Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/BEPOMtP-bZcHaYErcf_PZTKRg-4.roa
File:                     BEPOMtP-bZcHaYErcf_PZTKRg-4.roa (raw, json)
Hash identifier:          oLiMujsLxzK/OwJORsS10MSUZTaSmRCP4je3XAo9KGg=
Subject key identifier:   04:43:CE:32:D3:FE:6D:97:07:69:81:2B:71:FF:CF:65:32:91:83:EE
Certificate issuer:       /CN=106fc87874912b1813ac4292457abddc018e9b45
Certificate serial:       01856B0A1A5EE24AFF9BD4E9265362529ABC
Authority key identifier: 10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/BEPOMtP-bZcHaYErcf_PZTKRg-4.roa
Signing time:             Sun 01 Jan 2023 01:55:02 +0000
ROA not before:           Sun 01 Jan 2023 01:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25301
IP address blocks:        212.94.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:0a:1a:5e:e2:4a:ff:9b:d4:e9:26:53:62:52:9a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106fc87874912b1813ac4292457abddc018e9b45
        Validity
            Not Before: Jan  1 01:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0443ce32d3fe6d970769812b71ffcf65329183ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:d5:04:54:5f:68:04:e1:d7:61:3f:5f:00:
                    35:86:03:00:06:51:9b:56:76:ad:ba:c0:ec:41:c2:
                    44:1b:71:0d:a1:01:7d:4a:96:8c:ce:ec:21:24:57:
                    80:29:06:d0:e2:6b:81:56:33:67:b5:f2:7b:6c:b7:
                    94:c5:d6:60:44:e8:40:38:af:c9:ea:55:d1:07:08:
                    fd:78:ca:02:da:07:fb:69:5f:52:ba:f6:df:01:b6:
                    0f:c6:e5:22:31:0d:f3:e3:6d:80:8d:5e:9a:8b:e8:
                    38:a4:88:a2:93:8d:32:4a:77:14:da:31:78:99:e9:
                    ae:f7:cc:c7:fb:27:68:45:32:c1:28:50:a6:d9:c7:
                    f7:05:81:ea:39:43:c0:35:3d:89:04:7c:2a:05:c5:
                    ff:37:d2:4c:33:3a:5f:ef:95:14:a8:b8:a4:6c:fa:
                    e4:56:d8:f0:c7:be:7c:7f:1d:3d:54:ce:09:af:40:
                    0c:da:0f:bf:f8:ec:f6:88:9b:1d:13:00:d3:8d:0b:
                    bd:86:b9:1f:73:90:49:80:8c:e5:5e:78:1e:7f:68:
                    d1:ef:9d:7c:4a:6d:86:95:3f:af:3c:6f:12:17:7d:
                    83:fa:35:1a:14:12:48:e8:70:da:76:90:aa:bb:3c:
                    41:0d:3a:82:5c:3b:69:0a:5c:7d:ee:70:b0:70:74:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:CE:32:D3:FE:6D:97:07:69:81:2B:71:FF:CF:65:32:91:83:EE
            X509v3 Authority Key Identifier:
                keyid:10:6F:C8:78:74:91:2B:18:13:AC:42:92:45:7A:BD:DC:01:8E:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EG_IeHSRKxgTrEKSRXq93AGOm0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/BEPOMtP-bZcHaYErcf_PZTKRg-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/75339a-5997-4a93-9ad6-65963777ba0a/1/EG_IeHSRKxgTrEKSRXq93AGOm0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:65:0f:0e:6d:d3:a2:65:4b:10:35:e5:fd:0e:42:b4:96:
         6e:9c:7a:d7:11:da:57:95:7b:41:2c:87:2a:a7:a1:19:92:5d:
         fd:1b:01:4b:33:7c:40:f1:80:78:bd:af:8b:90:ef:e3:ec:5e:
         d2:21:cf:f5:38:5b:c0:bb:51:09:f0:04:5c:4b:07:53:61:e9:
         d0:4b:62:b3:3c:03:b8:d9:4b:64:a2:aa:07:d9:1e:d1:e0:f5:
         4d:dd:d1:4a:c3:9f:df:b8:b6:a4:9e:d7:d5:ac:d1:a4:a6:a1:
         8c:66:6a:00:6a:82:71:bd:88:4c:72:8a:29:c4:85:85:47:6d:
         a0:39:1b:cb:72:eb:7c:f1:60:1b:17:f7:f7:d2:4d:08:c7:e1:
         8f:6d:5a:ae:c1:d5:0d:d0:8b:56:53:ba:df:63:5d:e8:b1:6d:
         d7:4e:75:2f:42:57:01:5d:2e:59:a1:8f:c3:e3:ac:dc:3b:00:
         5d:e4:4e:d9:27:07:2f:8a:ff:0a:e9:f2:3a:1e:1a:4f:8d:cf:
         e6:7b:a0:94:ee:83:d6:03:3f:0c:49:37:d1:e8:5e:ad:1b:a3:
         aa:ec:ec:99:ab:a5:c9:2c:3d:81:da:ae:22:43:8d:92:69:52:
         5e:5e:0b:76:8f:75:c7:e8:2c:72:d5:8f:9e:60:f5:f3:7b:05:
         4f:d2:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:07 2024 by rpki-client on console-fra.rpki-client.org