Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/w-KMeHtnMd8e6lKxSsX6J-nemrY.roa
File:                     w-KMeHtnMd8e6lKxSsX6J-nemrY.roa (raw, json)
Hash identifier:          63EeRmBDBUAogZHFto5zyU+dQhcYZCEsJASuUGE5xz8=
Subject key identifier:   C3:E2:8C:78:7B:67:31:DF:1E:EA:52:B1:4A:C5:FA:27:E9:DE:9A:B6
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       01861D0BF9F1C535521F0EB9B1132BB3E0CB
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/w-KMeHtnMd8e6lKxSsX6J-nemrY.roa
Signing time:             Sat 04 Feb 2023 15:29:29 +0000
ROA not before:           Sat 04 Feb 2023 15:29:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        95.215.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 May 2023 14:05:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:1d:0b:f9:f1:c5:35:52:1f:0e:b9:b1:13:2b:b3:e0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Feb  4 15:29:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3e28c787b6731df1eea52b14ac5fa27e9de9ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:95:d7:9b:b8:d7:f7:3f:3b:20:63:07:d6:bf:
                    6e:25:28:52:ad:4d:96:11:58:15:cd:ae:c4:b5:7f:
                    98:e1:c7:43:6c:4a:28:4d:87:77:06:84:4f:bb:28:
                    f6:ab:26:56:ff:1f:00:0e:87:b0:48:14:3e:2c:ed:
                    bc:19:0c:61:44:44:33:f5:1a:25:ac:39:ef:c5:e5:
                    30:f0:ed:53:62:85:12:2c:cb:0f:c1:57:12:58:b8:
                    58:c2:5a:9f:ce:70:77:81:2a:98:03:b6:88:ab:a8:
                    a9:ec:1c:17:8d:36:dc:1b:e0:ee:3f:f5:9c:9f:62:
                    41:81:18:3f:3d:3b:33:36:45:08:df:fa:89:b8:ae:
                    b5:b3:fa:7e:bb:ab:5b:78:6a:14:a9:13:37:a0:51:
                    19:ab:40:2b:f2:64:58:79:71:a3:dd:69:91:92:a4:
                    3c:d3:f7:c9:d0:62:51:b4:9a:7f:1d:61:4a:48:b3:
                    bb:be:6d:25:9b:5b:5d:66:b4:55:6e:33:aa:e9:35:
                    98:52:98:79:b5:de:7a:c5:a7:e9:fd:1d:e3:e0:3d:
                    e1:da:33:84:80:15:ec:91:86:d5:06:09:e9:bd:20:
                    cb:a9:b0:38:d8:d7:91:ca:5c:ef:e2:02:aa:21:92:
                    18:02:0a:9b:75:d5:84:1c:0d:13:61:89:e7:d3:a9:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E2:8C:78:7B:67:31:DF:1E:EA:52:B1:4A:C5:FA:27:E9:DE:9A:B6
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/w-KMeHtnMd8e6lKxSsX6J-nemrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:45:0c:80:cc:1c:d1:59:23:a9:63:f0:29:bd:5b:0e:6c:
         10:a3:a7:de:b7:a7:2e:99:82:b5:ce:66:d1:c8:91:b7:f6:3d:
         71:63:61:07:69:9d:aa:c8:9e:89:e7:b9:a0:d9:7b:8d:6f:3c:
         76:90:f7:09:7d:f1:0d:ca:14:84:f7:2f:66:ef:e8:28:16:b3:
         c9:08:c2:1d:e4:45:1f:d1:10:8b:12:c4:eb:c4:1f:ad:e1:6d:
         71:c2:f5:39:f2:00:90:e4:d2:52:b3:43:c9:87:bb:00:2c:9a:
         46:84:bb:9e:c7:9f:e0:a4:0f:25:23:47:df:b0:9f:21:94:96:
         3b:08:c3:de:c4:6f:0a:88:29:97:79:e3:f7:e7:2b:c4:31:75:
         54:cb:d8:fb:f2:bf:58:8d:b2:fc:09:c2:49:23:f5:b4:a6:35:
         36:ae:a3:8e:9b:a4:1b:e8:b5:7e:ca:b4:b3:31:e2:99:13:11:
         79:fb:90:3b:52:ac:e2:ae:e8:ba:d7:2b:53:fb:c8:62:f3:fa:
         8f:42:08:bf:35:fd:09:b5:fe:4d:ea:60:1d:47:85:92:4f:55:
         dd:ed:88:6f:d8:1a:02:a3:21:5c:d4:2b:4d:43:ae:c9:18:7a:
         f7:17:5e:23:c0:1b:d5:5f:3f:f2:79:3b:b0:8a:fb:80:73:af:
         8b:18:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:32 2024 by rpki-client on console-ams.rpki-client.org