Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQE3_c5tNpXSVjoBBY8XZnga-Gc.roa
File:                     EQE3_c5tNpXSVjoBBY8XZnga-Gc.roa (raw, json)
Hash identifier:          K1BuJRJUa5razGWtd67irvQs9SLM/zmDHz00K0paqug=
Subject key identifier:   11:01:37:FD:CE:6D:36:95:D2:56:3A:01:05:8F:17:66:78:1A:F8:67
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       018DAC28F686212B079B73202FA999A06C67
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQE3_c5tNpXSVjoBBY8XZnga-Gc.roa
Signing time:             Thu 15 Feb 2024 09:46:22 +0000
ROA not before:           Thu 15 Feb 2024 09:46:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216058
IP address blocks:        194.76.172.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Mar 2024 18:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:28:f6:86:21:2b:07:9b:73:20:2f:a9:99:a0:6c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Feb 15 09:46:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=110137fdce6d3695d2563a01058f1766781af867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3f:8a:86:f9:cc:de:9b:01:7c:1c:f5:20:8f:
                    8d:05:04:9e:5e:2b:69:ab:d0:69:d6:03:74:0e:11:
                    c2:d4:f9:bf:d3:06:77:7d:d7:3f:82:79:3d:82:57:
                    89:c6:f6:c1:8f:c8:07:57:b1:55:3b:d6:42:c1:10:
                    de:8d:e3:0e:aa:5c:3a:5e:e7:2e:7e:eb:f0:14:52:
                    a7:73:7c:37:38:aa:6f:54:49:f6:f2:75:a6:63:07:
                    78:0e:60:c4:ea:41:d6:d0:b1:0e:1b:de:1b:56:81:
                    e0:79:46:88:6f:30:85:43:cc:d4:4e:29:8a:35:eb:
                    a8:85:21:9c:fa:c7:aa:76:5b:d6:26:35:84:0a:18:
                    0c:dd:7d:8a:01:18:0f:9a:e4:8c:6f:e4:cb:28:fd:
                    48:f5:06:59:f8:b9:18:3d:50:84:e9:3a:7c:86:9e:
                    20:69:e3:36:d8:74:ad:a7:8e:2b:6b:2b:ae:c4:dd:
                    07:bf:fc:74:85:26:52:7e:a3:be:e2:ba:e0:86:d7:
                    98:20:71:0a:e7:fa:e7:12:55:a8:99:69:57:0f:99:
                    33:0d:8e:7f:81:32:9b:57:ed:48:a7:9c:0f:9d:53:
                    0f:1a:1a:88:3f:c4:be:24:13:bb:41:b6:29:bb:d8:
                    84:2e:6a:5a:f3:c6:01:77:59:ae:bf:64:a0:07:fd:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:37:FD:CE:6D:36:95:D2:56:3A:01:05:8F:17:66:78:1A:F8:67
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EQE3_c5tNpXSVjoBBY8XZnga-Gc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5a:55:53:7c:95:0c:82:54:86:4d:da:74:33:16:f0:f9:7f:
         f3:8e:0e:a6:8d:be:ef:2c:5a:f8:97:09:63:67:ed:a0:f7:e1:
         dc:be:0e:01:9e:27:a6:2a:fb:66:2b:99:35:ae:f9:4e:99:8e:
         8d:3a:87:f0:eb:20:36:f1:00:19:6e:8a:74:18:d8:c5:61:af:
         fe:ed:0e:49:4a:70:48:eb:ee:8e:14:b3:98:e8:40:20:98:23:
         1e:47:10:ad:47:24:ae:2c:61:76:71:20:08:8f:00:d7:c4:a1:
         58:37:17:67:01:b8:84:6f:68:ae:9a:2e:9a:88:80:69:0e:36:
         20:80:e1:5b:69:43:ce:22:15:6e:f9:bb:d2:7c:cf:46:cd:cc:
         d7:18:b4:10:de:66:23:75:a9:20:1d:40:9c:a5:50:98:ee:c8:
         ce:fd:05:3e:03:e9:ea:75:62:c8:51:22:b6:6b:c9:e8:15:96:
         de:89:54:1a:c3:47:07:92:8b:46:a5:b5:04:96:2d:74:8e:9c:
         16:92:19:17:83:6a:07:68:f6:ab:db:3c:95:eb:e8:44:92:8c:
         03:7f:1e:a0:be:3d:b9:85:fc:4e:8a:3d:bd:a2:20:2b:7f:38:
         2b:57:8b:a4:34:20:7c:31:be:40:ff:11:18:85:3c:0c:02:f4:
         ff:cc:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org