Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa
File:                     _2CNr5ObzNA09IJCddhPhvlL_8Q.roa (raw, json)
Hash identifier:          XdfVZaKUO1xWN7TZDFkPJMKaiI4R7NrqQe4ZLaKoWYs=
Subject key identifier:   FF:60:8D:AF:93:9B:CC:D0:34:F4:82:42:75:D8:4F:86:F9:4B:FF:C4
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       018CC794A2F476F99EEC2A834CA0E3FD8A52
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa
Signing time:             Tue 02 Jan 2024 00:30:56 +0000
ROA not before:           Tue 02 Jan 2024 00:30:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212887
IP address blocks:        213.192.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 14 Feb 2024 11:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:a2:f4:76:f9:9e:ec:2a:83:4c:a0:e3:fd:8a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Jan  2 00:30:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ff608daf939bccd034f4824275d84f86f94bffc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9e:31:9e:9a:3b:f0:7f:f6:db:b4:85:ea:3a:
                    c7:47:d7:02:fe:ff:77:d8:34:48:54:a2:5c:9b:ed:
                    2e:e3:7b:d3:1d:ff:7e:b4:c9:0d:43:d5:be:1f:8a:
                    32:8c:83:e0:2c:cb:1f:00:f2:ad:61:50:25:e7:aa:
                    50:09:99:33:7e:18:63:ec:6a:14:fb:13:0f:e4:ee:
                    d4:d1:7f:ba:5e:0a:0f:ca:66:c3:eb:6a:0a:68:bb:
                    64:46:8d:ca:76:82:14:ee:6d:bf:9b:31:37:dc:5e:
                    8b:42:05:6d:c6:c1:64:16:87:0a:a7:98:21:d3:7f:
                    d2:ef:3b:b0:f7:ff:56:5f:c2:af:b3:1e:d1:6d:5e:
                    2b:9a:b0:92:8a:63:07:b4:c7:5e:b2:16:6e:75:38:
                    c5:4a:ab:a9:16:35:29:5a:55:5b:ec:4c:3c:31:af:
                    f6:94:55:67:0a:82:ed:13:fa:9b:cb:f4:1e:ea:a8:
                    17:d1:7b:8d:ca:f5:5b:58:96:e8:a5:91:1b:2c:25:
                    1e:df:78:9e:62:ef:ce:e5:da:03:b8:82:9c:8b:e3:
                    86:df:1e:3f:a2:4c:5e:43:de:5b:66:eb:c4:d1:16:
                    9d:7e:3a:1b:d3:ce:88:0a:5e:c2:c7:92:ae:63:b7:
                    bb:44:b3:52:d4:51:dc:06:4b:b6:74:73:00:e4:ef:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:8D:AF:93:9B:CC:D0:34:F4:82:42:75:D8:4F:86:F9:4B:FF:C4
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_2CNr5ObzNA09IJCddhPhvlL_8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.192.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:ad:06:aa:6e:26:43:94:6f:4b:33:82:98:9b:0b:50:a5:df:
         f1:0a:82:16:5c:4d:ab:7f:48:fa:88:63:1f:63:4d:76:a8:04:
         ff:54:28:10:ce:a0:86:a4:e5:1a:13:00:6e:80:b4:19:fa:80:
         59:9f:b5:40:73:47:88:e9:24:d5:33:c6:8e:b1:31:63:7d:8a:
         7b:cf:5d:d7:b3:ce:5d:65:f8:ad:8c:19:6e:e3:2d:5f:e4:59:
         b1:e2:9d:83:ac:11:e2:ea:79:72:0f:29:08:3a:a5:59:be:09:
         fb:73:e2:14:8f:cd:37:71:45:40:6a:8d:6f:2b:27:1d:a3:1d:
         a3:ff:39:9a:7a:34:de:ee:0b:60:f3:17:a1:e6:90:03:34:e3:
         d2:bc:52:5c:02:90:a6:36:e2:d2:ab:b7:44:d6:1b:8a:54:11:
         9d:34:6f:45:2f:94:37:f4:b6:d3:2b:b6:ec:ca:27:9d:c2:cd:
         74:83:97:ad:fa:1a:64:b7:98:8c:c8:f3:be:18:8c:8c:02:58:
         a0:99:f2:4f:53:01:e5:0c:f9:97:61:ad:f8:b1:f0:95:fe:bd:
         43:13:0b:98:26:b6:ed:f0:23:0e:1e:f2:0a:66:be:2c:e9:74:
         9a:7d:d5:40:b0:39:02:a9:d2:ae:c8:6f:f9:2d:18:8d:14:5b:
         51:ba:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org