdaa2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:e3:0e:f6:33:c3:15:c0:fd:fc:b8:24:dc:
                    58:13:26:89:df:6f:2e:73:8e:b4:d3:99:b1:31:26:
                    6f:4f:7e:51:65:74:3f:30:96:a8:c0:f5:8b:4d:46:
                    c9:3c:76:1d:a7:c7:eb:f6:34:f5:f3:4a:72:a9:af:
                    77:b5:6b:0c:c3:ea:f9:e3:58:bc:58:58:70:71:ef:
                    a1:48:db:eb:cc:61:f9:ed:91:10:2b:14:a1:d4:92:
                    9c:ae:a6:cc:d7:83:32:90:25:b4:42:e6:09:f4:53:
                    e4:fd:16:f9:84:cb:fd:21:14:c4:a1:3f:c1:4c:99:
                    c9:9e:8d:c1:9e:99:8f:61:39:e9:18:b8:90:9a:66:
                    14:94:97:6e:8d:b3:a5:ef:5a:a8:d3:28:17:ed:4e:
                    49:bf:59:17:da:99:e9:9e:ae:13:9d:39:51:76:aa:
                    75:ee:2c:3e:c8:31:20:8c:ef:a9:da:13:38:88:8e:
                    3d:11:d8:3b:e6:1f:b0:5b:e2:21:41:c7:97:46:b7:
                    0d:da:ed:f7:3b:3a:a9:9c:17:7e:9e:dc:91:b6:d0:
                    68:44:1e:6e:f7:9f:3d:2c:ae:12:e9:9b:a7:e2:b1:
                    c4:f8:6c:c0:95:a5:35:61:8e:12:14:0e:81:4a:4c:
                    24:33:fd:2f:fa:26:e6:7e:ed:ce:01:89:c3:4c:96:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:58:A5:15:B1:4C:46:55:B6:DF:F4:F3:27:BE:7B:FB:74:FD:AA:2C
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/EVilFbFMRlW23_TzJ757-3T9qiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.199.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:74:e4:f5:de:74:e8:23:71:76:3f:c2:65:d9:73:39:7c:
         7a:09:5c:e5:3c:5a:47:89:ff:f5:7a:57:37:d6:71:30:03:4d:
         ea:68:93:c4:a3:6a:f4:c0:d4:16:d4:81:ae:25:51:01:ab:c0:
         ac:67:20:22:2b:54:4d:a0:6d:d0:2b:47:5f:e5:ff:df:f3:9a:
         bb:e7:78:08:1b:e3:25:47:1b:5b:b0:13:0d:ad:bb:30:0a:01:
         57:c3:b5:6a:a9:8c:bb:5c:28:11:5a:67:b3:a9:78:9d:24:7d:
         5c:69:6f:85:b1:67:17:86:10:c7:7f:36:67:87:fa:11:ec:41:
         e2:d4:4e:71:96:cf:75:66:5f:be:3a:96:3f:17:16:fa:d9:ca:
         26:8a:07:34:ef:9d:90:c9:da:09:ea:cf:ef:a1:b5:b0:1e:a3:
         db:8c:2f:a7:99:ba:21:2b:ea:54:12:0e:4e:9a:42:ad:08:6b:
         9a:31:24:27:86:37:a8:84:cb:13:06:75:9f:d3:0d:9a:da:92:
         49:15:e1:cb:60:f6:0a:bc:f7:db:42:d7:36:fd:5c:bc:48:74:
         2d:83:50:09:35:c7:f3:9c:be:72:7e:cd:a2:72:f5:db:4d:a8:
         00:ee:7f:41:f9:0b:03:b8:c8:5e:40:06:36:82:96:ab:b7:3f:
         20:0a:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org