Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EyuJFbv4cfHU-rNKElOMqJZFMZs.roa
File:                     EyuJFbv4cfHU-rNKElOMqJZFMZs.roa (raw, json)
Hash identifier:          HUWWLylLAJOudmYfogW4BRiPDOxM15jbdVad2vWb2H4=
Subject key identifier:   13:2B:89:15:BB:F8:71:F1:D4:FA:B3:4A:12:53:8C:A8:96:45:31:9B
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       018E4D0B3A907075B3574E125301921324F4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EyuJFbv4cfHU-rNKElOMqJZFMZs.roa
Signing time:             Sun 17 Mar 2024 15:32:45 +0000
ROA not before:           Sun 17 Mar 2024 15:32:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215480
IP address blocks:        85.133.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 19 May 2024 06:17:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:4d:0b:3a:90:70:75:b3:57:4e:12:53:01:92:13:24:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Mar 17 15:32:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=132b8915bbf871f1d4fab34a12538ca89645319b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:ea:d1:70:a9:95:34:72:d7:31:03:b5:f4:
                    35:96:75:c9:d1:49:65:95:d0:bb:57:30:ac:b2:3b:
                    fb:89:42:d5:9d:8c:df:5a:0d:b6:e4:12:c6:bd:d3:
                    4b:b1:7d:a8:54:00:42:99:41:6d:3f:53:8f:2a:16:
                    23:75:15:95:3d:3e:5f:1c:ea:ef:7b:84:06:9b:5c:
                    7d:d8:34:bf:60:5d:e5:8a:da:5f:1c:93:b8:ab:2e:
                    4b:d7:63:10:c2:7f:0b:35:11:b2:ac:8c:d0:05:8f:
                    5b:25:c8:2f:f3:f7:35:91:83:9c:90:af:91:e9:0f:
                    12:2c:ed:e7:65:5a:5d:7f:af:54:f8:1b:43:b3:dc:
                    5a:9f:1c:63:4c:bd:96:42:3b:90:d2:55:1b:9f:6e:
                    c6:5d:38:89:50:d0:24:ee:ca:24:0a:2e:2f:a7:7a:
                    3a:2e:cb:5f:22:33:40:ba:78:e8:84:95:01:3c:0b:
                    fd:db:5a:7c:c2:d7:29:d7:65:57:16:f5:0a:05:bf:
                    37:6c:25:28:e5:5e:22:0e:00:4a:60:27:40:d8:0a:
                    8d:0e:9f:95:b7:bf:18:30:60:75:73:2a:67:ad:a7:
                    42:91:87:e5:be:9d:35:19:1e:46:87:57:a2:12:5e:
                    c3:b3:9d:bf:cd:e9:24:a7:16:72:d6:4d:fc:cd:40:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:89:15:BB:F8:71:F1:D4:FA:B3:4A:12:53:8C:A8:96:45:31:9B
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EyuJFbv4cfHU-rNKElOMqJZFMZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.133.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e8:43:3c:94:b6:be:35:39:0c:59:13:d8:4c:3c:ff:28:7a:
         2e:b3:a0:3a:4a:30:54:08:7d:bc:a4:2a:46:f8:f8:47:98:51:
         8d:76:3f:60:cc:d9:84:2d:0c:b2:f4:4c:cb:62:80:67:21:93:
         58:43:fa:af:60:23:4c:79:25:b3:5c:d6:33:d8:2b:62:5e:51:
         f0:66:f6:b5:b4:0a:c5:79:ff:86:ff:93:5d:0a:0b:39:e2:f0:
         84:e7:7e:47:c4:0a:bf:ff:9f:ef:1f:a8:38:98:d4:d9:85:b5:
         b8:7d:db:b8:70:58:db:2a:8b:98:28:0c:c7:e7:d4:55:38:5f:
         19:a0:5f:fd:12:ef:13:57:b2:91:ba:9a:1e:1f:d3:0b:0f:21:
         c6:bb:e2:2a:14:84:61:ff:85:43:36:76:16:b2:c4:b9:60:89:
         d8:e1:46:a5:81:60:8c:1d:16:82:90:cb:69:13:90:b0:9f:fd:
         c1:75:95:12:35:02:09:51:dc:88:fd:8a:8d:ac:98:11:11:0d:
         5d:78:48:f4:34:93:e7:44:e3:60:3c:9f:d6:1e:ac:07:3c:8c:
         40:e5:97:7d:7b:9a:c6:90:54:49:5e:d4:4a:1d:f5:d8:e7:55:
         af:f2:27:96:da:6a:28:fd:cf:48:22:ec:08:3e:04:06:a4:be:
         33:3a:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org