Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/6qIHWc0B2iVTxSuI85V63Q0FBak.roa
File:                     6qIHWc0B2iVTxSuI85V63Q0FBak.roa (raw, json)
Hash identifier:          02BPX7JHz574gv7Qc8w9e5eRzVY5VhnWoW76JjN5DAk=
Subject key identifier:   EA:A2:07:59:CD:01:DA:25:53:C5:2B:88:F3:95:7A:DD:0D:05:05:A9
Certificate issuer:       /CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
Certificate serial:       018F57C36E852CA162A47D24068D9184DD80
Authority key identifier: 57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/6qIHWc0B2iVTxSuI85V63Q0FBak.roa
Signing time:             Wed 08 May 2024 10:32:56 +0000
ROA not before:           Wed 08 May 2024 10:32:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58232
IP address blocks:        80.75.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 14:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:57:c3:6e:85:2c:a1:62:a4:7d:24:06:8d:91:84:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b89f5cc78219ea1273f9f53c5b9e33bc5dbeb5
        Validity
            Not Before: May  8 10:32:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eaa20759cd01da2553c52b88f3957add0d0505a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:03:68:01:4b:1b:3f:e1:1a:92:63:ce:fb:c8:
                    0e:6e:8e:00:0a:d9:8e:d5:92:07:ce:4e:ac:94:89:
                    b2:51:26:fe:a4:32:f6:24:b6:c3:f3:4c:e6:74:48:
                    2c:01:1e:5a:c8:a3:a4:52:87:b2:17:8c:2e:52:1c:
                    ee:b9:aa:f8:12:5f:51:c5:b3:a2:1d:31:1f:27:db:
                    b5:d3:75:44:d5:68:c7:1f:14:67:5d:14:4a:53:77:
                    b9:5c:e7:93:55:28:97:bb:a5:bf:4d:2b:59:e5:7a:
                    e3:ea:56:90:13:c8:ad:12:b4:d3:4f:00:a7:a4:70:
                    74:eb:00:2c:c8:46:26:d2:73:8c:45:6e:82:7e:35:
                    8b:d7:4a:de:2b:00:75:65:6c:16:a6:64:89:0d:e3:
                    23:9c:11:be:e8:fd:f1:33:a2:b2:41:d4:b7:5b:2d:
                    be:fc:8c:2a:0e:35:3d:8b:5c:55:59:0c:51:dd:de:
                    29:88:6a:56:2d:e3:2a:d7:ad:e7:f9:c5:d0:ea:5f:
                    5d:7d:bb:88:6a:c8:1a:8a:f0:a9:99:7d:3c:ce:8e:
                    be:4b:9c:98:ca:98:c1:f0:30:8b:8c:6a:7e:91:4e:
                    3a:cd:40:c1:ab:d6:45:5b:03:d9:1a:26:85:24:90:
                    71:29:52:e1:bb:aa:97:bc:74:5b:1c:6b:7f:57:32:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A2:07:59:CD:01:DA:25:53:C5:2B:88:F3:95:7A:DD:0D:05:05:A9
            X509v3 Authority Key Identifier:
                keyid:57:B8:9F:5C:C7:82:19:EA:12:73:F9:F5:3C:5B:9E:33:BC:5D:BE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7ifXMeCGeoSc_n1PFueM7xdvrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/6qIHWc0B2iVTxSuI85V63Q0FBak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/083198-49a7-4864-a46d-6375e1645604/1/V7ifXMeCGeoSc_n1PFueM7xdvrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:09:15:0d:44:94:10:17:ed:a5:9f:1e:ab:0a:65:aa:72:36:
