Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gLn01SPcXoJjIZ-fFVdNk3nNWYU.roa
File:                     gLn01SPcXoJjIZ-fFVdNk3nNWYU.roa (raw, json)
Hash identifier:          mqMJgTT/DOl8YTjioZARb6Ru50NR2X3RPF4U+S33fYc=
Subject key identifier:   80:B9:F4:D5:23:DC:5E:82:63:21:9F:9F:15:57:4D:93:79:CD:59:85
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       0185719E7D027BA39A8055D0FE50D16D058A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gLn01SPcXoJjIZ-fFVdNk3nNWYU.roa
Signing time:             Mon 02 Jan 2023 08:34:50 +0000
ROA not before:           Mon 02 Jan 2023 08:34:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42135
IP address blocks:        193.232.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:7d:02:7b:a3:9a:80:55:d0:fe:50:d1:6d:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  2 08:34:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=80b9f4d523dc5e8263219f9f15574d9379cd5985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:3b:c2:b1:8b:7c:71:2b:83:83:68:e0:e9:
                    63:14:3c:b6:ba:d8:7a:80:7a:3c:f7:c5:ca:93:a1:
                    1b:fd:c7:7e:50:6c:06:c5:f7:9c:49:7d:d9:51:eb:
                    7b:18:71:39:de:aa:9b:a1:a2:e1:8b:55:47:74:45:
                    c8:b3:82:ed:e9:43:fd:61:1e:ca:22:43:b4:18:fb:
                    50:3b:20:b3:a5:e4:a8:67:d2:4a:d0:be:a8:d6:a0:
                    cb:0f:0f:c3:ac:3b:df:11:a6:6b:cf:c2:74:5d:d1:
                    e5:a3:44:14:d1:d0:04:18:1e:2f:93:91:a3:3b:57:
                    35:63:a2:5e:41:af:a2:8a:10:c7:ed:a9:0d:0b:1d:
                    16:80:e7:08:c7:35:e0:71:1c:6a:9b:a3:16:4f:b3:
                    0a:e4:28:3a:b1:17:46:d3:62:3f:b4:29:eb:e0:02:
                    4b:1e:5e:45:cf:4b:a5:1e:0d:60:94:94:d3:fa:a2:
                    b8:16:13:92:85:cc:5c:d6:61:df:bb:5e:48:37:f0:
                    38:1c:70:48:50:95:4a:04:10:77:cd:8f:54:e2:57:
                    12:f4:b5:34:8e:5b:70:bf:d5:43:ff:30:9b:a0:62:
                    fe:94:03:a6:84:e4:98:3c:15:ad:57:2b:53:9c:61:
                    48:e8:53:5e:2c:4a:18:86:f7:80:36:d9:4d:8c:96:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:F4:D5:23:DC:5E:82:63:21:9F:9F:15:57:4D:93:79:CD:59:85
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/gLn01SPcXoJjIZ-fFVdNk3nNWYU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.232.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:42:73:82:48:b7:e6:8b:e8:51:da:be:af:b0:d3:00:b0:
         ed:ec:02:09:8f:d5:0f:af:11:8d:8b:83:56:97:ab:d5:23:7e:
         4d:3d:86:a0:3f:8d:c5:bb:c0:8b:52:5d:c9:c6:2c:cb:7d:3d:
         36:41:0b:d1:a8:60:11:97:9a:a4:b8:22:91:2b:67:a9:60:15:
         db:4a:85:26:50:14:54:11:dc:19:d6:c5:ef:a0:73:e2:7d:c4:
         73:fc:b1:1a:83:3d:79:07:eb:52:8d:ef:cd:a3:54:2b:85:40:
         96:e9:af:d7:90:ae:16:16:73:50:05:ad:6e:b5:ef:95:46:33:
         bf:8e:e4:cf:5e:7a:70:cb:57:92:a0:31:c0:d4:59:c9:b8:88:
         8f:0f:13:34:7d:c0:22:07:d5:5f:80:c9:48:5a:c5:08:f8:6b:
         ed:31:f5:af:74:0c:3f:b8:07:b5:3c:b8:96:19:e6:c4:60:42:
         2d:39:a1:e4:7b:c0:c9:4c:7f:31:19:56:ed:8d:9b:74:35:60:
         da:07:05:da:5b:f6:86:06:8b:3c:1e:09:79:e4:43:a5:bc:e8:
         81:e4:fc:1f:25:20:0f:23:1b:90:50:5b:61:2c:93:51:58:5c:
         59:f5:2e:4a:bb:3c:f4:13:7e:1d:b7:a3:2e:de:0f:fb:eb:9f:
         79:27:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org