Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/eUuflWFcFr979NWNrnLDC_vQ6sg.roa
File:                     eUuflWFcFr979NWNrnLDC_vQ6sg.roa (raw, json)
Hash identifier:          aI4tLknn7CfnQT2jtkF4366Ze51S7xjLUgQwPkEUEBo=
Subject key identifier:   79:4B:9F:95:61:5C:16:BF:7B:F4:D5:8D:AE:72:C3:0B:FB:D0:EA:C8
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       018CC424BA69CADC737A5EE2842FB624F46D
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/eUuflWFcFr979NWNrnLDC_vQ6sg.roa
Signing time:             Mon 01 Jan 2024 08:29:50 +0000
ROA not before:           Mon 01 Jan 2024 08:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57230
IP address blocks:        87.236.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 14 May 2024 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:ba:69:ca:dc:73:7a:5e:e2:84:2f:b6:24:f4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jan  1 08:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=794b9f95615c16bf7bf4d58dae72c30bfbd0eac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:32:fb:23:d1:08:68:88:4e:11:f9:a3:9f:
                    b7:f7:38:aa:a0:f9:eb:50:10:2a:60:42:1b:55:c7:
                    e3:d9:10:46:d3:ed:c0:e6:19:b0:46:31:b6:a3:ec:
                    10:56:e6:fe:92:43:1b:71:f9:8f:7b:ab:a0:e1:6b:
                    73:2b:3b:0c:05:89:8d:7e:5b:99:2c:b6:32:45:61:
                    e7:a8:0e:8d:1a:a2:75:4c:af:cd:98:89:3e:de:65:
                    9f:25:b5:25:13:57:04:3e:e5:a9:d4:cc:c8:d6:bc:
                    47:1a:09:c5:57:ca:7b:9c:06:a7:4d:6e:35:fb:13:
                    9a:3a:08:f5:ed:b8:3b:10:ad:cd:41:76:39:88:51:
                    10:17:81:0c:06:29:ca:f3:0f:6b:e0:83:16:95:61:
                    e9:08:1d:74:db:42:61:36:1d:ca:4a:fa:ff:51:e7:
                    47:52:9f:1b:a3:dc:f1:b5:dd:de:cd:54:54:20:b1:
                    47:e4:ef:41:f4:81:44:d8:25:4b:b7:e7:67:57:7b:
                    dd:22:34:14:de:9e:2c:0d:c7:39:af:0a:33:20:3c:
                    3d:10:f1:93:83:cb:98:76:b6:7d:b5:79:46:34:95:
                    24:d5:99:52:ab:b1:aa:0e:a3:1e:5e:25:ff:85:65:
                    ab:f7:b4:78:6b:64:12:0e:57:28:6d:3a:ae:64:fb:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:9F:95:61:5C:16:BF:7B:F4:D5:8D:AE:72:C3:0B:FB:D0:EA:C8
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/eUuflWFcFr979NWNrnLDC_vQ6sg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.236.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4f:e9:92:d5:04:9c:46:0e:d7:2a:e4:90:a5:d4:32:33:ed:
         3f:94:08:0e:7c:bd:ad:d3:ba:74:8a:8d:9c:f7:aa:7b:2e:c6:
         fe:09:72:29:56:14:b4:2a:78:f7:ec:14:4e:ef:10:4a:f8:59:
         e6:61:d7:85:ac:6b:06:52:78:22:62:3e:88:86:11:77:4c:7a:
         9d:c6:f5:b7:cd:21:e2:3a:08:98:ad:df:e3:ed:f1:eb:73:63:
         d3:81:25:fe:75:25:35:3a:21:4c:6d:7a:6f:de:d9:ab:d2:63:
         31:e4:ab:ad:81:ea:3d:5f:fc:76:74:21:76:30:83:02:dd:7c:
         5a:b4:99:a4:b2:ab:b2:85:ab:6b:69:0f:c3:7b:02:78:cf:63:
         3f:77:c2:e7:4e:fc:9b:ad:9e:7b:a0:be:3a:89:f2:bd:03:6e:
         73:52:ff:ca:ad:fc:89:52:57:74:c0:73:e3:99:9a:11:d4:dc:
         ac:0a:a2:56:58:c2:79:42:c5:fa:2f:a6:4c:45:9b:db:46:13:
         97:b2:d1:83:fe:93:aa:47:77:de:6d:d3:bb:40:93:b9:9b:7d:
         d9:60:dc:7e:9d:7f:20:88:57:a0:03:a3:6c:b5:b1:e5:c4:f5:
         21:fb:8b:91:de:a9:cb:d6:22:11:7a:25:b8:e1:22:86:8e:ec:
         83:ef:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org