Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa
File:                     euPwUMyZn-vkdiei1LNUVQlEPEY.roa (raw, json)
Hash identifier:          f7GxQ//n27Ptg8IDA8Dh1k9lYy4aQbQsOsDUnCdlfz0=
Subject key identifier:   7A:E3:F0:50:CC:99:9F:EB:E4:76:27:A2:D4:B3:54:55:09:44:3C:46
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       018CC2DB659ACAAF4FBD2664D27DDF45BD86
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa
Signing time:             Mon 01 Jan 2024 02:30:07 +0000
ROA not before:           Mon 01 Jan 2024 02:30:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60842
IP address blocks:        185.39.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 05:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:65:9a:ca:af:4f:bd:26:64:d2:7d:df:45:bd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jan  1 02:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ae3f050cc999febe47627a2d4b3545509443c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:89:27:2e:38:c8:9c:3c:af:50:31:5b:db:
                    19:4d:5f:db:9a:6b:dc:fc:16:86:cf:16:99:26:b2:
                    7f:83:67:4f:96:6d:40:7c:87:7e:6a:9d:60:90:af:
                    72:92:1e:4b:17:ab:f5:0b:74:8f:75:87:70:89:6f:
                    60:cc:f3:1b:69:92:6b:57:7b:5a:e3:ed:d6:3c:6d:
                    0f:d8:0e:2f:f3:1a:53:99:13:b7:7a:5e:4e:49:a5:
                    65:23:1f:e9:0f:2f:89:a1:91:af:fc:74:34:2e:16:
                    42:1b:b1:3c:1e:c3:31:e5:b6:93:b5:15:30:b6:bc:
                    b6:48:a6:8f:95:44:4d:27:86:3c:dc:33:06:85:f7:
                    b2:53:c1:13:cd:c5:78:2f:b7:6d:9c:35:5e:dd:18:
                    77:db:dc:f4:d4:f1:e4:56:f8:72:56:a7:06:9b:27:
                    3e:65:cf:90:8d:e0:42:23:c3:64:84:40:65:24:4f:
                    31:19:ca:ac:6c:10:6f:3a:d2:df:a6:36:33:38:6e:
                    8d:16:f1:bb:96:f1:4c:55:68:30:5d:32:00:8f:21:
                    f2:33:17:0e:8a:4d:ca:3b:4a:05:38:bc:e8:f6:cd:
                    14:9e:86:55:5a:7d:29:a7:14:60:e0:98:0c:a8:1b:
                    a3:03:bb:08:da:9a:0e:80:ef:7f:0e:23:79:63:1b:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E3:F0:50:CC:99:9F:EB:E4:76:27:A2:D4:B3:54:55:09:44:3C:46
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/euPwUMyZn-vkdiei1LNUVQlEPEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.39.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:4e:4e:05:ad:fc:45:11:11:6a:a0:9b:54:1f:f3:f2:3d:82:
         b4:b0:78:67:87:a1:ad:61:14:d4:d2:1c:f3:fc:c4:d1:0d:11:
         0e:a0:77:f0:e0:86:1b:61:4b:7e:db:86:d4:3c:c4:1d:69:af:
         01:61:87:b3:c2:62:e8:3e:e6:00:00:6f:46:15:a6:c0:33:7c:
         7a:46:0c:d5:7d:82:4e:cf:a0:53:4a:5c:20:a7:c0:35:6c:e7:
         a1:24:8f:91:b8:db:28:0f:3f:2a:0b:a5:91:a2:33:d2:a2:8a:
         ce:e4:95:09:be:a1:37:51:aa:cd:ef:13:78:4c:8c:44:f2:58:
         e8:71:7a:92:6c:76:22:56:5c:4a:43:37:e9:d6:ed:38:06:9e:
         eb:ec:43:9b:03:0d:c5:47:83:ca:19:61:d8:32:1c:3f:02:18:
         53:61:cf:fe:f4:56:c1:98:a7:21:8f:28:b1:39:97:48:bc:ac:
         9a:bb:a9:6d:ca:f6:84:11:b4:0c:47:89:eb:c0:b8:f1:74:d9:
         3d:f2:fc:bd:0f:73:6e:c4:17:1a:19:8e:d2:33:7d:8a:aa:c5:
         f6:fa:f6:6c:ee:70:33:0f:3d:3c:34:75:a0:9d:0d:9e:6e:b2:
         1c:f6:1d:8b:fa:9c:ac:ea:8f:aa:bb:c5:09:77:5b:40:43:b4:
         bf:27:eb:64
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 1 06:11:58 2024 by rpki-client on console-ams.rpki-client.org