Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eENboS61_rgS_q5xHXOvfHnRVWs.roa
File:                     eENboS61_rgS_q5xHXOvfHnRVWs.roa (raw, json)
Hash identifier:          mAuP/uGceR06D5jA1koUZHgzaE8Ditxpv3tav0lxh8c=
Subject key identifier:   78:43:5B:A1:2E:B5:FE:B8:12:FE:AE:71:1D:73:AF:7C:79:D1:55:6B
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019422FBE8958B10A3D0305AABD7DF34FA0A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eENboS61_rgS_q5xHXOvfHnRVWs.roa
Signing time:             Wed 01 Jan 2025 17:48:41 +0000
ROA not before:           Wed 01 Jan 2025 17:48:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60117
IP address blocks:        212.81.44.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Feb 2025 10:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:e8:95:8b:10:a3:d0:30:5a:ab:d7:df:34:fa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Jan  1 17:48:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78435ba12eb5feb812feae711d73af7c79d1556b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:19:4a:f1:d0:48:04:01:50:ae:cb:fc:12:
                    25:6a:de:1b:c9:73:87:6f:ff:da:cb:0e:03:df:0b:
                    ef:e7:7a:ce:62:02:66:ef:c5:07:62:0d:84:d0:8a:
                    88:dd:cf:3a:7d:28:de:89:08:c0:79:5b:72:ea:c6:
                    fe:6d:07:a3:f9:96:5d:84:34:63:ef:65:1e:1d:d2:
                    3e:2d:f2:e9:07:a7:d1:a3:44:34:98:8c:b7:a7:cf:
                    c1:d6:9a:15:0c:33:6d:a0:7a:95:f3:1b:26:77:4b:
                    a7:89:91:2b:c8:d3:c3:33:71:e6:0e:5d:a2:59:4d:
                    d3:9d:a0:1a:bb:14:8e:3b:6f:10:ff:cb:b2:34:71:
                    6f:15:0c:87:e6:43:df:08:25:30:c6:5f:7c:0d:71:
                    4f:2d:77:27:f3:67:fe:a7:7d:91:21:fb:da:71:d0:
                    34:88:23:e1:fa:8c:da:0d:88:ea:64:d0:09:52:c2:
                    72:a3:fc:cf:ac:be:8e:1b:48:cf:42:60:80:79:fe:
                    35:49:19:5a:a5:a0:9d:89:ad:f9:d3:cf:80:71:0e:
                    ea:89:95:40:24:ac:a7:60:cb:e4:dc:04:e3:72:6e:
                    88:67:be:f7:f5:11:e6:99:2b:26:71:8f:e1:12:dd:
                    0c:47:15:2a:d8:ef:75:7e:52:d0:42:3d:d6:a4:e7:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:5B:A1:2E:B5:FE:B8:12:FE:AE:71:1D:73:AF:7C:79:D1:55:6B
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/eENboS61_rgS_q5xHXOvfHnRVWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.81.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:78:be:15:40:60:f3:c7:03:ab:68:f3:d3:e1:9c:72:e4:cc:
         8e:10:f5:d3:eb:54:c5:64:65:2b:ec:4d:80:0c:e9:75:6b:70:
         8f:a8:63:cb:9b:8b:90:73:d4:4e:23:44:9b:58:60:38:0a:0f:
         e6:9d:f8:94:79:c7:90:77:ba:16:0c:ae:eb:5c:82:53:4a:2f:
         ea:78:68:5b:0c:e0:14:01:c4:98:31:5a:f4:bb:79:b7:e0:09:
         48:67:a1:f7:26:44:1c:a7:77:ff:5f:3a:59:3f:43:ab:94:58:
         4b:4c:72:c1:c1:96:b9:34:cc:dd:54:d1:7c:14:89:5f:68:a5:
         11:7f:1b:da:8e:14:85:2c:11:6e:8a:90:a3:38:5a:ea:ec:18:
         51:19:cc:a9:1b:29:d2:07:d4:4c:ca:18:bc:90:c0:da:67:8b:
         62:6a:e3:c1:c1:98:63:d3:52:a0:f6:cd:94:43:ac:63:6a:4b:
         6e:7b:45:27:e9:91:07:fc:b6:0d:2b:84:d2:92:fd:93:a7:25:
         fd:d8:03:9f:ce:be:49:73:70:18:84:5a:b5:26:58:35:10:ad:
         d5:ea:d0:40:29:c7:fb:54:b5:26:61:55:be:5f:6a:dc:af:81:
         e2:85:59:87:6b:29:c1:eb:22:43:fb:9f:27:66:2a:68:59:d5:
         74:88:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:06 2025 by rpki-client