         4d:18:0c:00:8c:1a:a5:54:da:c6:fe:21:cd:0c:f2:57:fd:fc:
         d2:ac:04:24:a2:62:9e:c9:7d:b4:77:82:2f:0e:dd:84:af:3d:
         e7:84:fa:57:22:9e:83:d3:97:e5:27:54:a7:b9:48:af:e9:05:
         2d:08:10:9a:e9:2c:d8:a8:47:85:9f:17:21:94:4f:ec:a6:64:
         3f:c7:d0:60:21:73:80:0f:e3:9e:aa:c9:06:6b:54:b5:f2:44:
         12:19:6f:b1:5c:45:f8:6c:e4:36:31:2f:01:54:66:f4:3e:35:
         a0:b5:3f:0b:00:b6:ae:c8:70:5b:30:fe:98:7f:54:74:b8:8e:
         1d:eb:15:98:09:0c:22:30:fe:86:d7:5a:39:bd:79:54:06:38:
         7e:50:88:62:e7:da:70:9e:a2:55:29:c9:a6:96:d5:3f:05:89:
         6d:93:57:b0:9e:24:1e:c6:58:93:54:3a:42:91:41:71:53:e1:
         aa:85:b3:23:0e:a5:bb:62:28:cb:59:15:e4:71:b4:b6:df:d2:
         fb:6a:3d:dc:ed:99:7b:ad:ca:2d:cc:8a:87:a2:67:7b:9c:0d:
         63:38:54:44:2c:8f:36:cb:95:73:4d:2d:74:35:4e:59:ad:62:
         9e:3f:2f:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9Xw26FLKFipH0kBo2RhN2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjg5ZjVjYzc4MjE5ZWExMjczZjlmNTNjNWI5ZTMzYmM1
ZGJlYjUwHhcNMjQwNTA4MTAzMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWEyMDc1OWNkMDFkYTI1NTNjNTJiODhmMzk1N2FkZDBkMDUwNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwNoAUsbP+EakmPO+8gObo4ACtmO
1ZIHzk6slImyUSb+pDL2JLbD80zmdEgsAR5ayKOkUoeyF4wuUhzuuar4El9RxbOi
HTEfJ9u103VE1WjHHxRnXRRKU3e5XOeTVSiXu6W/TStZ5Xrj6laQE8itErTTTwCn
pHB06wAsyEYm0nOMRW6CfjWL10reKwB1ZWwWpmSJDeMjnBG+6P3xM6KyQdS3Wy2+
/IwqDjU9i1xVWQxR3d4piGpWLeMq163n+cXQ6l9dfbuIasgaivCpmX08zo6+S5yY
ypjB8DCLjGp+kU46zUDBq9ZFWwPZGiaFJJBxKVLhu6qXvHRbHGt/VzK/IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqiB1nNAdolU8UriPOVet0NBQWpMB8GA1UdIwQY
MBaAFFe4n1zHghnqEnP59TxbnjO8Xb61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdpZlhNZUNHZW9TY19uMVBGdWVNN3hkdnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODMxOTgtNDlhNy00ODY0LWE0NmQt
NjM3NWUxNjQ1NjA0LzEvNnFJSFdjMEIyaVZUeFN1STg1VjYzUTBGQmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wODMxOTgtNDlhNy00ODY0LWE0NmQtNjM3NWUxNjQ1NjA0
LzEvVjdpZlhNZUNHZW9TY19uMVBGdWVNN3hkdnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEvXMA0G
CSqGSIb3DQEBCwUAA4IBAQC+CRUNRJQQF+2lnx6rCmWqcjZNGAwAjBqlVNrG/iHN
DPJX/fzSrAQkomKeyX20d4IvDt2Erz3nhPpXIp6D05flJ1SnuUiv6QUtCBCa6SzY
qEeFnxchlE/spmQ/x9BgIXOAD+OeqskGa1S18kQSGW+xXEX4bOQ2MS8BVGb0PjWg
tT8LALauyHBbMP6Yf1R0uI4d6xWYCQwiMP6G11o5vXlUBjh+UIhi59pwnqJVKcmm
ltU/BYltk1ewniQexliTVDpCkUFxU+GqhbMjDqW7YijLWRXkcbS239L7aj3c7Zl7
rcotzIqHomd7nA1jOFRELI82y5VzTS10NU5ZrWKePy+E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org