Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jzh2sgvt17mkOGoNwOWDT9Gg4bM.roa
File:                     jzh2sgvt17mkOGoNwOWDT9Gg4bM.roa (raw, json)
Hash identifier:          a4LU8RlKQo/DvX/N7pDJ5rYr7M0xpBhgZvfqE3f5xJo=
Subject key identifier:   8F:38:76:B2:0B:ED:D7:B9:A4:38:6A:0D:C0:E5:83:4F:D1:A0:E1:B3
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       018571D7B824FCD8898028F30FFD97D51B3B
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jzh2sgvt17mkOGoNwOWDT9Gg4bM.roa
Signing time:             Mon 02 Jan 2023 09:37:20 +0000
ROA not before:           Mon 02 Jan 2023 09:37:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49234
IP address blocks:        193.30.80.0/24 maxlen: 25

Validation:               Failed, certificate revoked on Fri 26 May 2023 06:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:b8:24:fc:d8:89:80:28:f3:0f:fd:97:d5:1b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  2 09:37:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f3876b20bedd7b9a4386a0dc0e5834fd1a0e1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:58:cc:cb:c2:2b:58:e0:31:89:df:dd:9b:
                    91:da:ac:de:da:77:f0:0a:31:7d:9b:59:e7:cf:b9:
                    ea:91:dc:1f:bb:10:f7:b4:11:4d:ed:61:0b:50:79:
                    37:c5:05:62:bd:64:3d:b8:b2:50:7e:d3:6f:12:97:
                    e7:ae:b3:4c:a5:54:c7:de:0c:7b:15:e1:74:2e:a9:
                    73:a8:41:22:e8:2a:e1:18:86:56:3b:39:bd:46:cc:
                    10:fc:1c:18:de:b2:ed:04:e7:78:11:93:a0:0a:81:
                    ac:61:52:11:ba:90:c9:0b:d5:ed:27:48:6d:0b:71:
                    be:bb:bf:c1:00:7d:f4:97:10:8c:bf:55:e0:a8:53:
                    bd:82:cf:d2:7b:2b:58:92:82:5e:f8:b9:fc:67:21:
                    2e:f8:01:4c:9f:92:10:b6:18:ea:b6:97:17:df:fc:
                    05:97:af:2c:8a:3c:6c:32:23:7b:96:78:50:96:88:
                    e8:f4:de:53:9d:8d:06:93:61:0a:af:6e:c4:7d:73:
                    46:4c:bc:b2:52:eb:c1:5c:a9:d7:2c:25:b2:ea:e1:
                    5e:16:56:b4:ad:1f:98:75:da:39:22:1f:79:84:6d:
                    0c:de:2e:a1:3d:6e:0e:73:c8:74:c7:a8:ae:24:f4:
                    98:1a:64:3a:7a:fc:73:2f:b1:12:bc:73:2a:78:78:
                    be:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:38:76:B2:0B:ED:D7:B9:A4:38:6A:0D:C0:E5:83:4F:D1:A0:E1:B3
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/jzh2sgvt17mkOGoNwOWDT9Gg4bM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:07:11:cf:1a:eb:ce:5e:04:5f:53:ec:69:60:56:2c:1b:3e:
         8d:09:f1:6c:5e:91:81:ba:d5:f2:f4:3c:88:0d:2e:66:51:04:
         26:a0:ac:79:ce:0e:05:87:64:e7:8a:68:9a:ee:58:37:24:57:
         e4:f7:50:30:d9:6e:ad:df:a9:7c:ae:b0:a9:e6:79:ee:f4:4b:
         1a:a4:c4:05:61:d4:77:0d:b4:f2:b6:01:ff:39:ae:d2:43:59:
         b2:be:0d:88:79:cb:0a:94:0c:41:6f:63:75:41:8c:e0:cd:60:
         4e:07:56:80:69:67:24:90:b1:e7:07:78:88:51:8d:b8:64:ff:
         c8:8f:20:55:7c:2c:78:60:3a:4b:fe:ed:6a:a6:a8:ad:45:44:
         11:0d:72:2e:90:12:7e:55:4c:3a:b0:e3:18:c9:ab:69:99:fa:
         6b:6b:39:4f:be:27:b5:11:d9:49:e2:db:aa:f5:00:e9:1e:ca:
         d7:c6:ed:d1:87:2f:30:f0:20:ad:16:33:e6:0d:7d:95:e2:94:
         70:4c:93:71:f1:49:f8:7c:ad:a7:3c:a7:cc:06:c7:0f:02:ff:
         47:0d:bf:32:35:b4:8c:a2:ea:20:f1:6d:c1:54:89:79:5d:e7:
         ba:f3:8b:fd:e6:ee:e6:ea:0f:b1:0d:98:2d:2d:c7:01:49:ed:
         f9:a3:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:30 2024 by rpki-client on console-ams.rpki-client.org