Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6_spybOrt8C4RxBkpdsiNewCDrs.roa
File:                     6_spybOrt8C4RxBkpdsiNewCDrs.roa (raw, json)
Hash identifier:          tf6wzZf2dKfgOaid41tuGFlaCpgnmZsyJHzVgLGgRVQ=
Subject key identifier:   EB:FB:29:C9:B3:AB:B7:C0:B8:47:10:64:A5:DB:22:35:EC:02:0E:BB
Certificate issuer:       /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial:       018829660E31476B016D6595AEEA2D0FA995
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6_spybOrt8C4RxBkpdsiNewCDrs.roa
Signing time:             Wed 17 May 2023 11:08:54 +0000
ROA not before:           Wed 17 May 2023 11:08:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        80.255.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 13 Sep 2023 14:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:29:66:0e:31:47:6b:01:6d:65:95:ae:ea:2d:0f:a9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
        Validity
            Not Before: May 17 11:08:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebfb29c9b3abb7c0b8471064a5db2235ec020ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:1e:c7:d8:fa:90:d9:ed:09:e4:aa:a4:6a:
                    2d:7f:bb:66:9a:ba:08:db:2c:a7:42:42:bd:08:75:
                    d7:58:19:d2:85:17:01:51:06:fd:f1:53:d8:e0:80:
                    78:98:97:7f:48:4e:70:3b:7f:1a:16:bb:0d:60:54:
                    5a:c8:bc:05:a7:2c:1b:44:02:a5:a5:43:f5:d2:b9:
                    a3:1d:1c:ea:83:b2:21:72:3f:ba:e7:26:6e:84:07:
                    b2:d2:59:17:3f:e4:76:dd:99:11:43:c9:16:e8:5f:
                    28:06:f0:c4:bf:18:ed:b3:72:9a:8b:51:df:83:9b:
                    7e:8e:17:8c:ca:68:9d:42:b8:50:c5:1d:1d:c3:43:
                    f9:03:88:05:2d:be:f1:3b:41:83:3d:2c:44:a2:7d:
                    ab:49:01:52:6f:db:4d:57:a6:a8:fa:b7:b1:74:89:
                    62:aa:40:6c:82:45:9f:99:49:83:6a:99:a6:59:67:
                    3e:b2:1d:92:53:c1:28:9a:b4:0f:0a:6a:8c:16:71:
                    85:d9:77:da:ba:6d:9f:ae:09:f3:1f:ad:08:3a:b5:
                    de:e7:ca:bd:35:43:29:6d:f5:2a:ed:f0:b9:31:e9:
                    92:2e:9f:ea:07:2d:92:95:84:26:28:40:42:9f:fe:
                    01:08:92:51:dd:ca:f4:f9:ab:7c:89:dc:5b:03:90:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FB:29:C9:B3:AB:B7:C0:B8:47:10:64:A5:DB:22:35:EC:02:0E:BB
            X509v3 Authority Key Identifier:
                keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6_spybOrt8C4RxBkpdsiNewCDrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.255.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:65:2c:4d:3b:23:21:dc:72:b4:39:d7:df:56:79:a9:5a:
         c4:66:d7:e8:5b:d2:79:a9:52:ce:7c:80:24:2c:70:c2:01:6d:
         75:e1:e0:1c:2b:c0:0b:2a:1c:0a:e4:25:7c:2c:9e:40:1b:b6:
         76:9e:fe:30:07:a7:bc:23:b3:d2:a7:0f:7d:3f:aa:de:11:c5:
         6e:1b:1c:0f:3a:61:8a:74:63:72:89:ea:40:4d:93:7a:df:23:
         2c:2e:6d:59:6a:e6:52:95:66:8c:51:12:ef:ce:02:c3:d2:73:
         4a:ad:04:0d:a8:79:83:d6:4f:96:07:b9:f6:58:c8:bd:6f:6e:
         51:f3:0f:9f:cf:e1:9d:9e:0c:ac:aa:e8:d9:d4:c4:a7:70:bb:
         a4:0d:f5:ce:b0:c1:47:8c:7f:df:7d:ab:47:40:13:2d:de:43:
         11:95:d6:8a:bc:21:5d:9b:cf:7e:77:5c:41:05:71:e0:23:54:
         82:62:76:b2:1f:c0:9a:4a:b9:72:1f:db:f6:d9:64:e1:09:fd:
         9a:82:0d:a6:cb:d8:74:f3:84:a1:48:f9:11:fa:6f:6a:1a:fd:
         83:50:db:76:37:80:c3:d1:fe:d6:29:0b:11:12:56:8d:39:17:
         73:9c:2c:04:f2:fc:0b:cc:7c:c1:32:31:dd:94:04:a1:a0:58:
         0f:b7:d0:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgpZg4xR2sBbWWVruotD6mVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjMwNTE3MTEwODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmZiMjljOWIzYWJiN2MwYjg0NzEwNjRhNWRiMjIzNWVjMDIwZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvEex9j6kNntCeSqpGotf7tmmroI
2yynQkK9CHXXWBnShRcBUQb98VPY4IB4mJd/SE5wO38aFrsNYFRayLwFpywbRAKl
pUP10rmjHRzqg7Ihcj+65yZuhAey0lkXP+R23ZkRQ8kW6F8oBvDEvxjts3Kai1Hf
g5t+jheMymidQrhQxR0dw0P5A4gFLb7xO0GDPSxEon2rSQFSb9tNV6ao+rexdIli
qkBsgkWfmUmDapmmWWc+sh2SU8EomrQPCmqMFnGF2Xfaum2frgnzH60IOrXe58q9
NUMpbfUq7fC5MemSLp/qBy2SlYQmKEBCn/4BCJJR3cr0+at8idxbA5CFowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOv7Kcmzq7fAuEcQZKXbIjXsAg67MB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvNl9zcHliT3J0OEM0UnhCa3Bkc2lOZXdDRHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUP/gMA0G
CSqGSIb3DQEBCwUAA4IBAQCcNmUsTTsjIdxytDnX31Z5qVrEZtfoW9J5qVLOfIAk
LHDCAW114eAcK8ALKhwK5CV8LJ5AG7Z2nv4wB6e8I7PSpw99P6reEcVuGxwPOmGK
dGNyiepATZN63yMsLm1ZauZSlWaMURLvzgLD0nNKrQQNqHmD1k+WB7n2WMi9b25R
8w+fz+GdngysqujZ1MSncLukDfXOsMFHjH/ffatHQBMt3kMRldaKvCFdm89+d1xB
BXHgI1SCYnayH8CaSrlyH9v22WThCf2agg2my9h084ShSPkR+m9qGv2DUNt2N4DD
0f7WKQsRElaNORdznCwE8vwLzHzBMjHdlAShoFgPt9DG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:53 2024 by rpki-client on console-ams.rpki-client.org