Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/euGApQywILtnBicYSfg0EY71pWI.roa
File:                     euGApQywILtnBicYSfg0EY71pWI.roa (raw, json)
Hash identifier:          JuQzqAg8ZSCAOm86+z4AKe9DZ48VrB7x5uv8z+hZmYk=
Subject key identifier:   7A:E1:80:A5:0C:B0:20:BB:67:06:27:18:49:F8:34:11:8E:F5:A5:62
Certificate issuer:       /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial:       018D747932F17EBD9C0237CF9E5E52B5CADD
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/euGApQywILtnBicYSfg0EY71pWI.roa
Signing time:             Sun 04 Feb 2024 14:15:16 +0000
ROA not before:           Sun 04 Feb 2024 14:15:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47962
IP address blocks:        37.122.152.0/22 maxlen: 22
                          37.122.152.0/24 maxlen: 24
                          37.122.153.0/24 maxlen: 24
                          37.122.154.0/23 maxlen: 23
                          37.122.154.0/24 maxlen: 24
                          37.122.155.0/24 maxlen: 24
                          37.122.156.0/23 maxlen: 23
                          37.122.156.0/24 maxlen: 24
                          37.122.157.0/24 maxlen: 24
                          176.106.224.0/22 maxlen: 22
                          176.106.224.0/23 maxlen: 23
                          176.106.224.0/24 maxlen: 24
                          176.106.230.0/23 maxlen: 23
                          176.106.230.0/24 maxlen: 24
                          176.106.231.0/24 maxlen: 24
                          2a0f:6a80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 10:48:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:74:79:32:f1:7e:bd:9c:02:37:cf:9e:5e:52:b5:ca:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
        Validity
            Not Before: Feb  4 14:15:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ae180a50cb020bb6706271849f834118ef5a562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:62:f1:42:00:49:a3:51:b0:7c:b1:6c:fa:
                    27:dc:27:09:ba:96:c8:a7:83:67:de:d6:7d:fc:4e:
                    9b:05:79:bf:b9:c8:e8:5f:98:8b:70:0d:c3:27:df:
                    7c:2a:5e:f4:60:57:c0:71:b3:67:36:3a:a4:41:53:
                    30:1f:6b:86:f7:11:94:ae:13:63:0b:0d:5c:5e:39:
                    ba:07:75:e0:53:a5:d9:1e:ec:4d:0f:a9:1b:5d:02:
                    31:62:8e:11:d0:fd:ac:40:02:48:ba:91:80:87:d3:
                    ee:4d:f3:2f:0a:29:f7:ed:10:fd:46:ba:1d:1c:6a:
                    6e:96:d0:fa:a7:4f:41:24:d0:28:ab:ee:40:a4:94:
                    81:17:f0:cb:f5:df:71:dd:3c:12:91:a2:d4:f8:dd:
                    d1:91:d0:4a:d0:d1:4b:96:2a:d6:76:25:dc:d0:cf:
                    f0:2a:b1:28:a0:d5:42:0a:b4:ff:2e:71:e0:58:77:
                    da:0c:85:1a:8f:ce:36:34:ce:7d:f1:32:3a:2a:f5:
                    c7:9f:d1:86:71:ac:c1:22:34:d4:31:07:c4:84:37:
                    3b:e8:11:d1:a4:66:2e:07:5e:d3:61:0c:13:bd:43:
                    c5:57:fd:fe:d5:ca:ab:86:1e:b8:30:41:fb:da:22:
                    6a:e1:4f:5f:4c:c8:19:90:4d:0b:25:7c:ea:c5:b7:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:80:A5:0C:B0:20:BB:67:06:27:18:49:F8:34:11:8E:F5:A5:62
            X509v3 Authority Key Identifier:
                keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/euGApQywILtnBicYSfg0EY71pWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.122.152.0-37.122.157.255
                  176.106.224.0/22
                  176.106.230.0/23
                IPv6:
                  2a0f:6a80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:96:27:24:78:57:fc:82:a9:c7:39:84:43:4e:a5:a0:f3:
         b6:9a:12:ea:89:26:7c:3b:80:03:33:0d:85:9e:3e:0f:6d:5e:
         03:d6:fc:32:0f:fc:dd:35:24:61:19:20:0b:f2:7b:b5:df:75:
         fb:43:c9:e4:f1:a4:f1:9a:18:7c:1b:8d:17:52:10:cc:fd:a6:
         50:f2:c6:ae:f6:a1:c4:d6:1f:4d:f5:a8:a7:ee:5e:53:0e:5e:
         cd:81:45:a7:88:80:1d:29:d7:9a:c2:f6:48:18:df:4e:44:3d:
         48:05:67:9b:55:8f:bf:13:35:55:43:80:03:c2:e8:0c:c8:b7:
         dd:19:ab:0f:0d:59:f8:e3:a7:bb:a4:25:52:37:68:dd:81:e4:
         0a:e6:34:1e:62:dc:3e:eb:46:65:b7:2c:90:31:2e:1c:0c:cf:
         11:1d:26:48:b1:3a:12:8b:bf:bc:37:72:07:28:de:d9:5f:3e:
         5f:c2:44:aa:4c:f9:e9:cd:6e:11:b5:0f:f8:78:8c:9d:47:47:
         4a:82:c6:02:4e:e0:8d:3f:51:eb:4c:4e:be:f9:7a:4d:d4:d0:
         b0:07:52:b9:9b:1c:62:8d:83:ac:33:c6:03:4a:43:33:75:a3:
         18:63:cd:80:c5:11:f9:80:a1:37:fa:e1:90:bb:fb:57:09:e6:
         7f:a1:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org