Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa
File:                     hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa (raw, json)
Hash identifier:          7YRF0S1vHeLfjsqZdz4KRHVzM+3qv/sOGHkrX8lSqL0=
Subject key identifier:   87:2F:D0:6D:AA:E1:FB:B2:61:AE:52:B4:90:3A:51:5C:3C:87:0F:5C
Certificate issuer:       /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial:       018EBC5ED00079C82ACB914370E065E10AE9
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa
Signing time:             Mon 08 Apr 2024 06:21:54 +0000
ROA not before:           Mon 08 Apr 2024 06:21:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35302
IP address blocks:        95.131.118.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 11:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bc:5e:d0:00:79:c8:2a:cb:91:43:70:e0:65:e1:0a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
        Validity
            Not Before: Apr  8 06:21:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=872fd06daae1fbb261ae52b4903a515c3c870f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:6c:ed:ea:ba:1a:c7:55:6f:96:6f:76:21:
                    eb:59:aa:d3:b8:5d:13:ac:46:15:d5:d1:cb:ad:1d:
                    a8:6f:1a:bf:c4:cf:07:70:16:37:e7:5a:aa:56:4e:
                    91:4d:4a:41:31:5e:06:24:6d:c2:95:da:2a:ee:9c:
                    d9:b1:d0:91:59:0c:bf:de:06:05:d0:8c:fa:cd:3f:
                    90:ff:4f:60:7f:01:99:44:15:9b:fd:81:83:9f:7d:
                    c8:53:bb:fb:6a:1c:01:3c:4e:8d:a0:50:9c:02:ba:
                    59:15:76:79:11:00:71:43:56:fd:6b:75:fd:3d:8d:
                    e5:7c:0d:25:4c:36:43:91:bd:f8:6c:ec:a1:ab:be:
                    be:00:40:f4:5c:3c:8c:3a:22:1c:ae:72:dd:82:95:
                    71:e2:a4:e5:2f:fc:a2:62:22:97:69:c2:e3:1d:75:
                    22:a0:fe:d9:9c:22:a1:f2:b0:c3:94:89:32:68:1f:
                    33:da:f4:a4:e6:a5:80:d4:ec:6f:79:48:a0:90:c9:
                    ab:a6:91:b2:0c:15:c6:3e:48:bc:8a:8e:80:99:b6:
                    7c:75:20:67:9f:8b:e6:8f:ba:d4:a3:fe:4f:3b:f8:
                    e7:ac:00:76:c2:e4:f5:6c:7a:f7:db:07:bf:5a:ce:
                    68:3a:d9:bd:5e:36:c3:02:1a:de:06:07:96:5e:fe:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2F:D0:6D:AA:E1:FB:B2:61:AE:52:B4:90:3A:51:5C:3C:87:0F:5C
            X509v3 Authority Key Identifier:
                keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/hy_Qbarh-7JhrlK0kDpRXDyHD1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.131.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:54:6f:f5:38:3f:02:3e:a8:75:97:fe:93:91:c9:2b:7a:
         f8:ca:75:03:43:4d:2b:c8:8b:83:76:fb:c4:6b:30:bb:9a:3b:
         9a:77:56:f2:6a:33:af:44:e7:2b:ae:81:56:66:5f:85:69:66:
         02:ce:fe:77:62:91:d4:e3:cd:d9:27:d2:50:96:d6:2e:5e:a5:
         9a:52:df:9b:6c:aa:2a:14:f1:d4:99:a8:37:9c:15:78:62:13:
         ac:01:28:5d:47:a7:fb:4e:21:6a:12:ce:5a:98:1e:5e:81:99:
         01:a5:ba:d2:b3:85:ce:ae:c6:f2:70:95:fe:b8:a9:4e:ad:6a:
         0e:e6:07:ee:3f:84:7c:54:1a:ed:34:41:cb:fe:e4:6a:15:ac:
         7a:9d:b7:c7:f8:34:e4:9c:d0:8e:4a:ab:e8:a7:80:e0:11:dd:
         0a:fa:9b:9a:7f:e6:ac:b6:66:02:23:64:81:0b:5d:db:2b:6c:
         80:3d:07:c1:ee:7c:cc:85:80:ce:c9:8a:6d:78:4c:18:88:0e:
         36:78:51:53:56:40:85:23:59:c7:d2:69:3a:0b:61:af:fe:b1:
         d9:97:20:76:a0:40:d1:13:10:6e:d5:f4:aa:65:3d:b5:8a:98:
         1a:ee:29:c7:1f:09:5c:04:ef:0e:b2:f6:61:43:ba:99:39:d7:
         e8:a6:f0:6d
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 11 16:38:12 2024 by rpki-client on console-fra.rpki-client.org