Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/62uraemdTM1yme2r1LzZsGpjiro.roa
File:                     62uraemdTM1yme2r1LzZsGpjiro.roa (raw, json)
Hash identifier:          6Sfg0iFkUHm+cjfuzt4GToXSSYRiMdtoHfcoQY/IA+w=
Subject key identifier:   EB:6B:AB:69:E9:9D:4C:CD:72:99:ED:AB:D4:BC:D9:B0:6A:63:8A:BA
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019020C44EE9C0DBADABC9AE1D3674468D25
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/62uraemdTM1yme2r1LzZsGpjiro.roa
Signing time:             Sun 16 Jun 2024 11:17:34 +0000
ROA not before:           Sun 16 Jun 2024 11:17:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211056
IP address blocks:        87.236.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 03:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:20:c4:4e:e9:c0:db:ad:ab:c9:ae:1d:36:74:46:8d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jun 16 11:17:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb6bab69e99d4ccd7299edabd4bcd9b06a638aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:e9:0e:b1:ba:61:ac:33:3e:32:92:58:a8:
                    fb:ac:24:98:04:e9:c4:9b:de:f2:09:0d:47:7d:e9:
                    a3:51:1c:a4:c1:eb:63:40:f7:f3:70:60:bf:7a:21:
                    97:74:d8:75:f2:5c:ba:b0:be:a4:00:1a:30:ce:23:
                    6f:b1:b3:9b:95:45:c3:82:d8:cc:f3:55:1c:32:71:
                    67:45:20:1a:6f:56:af:27:4e:a2:11:3a:8b:ea:a8:
                    18:06:43:b3:1e:44:ac:5d:6d:2f:2d:7d:dd:dc:6b:
                    d7:1f:9b:67:4d:d1:09:42:74:96:76:93:b9:a8:8c:
                    c3:f4:40:a8:c0:8e:57:0a:db:9e:5d:91:5f:9b:c3:
                    57:a6:c4:c9:f0:29:f6:eb:51:42:5f:80:79:2c:5a:
                    7f:1c:50:34:fa:92:cd:8e:ea:4a:db:c4:b4:17:2a:
                    1e:9d:df:40:3d:af:d4:8c:1a:e6:38:8d:d2:b9:2b:
                    57:d2:3a:54:6d:8e:d1:88:d5:fc:f7:70:4d:9a:d0:
                    13:57:7c:12:2d:52:42:d7:f8:86:35:e2:15:50:5a:
                    2c:f7:80:30:c7:01:23:32:44:9b:48:40:5c:1f:b9:
                    ce:eb:36:62:64:46:69:34:cc:d0:aa:60:04:81:d3:
                    d9:57:fe:22:0a:51:8b:c9:95:f6:3a:b6:bf:3a:a0:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:AB:69:E9:9D:4C:CD:72:99:ED:AB:D4:BC:D9:B0:6A:63:8A:BA
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/62uraemdTM1yme2r1LzZsGpjiro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:10:6a:f1:1f:f2:f3:59:a9:6e:09:97:21:4b:84:14:c4:
         63:a8:9d:61:ef:62:21:63:66:a0:1a:96:81:e2:e9:0c:f2:c6:
         22:99:64:3d:ec:10:26:a7:1d:46:81:a5:58:0c:57:25:bd:77:
         88:65:bf:92:6d:51:d9:72:4a:7b:c3:c4:81:bd:c9:ff:ae:48:
         b9:d6:ec:40:66:18:11:3c:24:9f:e1:ce:b2:9d:b9:0d:a4:5c:
         36:cd:8b:ea:bf:7a:5d:88:cb:8a:8f:71:20:a5:64:97:3d:5e:
         b6:a2:e5:d9:67:29:20:0e:a8:2d:38:76:8f:1e:4a:23:60:f0:
         a5:a9:13:6b:d3:2a:41:b2:0f:7a:d2:97:fd:e1:17:3b:61:ad:
         ee:18:a6:d4:25:56:27:36:d5:70:63:de:ed:81:ff:07:f3:d1:
         66:3b:30:b5:cb:f2:d4:31:6c:81:4e:a6:ce:e9:6e:6d:bb:50:
         e7:d2:85:72:93:8b:c0:9b:ac:b2:60:0d:e7:a6:2a:cf:cc:3b:
         36:b7:ba:73:f8:d1:d8:91:26:a7:ad:f9:f2:f2:5d:22:7a:08:
         f9:dd:8a:f8:60:fe:24:68:3e:c1:c9:16:45:c4:31:42:01:3f:
         50:a5:a3:03:42:0a:37:b9:c4:38:72:35:a0:c5:98:74:64:cd:
         00:9a:83:be
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org