Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0KIdBIfz_-sRC9ILT-BRmbHAdRU.roa
File:                     0KIdBIfz_-sRC9ILT-BRmbHAdRU.roa (raw, json)
Hash identifier:          /fe/lAuCyjUrJzYqu2dTm8K739CdI0LGbxWkqRtiwGA=
Subject key identifier:   D0:A2:1D:04:87:F3:FF:EB:11:0B:D2:0B:4F:E0:51:99:B1:C0:75:15
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01893F727000E3AD7A53BED0D2E6CC174867
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0KIdBIfz_-sRC9ILT-BRmbHAdRU.roa
Signing time:             Mon 10 Jul 2023 10:56:51 +0000
ROA not before:           Mon 10 Jul 2023 10:56:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        80.93.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 31 Jul 2023 13:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3f:72:70:00:e3:ad:7a:53:be:d0:d2:e6:cc:17:48:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Jul 10 10:56:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0a21d0487f3ffeb110bd20b4fe05199b1c07515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:ae:97:95:27:97:c2:90:a9:41:2d:32:1e:
                    d5:10:fd:f4:a5:ba:06:2d:9e:fe:dd:d6:02:ed:46:
                    5e:d4:0d:01:cb:39:f0:4f:01:95:1a:6c:c7:13:e5:
                    31:af:03:96:98:7c:df:9f:2b:94:6e:03:30:07:7e:
                    06:53:57:cb:17:36:d2:6e:f8:34:e3:fa:05:5b:e2:
                    c8:81:20:fa:5f:ce:e9:0a:a4:64:70:db:df:f7:df:
                    81:99:93:a6:09:5e:1b:6d:b4:47:42:2e:96:3c:5c:
                    38:cc:c8:78:16:0d:2e:7c:13:bc:4e:df:02:73:10:
                    83:e7:ce:3d:32:72:14:e5:df:ba:a5:ca:d9:bb:1f:
                    b0:4d:76:fe:5b:65:24:18:0a:fb:44:85:8e:89:ee:
                    14:18:35:58:47:39:00:ca:17:1c:8f:8c:ac:1e:31:
                    0d:22:3a:57:34:6f:f2:3f:bb:9b:d4:34:b8:9c:83:
                    7f:89:0e:68:3d:f3:6e:58:fd:d2:85:a6:07:c1:52:
                    2b:48:dc:ea:06:2a:61:14:8d:fe:a5:3f:d9:bb:63:
                    69:df:55:b2:63:64:63:9d:09:b8:12:bf:a7:3f:f5:
                    5c:38:d3:21:5c:ad:d5:b9:2d:e4:09:6d:d0:65:be:
                    54:d6:68:9c:72:e0:53:9d:1f:7e:d6:f2:b8:0d:21:
                    55:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:1D:04:87:F3:FF:EB:11:0B:D2:0B:4F:E0:51:99:B1:C0:75:15
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/0KIdBIfz_-sRC9ILT-BRmbHAdRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:e1:16:36:6b:52:5e:4d:51:85:53:2d:9c:50:c0:ba:9a:dc:
         14:43:70:81:be:40:9e:45:8e:a0:3e:62:4f:60:48:bc:0b:40:
         df:82:71:70:76:7e:07:44:c2:9f:83:f4:30:db:de:11:7a:b0:
         62:ad:3b:af:96:92:5c:86:1f:d1:2a:dd:e0:db:79:7f:e5:c1:
         ca:9b:7a:1e:4d:b3:81:b0:3d:cc:2c:9c:37:4e:32:4b:bb:12:
         eb:c4:92:7d:af:81:f5:11:85:33:9a:f3:b3:43:a9:7a:56:cc:
         df:6a:e7:60:be:2f:ee:cb:ce:07:43:da:20:2b:1b:61:cc:a7:
         33:c9:75:87:4d:d0:f7:80:36:93:c9:4e:ad:99:4f:48:53:2e:
         1a:02:ae:f2:48:cb:3f:d9:91:60:fc:a5:3c:66:7c:9d:78:46:
         05:a7:b1:44:ca:e5:78:a3:b0:9b:4a:45:8c:a3:1b:66:ab:30:
         ff:24:fd:1d:bc:a3:76:6c:e5:db:fa:46:63:d4:8d:fb:eb:f5:
         48:61:ab:f6:13:bb:b9:72:9a:e1:10:37:9d:72:73:31:db:e2:
         30:8a:bc:27:f0:24:75:95:34:04:fd:79:5a:f7:65:76:9e:0b:
         1c:3f:78:af:78:07:bf:fb:8f:27:fd:6a:22:c8:9f:10:ad:75:
         a4:ea:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org