Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EO6V9AVEajjyODua-mgykeyid-I.roa
File:                     EO6V9AVEajjyODua-mgykeyid-I.roa (raw, json)
Hash identifier:          UdbChZ/xcMymq1yxkK9CJ0GfGqT+axBGFYYnBL0r9f4=
Subject key identifier:   10:EE:95:F4:05:44:6A:38:F2:38:3B:9A:FA:68:32:91:EC:A2:77:E2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018609E1B8DD40F332B1034B5A74BC63FAFC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EO6V9AVEajjyODua-mgykeyid-I.roa
Signing time:             Tue 31 Jan 2023 22:10:32 +0000
ROA not before:           Tue 31 Jan 2023 22:10:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58057
IP address blocks:        194.50.94.0/24 maxlen: 24
                          194.50.92.0/24 maxlen: 24
                          139.28.96.0/22 maxlen: 24
                          45.131.184.0/22 maxlen: 24
                          45.136.136.0/22 maxlen: 24
                          94.177.122.0/24 maxlen: 24
                          85.202.203.0/24 maxlen: 24
                          45.12.68.0/22 maxlen: 24
                          31.42.183.0/24 maxlen: 24
                          2a0e:97c0:260::/44 maxlen: 44
                          2001:7f8:119::/48 maxlen: 48
                          2a10:cc46:1000::/36 maxlen: 48
                          2a0e:97c0:170::/48 maxlen: 48
                          2a09:4c0::/29 maxlen: 64
                          2a0e:b107:1165::/48 maxlen: 48
                          2a0c:3b80::/29 maxlen: 48
                          2a0e:97c1:200::/40 maxlen: 48
                          2a10:2f00:18f::/48 maxlen: 48
                          2a0e:b107:6f0::/44 maxlen: 44
                          2a0e:b107:9f2::/48 maxlen: 48
                          2a10:cc40:250::/44 maxlen: 48
                          2a0f:e404:102::/48 maxlen: 48
                          2a0e:b107:1786::/48 maxlen: 48
                          2a0e:b107:19c6::/48 maxlen: 48
                          2a10:cc41:800::/37 maxlen: 48
                          2a0e:97c4:100::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:09:e1:b8:dd:40:f3:32:b1:03:4b:5a:74:bc:63:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 31 22:10:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10ee95f405446a38f2383b9afa683291eca277e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:dc:32:da:35:00:3a:5e:22:45:d8:4f:24:
                    a4:21:9b:3b:25:de:bf:67:26:09:42:1b:66:ea:b2:
                    30:6a:1c:e8:2f:92:5d:79:45:63:57:85:ec:c6:90:
                    2b:6c:ce:7e:de:ac:3d:24:58:27:2b:ff:5c:9d:04:
                    1d:ca:42:ec:37:b1:84:46:0d:5e:a6:0e:a1:2e:24:
                    ab:95:85:2a:7b:27:d9:d8:c7:b6:25:94:bc:b9:04:
                    14:8a:30:dd:74:6c:0a:f0:9d:0e:28:95:8c:32:d1:
                    7b:75:81:ae:98:2d:bc:c2:73:1e:19:65:ad:5d:60:
                    7e:e8:21:d0:b1:05:93:10:59:3c:a6:96:4e:dd:f8:
                    35:41:1f:88:97:46:bc:7a:5d:b7:ef:5c:7d:8b:66:
                    92:c9:93:9a:e2:f8:9d:8b:14:a5:28:5d:84:64:66:
                    3d:88:59:54:42:7e:a2:71:c9:31:d5:c2:c7:6c:e0:
                    e7:46:a1:bc:e9:8b:f4:91:52:6a:52:e1:b9:f7:03:
                    60:6d:dc:a4:0e:90:b0:e2:1b:96:0d:57:5f:be:3e:
                    ea:7c:2c:90:be:57:38:4c:36:b1:92:b8:d8:5f:e2:
                    05:3e:58:85:a4:de:56:be:13:9e:61:5f:cd:90:1e:
                    81:bc:eb:cc:50:13:62:06:1a:77:a7:ce:04:91:f3:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EE:95:F4:05:44:6A:38:F2:38:3B:9A:FA:68:32:91:EC:A2:77:E2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EO6V9AVEajjyODua-mgykeyid-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                  45.12.68.0/22
                  45.131.184.0/22
                  45.136.136.0/22
                  85.202.203.0/24
                  94.177.122.0/24
                  139.28.96.0/22
                  194.50.92.0/24
                  194.50.94.0/24
                IPv6:
                  2001:7f8:119::/48
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0:170::/48
                  2a0e:97c0:260::/44
                  2a0e:97c1:200::/40
                  2a0e:97c4:100::/44
                  2a0e:b107:6f0::/44
                  2a0e:b107:9f2::/48
                  2a0e:b107:1165::/48
                  2a0e:b107:1786::/48
                  2a0e:b107:19c6::/48
                  2a0f:e404:102::/48
                  2a10:2f00:18f::/48
                  2a10:cc40:250::/44
                  2a10:cc41:800::/37
                  2a10:cc46:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:75:f5:20:f9:14:4c:a8:10:ed:a1:fc:b0:32:f2:72:cf:
         43:f9:9e:7d:1b:b2:c0:99:af:38:34:c7:17:5e:ac:d8:16:7e:
         6e:b3:c0:86:8b:8a:73:6b:f0:e0:7b:7b:34:67:a5:18:b0:93:
         e2:d6:8b:21:68:3d:2b:4d:ac:51:eb:de:5c:8b:92:cf:77:e3:
         15:b6:3d:5c:0e:03:2f:48:27:79:42:40:26:d4:0d:30:ba:23:
         17:00:89:8e:5c:ad:4c:e2:db:3b:07:32:b7:14:78:ba:16:06:
         68:9b:10:e5:71:5b:ae:63:a0:34:0f:63:c9:e8:64:6c:db:4a:
         43:c3:92:17:71:c1:80:9a:5f:40:56:dc:6e:03:ce:8d:8e:9e:
         26:ed:6d:1b:e4:b6:09:e5:4e:fb:7c:8a:10:d3:1c:db:21:17:
         48:64:96:ae:94:a4:ce:3e:65:19:b9:ed:c4:4a:b0:ec:7d:aa:
         8f:8c:24:38:22:3b:d5:02:88:06:c5:e8:cb:e8:5a:1f:61:fe:
         74:ce:ce:30:53:76:6f:e1:dd:22:b6:ea:25:e6:e9:06:a4:a3:
         51:0e:24:f4:39:b8:72:de:18:29:d0:06:f1:88:77:3c:08:f9:
         15:5a:92:33:ab:a2:b4:91:76:73:a7:e6:16:73:e5:02:a9:4a:
         dd:af:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net