Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/EIbnJMvhBHcShuRAeE60FL08w_s.roa
File:                     EIbnJMvhBHcShuRAeE60FL08w_s.roa (raw, json)
Hash identifier:          gFsi0+4tdVbZNmKZknzajnnlSxy1uQCL7N1tX5xegbQ=
Subject key identifier:   10:86:E7:24:CB:E1:04:77:12:86:E4:40:78:4E:B4:14:BD:3C:C3:FB
Certificate issuer:       /CN=d23f78373cb96654d0306064692efc4ae7715f17
Certificate serial:       018B46FED117F84CFDC73C87F58E1D4FE382
Authority key identifier: D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/EIbnJMvhBHcShuRAeE60FL08w_s.roa
Signing time:             Thu 19 Oct 2023 08:13:06 +0000
ROA not before:           Thu 19 Oct 2023 08:13:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        194.42.160.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:46:fe:d1:17:f8:4c:fd:c7:3c:87:f5:8e:1d:4f:e3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23f78373cb96654d0306064692efc4ae7715f17
        Validity
            Not Before: Oct 19 08:13:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1086e724cbe104771286e440784eb414bd3cc3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:7d:5b:7b:6b:be:89:fd:d1:28:8c:ee:b6:
                    af:7b:1c:ec:da:39:62:c6:73:d7:43:47:40:09:60:
                    be:a9:f7:69:17:8b:37:13:d4:ba:58:c2:05:4a:a3:
                    39:ca:b0:5f:0a:cc:98:ee:b5:64:ac:42:78:6e:ff:
                    c6:64:1f:f8:33:44:ff:89:3a:4b:9c:d0:3c:b1:ee:
                    e8:ae:41:1f:3f:ce:92:20:6c:21:03:34:78:45:db:
                    55:0c:fe:c3:1d:0d:3d:25:ae:d9:e2:d9:00:81:b5:
                    d0:1d:13:20:03:3a:09:70:1a:3b:31:44:e7:bc:e0:
                    dc:8b:13:c2:be:6b:64:3f:e2:55:6c:60:e1:0c:e7:
                    c8:4c:a9:c5:48:53:4f:85:2e:ae:9b:7e:89:63:48:
                    b9:60:6b:8c:b5:f5:fe:94:b6:07:09:46:32:77:4e:
                    5c:70:6b:11:58:23:d6:4c:73:87:d6:39:c1:77:76:
                    c1:f6:87:1f:d6:e3:99:2f:e2:87:02:19:43:be:f0:
                    02:9e:3a:97:8c:53:ea:73:90:95:fc:37:bd:ef:92:
                    1b:5d:52:a9:f4:1e:d2:c2:7e:9a:03:6a:6d:44:4a:
                    04:f9:00:7f:4e:1a:ce:b6:e8:86:bc:42:73:39:7a:
                    eb:7c:d2:c3:08:f0:4d:ff:ae:f2:05:d5:2f:b7:6d:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:86:E7:24:CB:E1:04:77:12:86:E4:40:78:4E:B4:14:BD:3C:C3:FB
            X509v3 Authority Key Identifier:
                keyid:D2:3F:78:37:3C:B9:66:54:D0:30:60:64:69:2E:FC:4A:E7:71:5F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j94Nzy5ZlTQMGBkaS78SudxXxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/EIbnJMvhBHcShuRAeE60FL08w_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9e1e78-df24-4fc6-b077-39fe723ef730/1/0j94Nzy5ZlTQMGBkaS78SudxXxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:a7:9e:76:41:1a:b6:79:89:70:a1:10:bf:5b:50:aa:a0:
         f9:ea:61:d8:71:61:da:b4:df:71:97:fe:ed:f2:37:71:01:47:
         e3:be:0a:30:46:77:b7:78:1a:b8:37:f7:1a:f2:ce:ed:25:86:
         d1:69:b0:f8:db:b4:29:9e:a0:f1:f2:e2:60:c2:86:47:a0:64:
         e3:71:fa:25:21:7f:c0:ce:48:02:c1:5b:b8:9b:d5:35:e3:04:
         9a:87:c6:3d:a8:bf:fa:1f:a6:45:04:79:32:01:30:fa:2b:6d:
         8e:07:e7:a3:60:33:31:c4:9d:34:33:1f:d9:5b:a3:70:cb:b2:
         83:a7:cd:ba:02:3c:98:e7:f6:73:5a:23:12:d5:28:77:f9:74:
         2b:24:e9:b3:9e:9d:e3:bb:8f:f8:25:71:92:41:2c:f3:00:b2:
         46:79:bb:79:85:37:b2:0c:b9:4b:10:27:cc:e4:e7:ba:91:b6:
         7a:8d:0f:7e:fc:c1:1c:0a:47:ac:01:e0:02:bd:e6:15:8d:68:
         c2:7d:e6:0d:92:9c:5f:76:2a:d5:5a:57:9a:af:c6:39:93:bd:
         16:3d:8c:29:e5:5a:ee:e0:15:85:56:7d:66:4d:24:4f:d7:79:
         07:6c:f9:3a:82:fb:f5:a8:91:90:95:b6:1c:1f:79:dd:26:7f:
         9d:a6:12:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:06 2024 by rpki-client on console-ams.rpki-client.org