Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4D04rXJCBNdt5gNdShoAMsPmGgY.roa
File:                     4D04rXJCBNdt5gNdShoAMsPmGgY.roa (raw, json)
Hash identifier:          ZvcVCNY+vmURKOBsub0cK1A+B/YiLmNt3xPo/hJZXw4=
Subject key identifier:   E0:3D:38:AD:72:42:04:D7:6D:E6:03:5D:4A:1A:00:32:C3:E6:1A:06
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01877A3058ABA8897865C5549F8A1BC841FB
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4D04rXJCBNdt5gNdShoAMsPmGgY.roa
Signing time:             Thu 13 Apr 2023 10:36:41 +0000
ROA not before:           Thu 13 Apr 2023 10:36:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        80.93.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 May 2023 09:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:30:58:ab:a8:89:78:65:c5:54:9f:8a:1b:c8:41:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Apr 13 10:36:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e03d38ad724204d76de6035d4a1a0032c3e61a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:a0:cc:fd:27:f7:18:75:8e:1b:e0:c2:b9:
                    c4:ba:37:9d:15:cd:1e:e5:46:c3:e3:fb:36:9a:05:
                    fb:7d:7a:5a:81:92:72:2a:9d:d2:4e:4f:53:36:44:
                    34:08:89:c3:ae:e0:0f:5d:76:68:2f:2f:8f:13:82:
                    bf:fb:4b:5f:7c:49:20:45:ea:91:fb:d8:bb:52:1e:
                    89:4f:2b:73:48:9c:b2:c1:6c:1f:3c:fe:8d:4a:8b:
                    62:bf:45:e2:dc:f0:38:31:53:0b:16:58:23:ba:d9:
                    ee:51:23:f6:0c:00:59:83:f0:bd:e1:ef:b0:4f:1b:
                    8e:48:cc:11:29:13:5f:7c:49:43:1d:e8:41:45:39:
                    54:eb:50:19:1d:ba:af:27:2a:d4:a4:89:df:9d:cb:
                    33:08:d8:f7:c4:64:77:e0:7b:73:54:e8:dd:3f:19:
                    02:e1:b2:b5:22:43:00:3c:d4:3b:8b:c3:5a:cb:b2:
                    42:85:f8:35:a6:20:13:3f:34:23:27:ca:0c:f2:38:
                    af:e6:c9:f9:ea:89:4d:43:a6:b3:41:54:cb:48:55:
                    d0:c0:c9:ed:ca:e1:e7:ea:1f:23:28:3f:cc:e8:75:
                    41:ce:93:88:13:64:e5:a8:9f:03:a1:f7:dd:8b:52:
                    f8:32:be:7a:dd:77:21:a4:e2:1f:55:15:7f:cd:35:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:38:AD:72:42:04:D7:6D:E6:03:5D:4A:1A:00:32:C3:E6:1A:06
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/4D04rXJCBNdt5gNdShoAMsPmGgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:14:3a:ac:8f:68:1d:b0:9a:87:44:ab:27:f1:6a:bc:36:f7:
         48:60:fd:5f:84:c3:83:eb:d2:6c:8c:ab:ad:58:da:84:be:17:
         1c:4a:55:f7:0e:85:32:ad:cb:1b:fa:b6:50:43:b5:f0:ca:6b:
         51:cf:cc:08:69:65:2a:82:dd:ee:df:30:01:82:c5:f6:b4:f4:
         f4:29:0d:62:85:7c:31:d4:5b:5c:2f:a7:71:16:21:f8:83:a6:
         a1:58:95:f9:d7:48:11:98:fd:3c:a8:1f:90:2f:14:f0:71:3a:
         61:dd:ae:45:5a:96:31:a1:58:7b:2f:90:34:57:1f:0c:e5:6e:
         94:ec:20:44:f7:33:88:fa:b2:22:32:08:2e:50:87:21:7c:56:
         80:1c:d6:94:05:48:10:14:8e:ac:70:52:a7:c0:d4:cf:fa:c7:
         b9:54:9b:a4:d6:69:1f:a8:cf:28:1b:72:00:96:c8:25:02:63:
         62:b3:0d:9a:92:d1:ea:2b:d6:14:cc:1b:47:96:67:e6:e5:53:
         32:7f:16:bd:55:4c:24:14:54:19:60:db:fb:03:6f:fc:e4:04:
         b2:f1:c7:31:72:6a:30:2e:67:c6:da:38:fc:58:d7:ff:72:80:
         fc:21:bc:b3:bb:ea:8e:2a:e7:ea:e5:03:32:01:1f:b2:31:27:
         9f:24:f0:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd6MFirqIl4ZcVUn4obyEH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwNDEzMTAzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDNkMzhhZDcyNDIwNGQ3NmRlNjAzNWQ0YTFhMDAzMmMzZTYxYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGygzP0n9xh1jhvgwrnEujedFc0e
5UbD4/s2mgX7fXpagZJyKp3STk9TNkQ0CInDruAPXXZoLy+PE4K/+0tffEkgReqR
+9i7Uh6JTytzSJyywWwfPP6NSotiv0Xi3PA4MVMLFlgjutnuUSP2DABZg/C94e+w
TxuOSMwRKRNffElDHehBRTlU61AZHbqvJyrUpInfncszCNj3xGR34HtzVOjdPxkC
4bK1IkMAPNQ7i8Nay7JChfg1piATPzQjJ8oM8jiv5sn56olNQ6azQVTLSFXQwMnt
yuHn6h8jKD/M6HVBzpOIE2TlqJ8Doffdi1L4Mr563XchpOIfVRV/zTX2bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOA9OK1yQgTXbeYDXUoaADLD5hoGMB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvNEQwNHJYSkNCTmR0NWdOZFNob0FNc1BtR2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3OMA0G
CSqGSIb3DQEBCwUAA4IBAQAJFDqsj2gdsJqHRKsn8Wq8NvdIYP1fhMOD69JsjKut
WNqEvhccSlX3DoUyrcsb+rZQQ7XwymtRz8wIaWUqgt3u3zABgsX2tPT0KQ1ihXwx
1FtcL6dxFiH4g6ahWJX510gRmP08qB+QLxTwcTph3a5FWpYxoVh7L5A0Vx8M5W6U
7CBE9zOI+rIiMgguUIchfFaAHNaUBUgQFI6scFKnwNTP+se5VJuk1mkfqM8oG3IA
lsglAmNisw2aktHqK9YUzBtHlmfm5VMyfxa9VUwkFFQZYNv7A2/85ASy8ccxcmow
LmfG2jj8WNf/coD8Ibyzu+qOKufq5QMyAR+yMSefJPB3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org