Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/GBkys9i1iFfCIHPF13i1dfcJHS0.roa
File:                     GBkys9i1iFfCIHPF13i1dfcJHS0.roa (raw, json)
Hash identifier:          6edFiI83ljaWQHG0stCbz9LSq+iPbfmIAnBohxB2cZY=
Subject key identifier:   18:19:32:B3:D8:B5:88:57:C2:20:73:C5:D7:78:B5:75:F7:09:1D:2D
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       018ADAE66627E33B8C16659BCFFFA3ABCFA7
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/GBkys9i1iFfCIHPF13i1dfcJHS0.roa
Signing time:             Thu 28 Sep 2023 08:27:27 +0000
ROA not before:           Thu 28 Sep 2023 08:27:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     40676
IP address blocks:        188.215.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:da:e6:66:27:e3:3b:8c:16:65:9b:cf:ff:a3:ab:cf:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Sep 28 08:27:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=181932b3d8b58857c22073c5d778b575f7091d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:e7:32:ba:31:24:8e:80:80:37:17:4a:64:
                    fd:c0:33:a0:53:b3:5d:89:87:c3:2a:c9:8f:c0:65:
                    33:a5:cf:9d:b1:49:b7:8e:3b:85:19:d7:c3:cc:92:
                    f7:bb:a0:18:25:d6:42:de:aa:21:25:ab:cd:d2:57:
                    23:13:1b:dd:0d:3a:5c:ad:38:e7:f6:cb:64:c6:c1:
                    d5:71:04:1f:ff:3a:cc:ae:f4:61:a4:f4:49:3b:35:
                    96:c8:a4:a6:3b:46:d3:77:f0:fa:4c:54:18:d5:a5:
                    86:46:fb:13:4f:39:73:80:88:c2:4d:ac:9e:a3:c1:
                    04:9f:c5:48:cd:92:4f:4c:c2:0a:62:a6:19:85:be:
                    31:c7:4b:4d:36:a1:49:64:23:44:04:d3:11:5a:ec:
                    90:d1:14:cf:8d:f0:81:d4:64:46:c3:a7:9b:10:32:
                    d9:81:a2:67:53:2e:0a:41:c1:54:8e:47:a4:17:11:
                    57:92:38:25:95:f8:69:fe:e7:2d:b3:1d:3c:e0:aa:
                    e5:fb:1b:76:38:be:3a:75:bc:dc:f7:b3:f3:93:22:
                    04:78:32:11:db:e1:d5:9a:8d:13:f5:8e:5c:ef:cd:
                    45:d7:a3:0d:ce:c2:cf:bc:ce:7c:29:eb:dc:b8:44:
                    46:5e:d3:d0:84:89:9f:d9:78:bc:4e:f6:e6:6f:ee:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:19:32:B3:D8:B5:88:57:C2:20:73:C5:D7:78:B5:75:F7:09:1D:2D
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/GBkys9i1iFfCIHPF13i1dfcJHS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:c3:f3:9a:1c:6b:f2:92:7c:16:52:e7:24:9a:ea:45:98:be:
         ad:64:ff:e3:36:33:dd:ab:cc:85:7f:73:8d:18:a2:92:8f:20:
         b6:71:56:00:48:bf:93:55:a4:ab:b1:98:0d:18:fa:95:30:b8:
         bc:ef:b7:81:54:42:8c:d0:73:91:ee:d8:6c:06:9f:b1:09:b1:
         52:f9:56:41:49:2f:c9:b6:03:db:7d:38:98:c5:db:a8:a0:f1:
         a8:b4:40:a1:c6:83:13:75:ed:20:d8:9f:8d:7f:b6:7d:10:41:
         f4:52:f4:c6:cc:f4:e1:e9:9e:54:d7:48:7b:f2:f2:50:13:2b:
         95:8d:c9:4c:45:8a:3d:c4:45:e9:5d:4c:bd:09:c3:64:35:c3:
         69:8c:2d:a1:03:46:22:b3:a4:3c:ca:b1:5f:98:e8:d7:28:cc:
         be:0e:cd:a5:ac:4d:ae:1d:f1:63:6e:80:dc:b6:ea:63:3e:ad:
         8b:8d:3a:a6:e5:46:2f:76:95:7b:82:a5:4e:fa:64:4d:58:87:
         db:2e:fa:8e:37:9b:41:15:82:88:ed:96:cc:71:5a:6a:59:d0:
         d1:ed:b9:19:7e:27:73:74:9e:58:6d:5f:0c:cc:a3:bc:50:3f:
         b4:19:23:bf:1a:03:dd:8a:df:28:a8:3d:3c:08:b1:17:30:29:
         fd:e5:b0:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYra5mYn4zuMFmWbz/+jq8+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx
ZWU3ZWEwHhcNMjMwOTI4MDgyNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE5MzJiM2Q4YjU4ODU3YzIyMDczYzVkNzc4YjU3NWY3MDkxZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXXnMroxJI6AgDcXSmT9wDOgU7Nd
iYfDKsmPwGUzpc+dsUm3jjuFGdfDzJL3u6AYJdZC3qohJavN0lcjExvdDTpcrTjn
9stkxsHVcQQf/zrMrvRhpPRJOzWWyKSmO0bTd/D6TFQY1aWGRvsTTzlzgIjCTaye
o8EEn8VIzZJPTMIKYqYZhb4xx0tNNqFJZCNEBNMRWuyQ0RTPjfCB1GRGw6ebEDLZ
gaJnUy4KQcFUjkekFxFXkjgllfhp/uctsx084Krl+xt2OL46dbzc97PzkyIEeDIR
2+HVmo0T9Y5c781F16MNzsLPvM58KevcuERGXtPQhImf2Xi8Tvbmb+4qHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgZMrPYtYhXwiBzxdd4tXX3CR0tMB8GA1UdIwQY
MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt
YTU3NjA0YTNmNmJiLzEvR0JreXM5aTFpRmZDSUhQRjEzaTFkZmNKSFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi
LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNdQMA0G
CSqGSIb3DQEBCwUAA4IBAQAfw/OaHGvyknwWUuckmupFmL6tZP/jNjPdq8yFf3ON
GKKSjyC2cVYASL+TVaSrsZgNGPqVMLi877eBVEKM0HOR7thsBp+xCbFS+VZBSS/J
tgPbfTiYxduooPGotEChxoMTde0g2J+Nf7Z9EEH0UvTGzPTh6Z5U10h78vJQEyuV
jclMRYo9xEXpXUy9CcNkNcNpjC2hA0Yis6Q8yrFfmOjXKMy+Ds2lrE2uHfFjboDc
tupjPq2LjTqm5UYvdpV7gqVO+mRNWIfbLvqON5tBFYKI7ZbMcVpqWdDR7bkZfidz
dJ5YbV8MzKO8UD+0GSO/GgPdit8oqD08CLEXMCn95bB/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org