Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa
File:                     1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa (raw, json)
Hash identifier:          p+Rr0WP14TGz4tM9hmV6EEU5varWC//4WfQk1Zaog3k=
Subject key identifier:   D4:41:0C:EC:52:CD:03:95:CB:F8:DD:EE:79:0B:88:D7:F3:BA:11:E4
Certificate issuer:       /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial:       018CC348996D5FA8F23C43C0FC18A258A54C
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa
Signing time:             Mon 01 Jan 2024 04:29:24 +0000
ROA not before:           Mon 01 Jan 2024 04:29:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12703
IP address blocks:        185.94.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 09 Jan 2024 10:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:99:6d:5f:a8:f2:3c:43:c0:fc:18:a2:58:a5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
        Validity
            Not Before: Jan  1 04:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d4410cec52cd0395cbf8ddee790b88d7f3ba11e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:81:ae:3e:8e:fe:8d:76:50:81:f2:fa:35:
                    a9:ee:3f:2e:89:0f:c9:4c:b7:5c:f1:88:27:a1:ae:
                    66:72:b2:9c:83:71:0c:08:c2:66:f2:1b:90:1f:3d:
                    a9:46:ee:72:f9:10:23:ad:48:bd:7d:d0:70:f7:01:
                    00:87:a4:07:1c:ca:27:7e:12:87:ee:89:65:bd:67:
                    d4:c9:ab:59:58:75:20:94:b8:6a:2c:e9:63:12:92:
                    08:0b:f8:3c:1d:09:09:4d:5d:07:13:0e:49:d4:97:
                    a9:e6:17:d8:55:04:af:8d:aa:df:11:20:ed:a3:2b:
                    79:59:e8:21:3c:e6:83:52:4a:31:cd:2e:63:37:74:
                    a6:11:da:fd:f7:e4:f4:b5:91:b5:44:b7:a9:22:a5:
                    ff:9e:8f:54:b4:8d:6b:d1:b7:f2:e1:16:bd:4f:f6:
                    af:bc:2a:b1:90:47:4c:40:60:6a:9d:f0:2e:f1:a2:
                    fb:8b:c1:56:92:70:03:de:9f:08:78:0a:a6:5b:ce:
                    88:07:38:b8:50:80:73:57:a0:0e:1f:44:98:36:98:
                    78:31:02:fb:e1:ea:0e:74:e0:5f:a7:b2:b0:f9:72:
                    3f:0c:1b:b2:05:d0:94:42:c7:28:59:55:a3:1a:e8:
                    5e:7f:0a:51:c9:9d:df:70:80:5f:4e:b5:c4:99:a2:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:41:0C:EC:52:CD:03:95:CB:F8:DD:EE:79:0B:88:D7:F3:BA:11:E4
            X509v3 Authority Key Identifier:
                keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:2d:23:5b:aa:28:e4:41:e9:46:b7:50:2d:25:5e:cc:3c:
         42:77:44:64:5c:b2:cc:28:62:57:5e:d5:3a:01:87:ad:0d:94:
         33:e2:cb:47:3f:4b:37:10:af:a3:a9:4e:bd:e6:e3:bd:5e:fb:
         56:ff:23:9d:3e:79:2b:fd:3c:2c:75:18:a6:c7:81:f6:2f:7f:
         ab:6d:65:54:84:aa:a1:f1:46:11:f1:80:1c:e8:ca:98:0b:2a:
         10:b6:fd:d8:55:d4:13:ba:21:18:25:a6:b4:b9:1f:68:ec:87:
         f9:15:12:fa:16:a1:8d:f5:c8:7f:31:4b:f2:6b:5a:35:17:b9:
         e2:fe:a3:2a:40:09:8e:84:38:54:49:c9:21:aa:83:26:78:dd:
         90:26:c1:ef:92:df:88:c3:56:ca:47:f0:d2:45:7f:d2:7d:c3:
         bd:e3:7c:53:5f:e9:01:36:d0:02:f2:c6:29:df:b9:10:98:0b:
         5b:a4:19:90:ca:92:2c:c1:c3:7b:09:13:dc:c9:06:0b:51:2f:
         af:39:f6:84:61:e0:4c:ae:9a:09:88:e8:64:46:ef:44:f4:e0:
         98:5d:e0:8f:77:dd:03:39:52:8a:82:9f:23:15:11:22:cb:40:
         07:f5:3f:35:09:1e:63:b0:b7:b5:13:d1:07:db:c4:36:d7:08:
         e5:4d:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:05 2024 by rpki-client on console-ams.rpki-client.org