Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8E3uRhDXP4xNWIqRfXfqol1-zHg.roa
File:                     8E3uRhDXP4xNWIqRfXfqol1-zHg.roa (raw, json)
Hash identifier:          MYgDPW6oSi4xFw18nZZejiXR/uiZkyCP5+jsiYNLYZA=
Subject key identifier:   F0:4D:EE:46:10:D7:3F:8C:4D:58:8A:91:7D:77:EA:A2:5D:7E:CC:78
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019020C279EFF351483D8B06436A82FF049A
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8E3uRhDXP4xNWIqRfXfqol1-zHg.roa
Signing time:             Sun 16 Jun 2024 11:15:34 +0000
ROA not before:           Sun 16 Jun 2024 11:15:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57230
IP address blocks:        87.236.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 21:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:20:c2:79:ef:f3:51:48:3d:8b:06:43:6a:82:ff:04:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jun 16 11:15:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f04dee4610d73f8c4d588a917d77eaa25d7ecc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:15:27:11:06:ac:fc:5e:54:16:b2:c2:05:06:
                    8e:b3:af:fc:c7:cd:24:a0:44:2c:56:d9:b1:37:20:
                    4e:b0:93:43:f9:2a:53:bf:9f:39:e8:a6:60:04:01:
                    b1:6e:bc:d1:f6:17:2d:d0:60:5d:b7:b1:c7:57:b6:
                    6b:19:7a:06:82:f9:2e:8c:69:3b:35:41:c4:16:2f:
                    41:7f:6f:44:c0:b8:1f:38:6c:db:1b:f3:46:01:fc:
                    42:15:5c:1f:1a:71:cb:ed:89:20:35:75:d7:24:86:
                    28:f6:f8:30:1a:69:89:41:47:14:65:42:e0:a0:2c:
                    0f:c5:c1:79:cf:a4:d6:69:39:64:42:7e:e5:e1:83:
                    25:98:23:e4:20:38:a7:b0:f3:08:2a:67:af:07:c5:
                    16:28:54:18:30:26:2b:3d:66:34:56:b3:f5:63:4a:
                    64:40:51:f9:e0:50:21:80:ec:1c:32:aa:23:6a:68:
                    82:65:8b:ce:f8:81:18:9d:e9:bb:e5:95:ce:bf:ed:
                    89:59:75:31:70:7b:ea:e9:f6:d0:b3:0d:f7:ca:bf:
                    81:3b:bc:4b:0e:37:56:0d:3f:f8:0b:3d:a1:06:22:
                    c6:b0:00:ca:49:59:f9:95:30:72:aa:ef:bc:a7:38:
                    9b:96:9f:41:23:75:48:2e:8f:40:34:2f:4f:df:ef:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4D:EE:46:10:D7:3F:8C:4D:58:8A:91:7D:77:EA:A2:5D:7E:CC:78
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/8E3uRhDXP4xNWIqRfXfqol1-zHg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:36:56:2a:b6:4b:0d:14:97:e5:19:bc:b8:56:c6:6d:a9:03:
         a6:d1:8b:65:eb:f6:7d:3e:2d:ad:ee:73:b3:b7:08:a0:b9:09:
         fa:bf:28:f4:31:f5:93:02:22:2b:56:fb:48:c5:ee:56:69:f4:
         ad:fa:08:7a:5f:34:ef:a7:fd:e6:5c:cf:d3:35:f9:36:dc:c2:
         f3:7e:68:e8:1f:1a:85:0d:33:dd:68:1b:b6:ab:cc:9a:4c:50:
         c6:69:6c:62:e6:b7:13:0f:1c:a6:44:f7:cc:7e:36:24:fa:57:
         50:ad:b3:ad:c2:44:69:30:71:4d:8e:29:03:d7:32:af:e4:7d:
         8f:2c:f0:7e:4a:81:ff:66:9a:16:8b:89:2d:56:06:09:cb:44:
         86:fb:54:7e:f1:65:0d:e8:95:e0:d5:18:5b:15:f0:0f:ea:7d:
         d1:ca:c3:2d:a2:d7:d2:50:8f:d6:df:04:7e:75:2b:38:dc:31:
         6c:85:57:c2:7b:15:2f:04:98:b6:c1:60:4c:85:a2:0a:80:bd:
         7c:23:ec:14:7e:fa:c8:3c:f2:70:8b:a2:1c:97:78:20:f9:a4:
         53:93:03:e3:4e:4d:8f:c6:da:a0:28:dd:49:4a:bd:10:d3:43:
         93:26:20:0b:a9:d3:03:9f:09:00:26:10:a3:aa:21:af:47:cf:
         72:f2:dc:dc
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 9 00:38:03 2024 by rpki-client on console-ams.rpki-client.org