Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eSDurJtE_BmS4p11WyshmkMODD0.roa
File:                     eSDurJtE_BmS4p11WyshmkMODD0.roa (raw, json)
Hash identifier:          QBxYVOPTS2AU3brpm+K6Xcx5aCpPoW97aNGQT4FJM+o=
Subject key identifier:   79:20:EE:AC:9B:44:FC:19:92:E2:9D:75:5B:2B:21:9A:43:0E:0C:3D
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0185911E5463B711CFE48B3BEBBF8C154B50
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eSDurJtE_BmS4p11WyshmkMODD0.roa
Signing time:             Sun 08 Jan 2023 11:22:42 +0000
ROA not before:           Sun 08 Jan 2023 11:22:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6939
IP address blocks:        194.124.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 10:17:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:91:1e:54:63:b7:11:cf:e4:8b:3b:eb:bf:8c:15:4b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  8 11:22:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7920eeac9b44fc1992e29d755b2b219a430e0c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:21:f6:7d:64:45:1b:52:35:ba:ea:f9:f7:
                    c3:30:a8:1d:bf:a8:75:64:98:63:98:5c:30:85:73:
                    52:8a:a1:a0:5f:21:8a:81:0d:18:34:bb:6c:32:d2:
                    12:47:1e:18:9e:29:92:73:b0:58:c0:25:28:48:cd:
                    8d:a1:35:a3:63:61:99:e3:68:e6:d3:09:97:d9:ca:
                    87:c0:a3:60:6c:55:7f:ae:1f:60:7d:4c:2a:4e:16:
                    4b:4d:b9:4f:d5:82:6d:bb:b1:11:4c:4b:99:3c:6b:
                    e3:bd:46:09:ea:7d:fe:c4:97:c5:53:b4:01:46:cd:
                    ce:46:c6:80:19:61:47:18:67:41:ad:97:f2:c5:ff:
                    ac:c8:28:69:8d:ee:f1:1c:56:61:1a:58:75:8c:2c:
                    fd:94:08:b8:e9:d4:c1:57:61:c6:33:99:74:14:b2:
                    2d:fb:03:1f:3b:d8:3f:79:bf:89:19:b0:99:49:45:
                    97:7a:fd:ab:a6:41:93:18:cd:7f:24:17:08:32:19:
                    e4:c5:6c:b3:d0:3f:81:a8:0c:02:1b:31:94:7c:1d:
                    9b:f5:8d:9a:e1:6a:fc:a9:5e:e9:de:80:f8:d6:02:
                    42:99:ed:eb:90:d4:80:cb:be:07:f2:8c:94:ae:7d:
                    31:e0:a4:5b:3e:ba:1c:fd:a3:07:b4:28:f3:85:9c:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:EE:AC:9B:44:FC:19:92:E2:9D:75:5B:2B:21:9A:43:0E:0C:3D
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/eSDurJtE_BmS4p11WyshmkMODD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.124.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:69:17:79:7c:0b:80:e3:95:57:f2:85:a9:2a:04:b9:5a:ba:
         a4:13:1c:66:d8:14:de:f8:58:6a:59:b2:cb:9f:fe:44:27:2d:
         cc:91:66:21:7b:6d:f4:76:aa:7e:76:01:98:5a:bf:48:19:f3:
         86:87:38:3f:e1:b7:62:34:3b:6f:33:8d:b4:f2:19:75:1e:82:
         c6:76:87:c6:7f:57:7f:8c:4c:e6:1a:14:1b:2b:24:fd:6e:1a:
         f5:96:48:63:84:74:5c:ec:05:bb:53:df:02:75:8e:4c:e9:5e:
         e4:81:02:de:d8:13:66:66:49:99:64:3d:2b:e1:ea:40:36:aa:
         97:16:b7:14:73:9b:b5:74:bd:6d:72:7d:1e:91:01:17:16:f0:
         e9:e3:9f:d7:3c:21:b1:80:66:fb:cc:87:57:ff:08:af:c9:93:
         48:b0:99:6c:8a:fd:32:26:1d:bf:94:fc:9b:62:2c:b9:c2:9a:
         19:7c:57:7c:11:b5:b9:dc:60:1a:db:9a:c8:da:c4:07:6e:6e:
         68:1c:7b:a5:78:f8:44:08:21:36:0d:49:24:d6:7e:fe:9f:df:
         dd:a1:62:a4:2b:f8:87:dc:b6:e0:4f:24:c5:b8:42:c8:16:94:
         95:8e:ba:03:42:2a:8a:b7:26:ae:02:d3:cc:91:fe:af:d6:3e:
         24:47:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org