Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8oKrblmIsjoxoNgOD5Yg47OZgTE.roa
File:                     8oKrblmIsjoxoNgOD5Yg47OZgTE.roa (raw, json)
Hash identifier:          LbNCksiXifoop0EHwlEee2mVcZhZNICo/HFamKSq1Es=
Subject key identifier:   F2:82:AB:6E:59:88:B2:3A:31:A0:D8:0E:0F:96:20:E3:B3:99:81:31
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       0187BDF2D7C63266F87926B677C3EAA75FE1
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8oKrblmIsjoxoNgOD5Yg47OZgTE.roa
Signing time:             Wed 26 Apr 2023 14:23:41 +0000
ROA not before:           Wed 26 Apr 2023 14:23:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        80.93.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 09:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bd:f2:d7:c6:32:66:f8:79:26:b6:77:c3:ea:a7:5f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Apr 26 14:23:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f282ab6e5988b23a31a0d80e0f9620e3b3998131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:a6:9e:2e:08:1d:12:5a:eb:96:f3:eb:06:
                    55:bd:ea:9d:30:6e:86:7e:fe:f5:79:1f:26:a9:d3:
                    b2:0b:9d:1b:3a:31:c5:cc:62:0d:35:79:13:9f:26:
                    3c:b1:22:d8:ff:c4:70:6e:1e:2c:b4:dd:61:76:af:
                    80:27:ac:34:16:3a:ca:31:fc:03:99:0c:37:18:2e:
                    95:dc:57:19:d9:a1:96:73:a2:d5:59:09:f3:1e:06:
                    4f:91:15:aa:3c:f6:7d:d9:61:64:7b:90:71:bd:da:
                    8c:e6:2d:d0:cf:bd:b4:31:5a:23:a3:2d:30:37:dd:
                    f5:62:6d:10:37:35:50:35:34:dc:ee:df:37:8b:9e:
                    96:fb:0d:79:4e:c3:3d:42:ad:1f:9c:db:53:da:3f:
                    36:3d:6d:69:3b:17:fa:8f:6b:0d:8d:e0:47:35:35:
                    f5:3c:64:82:70:f7:c6:b8:8c:8c:78:3c:bf:d2:4f:
                    9c:78:98:27:97:42:ef:08:a8:fb:67:06:d8:d0:ff:
                    1a:9e:12:18:58:aa:d2:8e:58:da:df:1b:87:fc:8e:
                    8c:1a:52:25:14:dc:a0:be:49:b4:67:35:44:3c:18:
                    cd:04:6d:6c:1e:8b:df:af:95:02:d3:93:43:48:6e:
                    72:41:27:3f:5b:5f:f9:fd:72:42:b5:3b:49:1d:40:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:AB:6E:59:88:B2:3A:31:A0:D8:0E:0F:96:20:E3:B3:99:81:31
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/8oKrblmIsjoxoNgOD5Yg47OZgTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:8d:09:51:c7:98:7f:df:3b:d7:15:b2:0b:04:9c:0f:fa:60:
         5d:90:29:36:92:86:38:00:b8:39:4a:8a:a5:3c:fa:16:a0:a5:
         59:4e:8b:cd:26:8e:a0:0b:f1:cf:c6:3f:8f:cb:68:d0:72:f1:
         57:70:7b:1b:42:5f:91:a7:4d:65:27:41:33:35:fe:eb:90:55:
         99:79:06:6b:59:86:34:12:d5:a4:ab:c4:6e:bc:db:1b:3b:6b:
         83:2f:ec:7c:f1:e7:c7:11:6f:9e:67:c2:ac:a0:b2:30:82:53:
         29:50:e8:5b:93:1d:42:60:45:d1:25:95:4c:e1:91:a4:cf:85:
         36:e9:81:d7:bd:28:89:f4:28:a3:0d:56:c5:b6:12:d3:5d:bc:
         90:da:75:bd:bf:5e:e8:f3:88:be:e1:ee:e5:4d:ba:d8:dd:54:
         7f:5b:b5:33:d7:99:1b:f6:6c:46:5b:10:52:24:29:a5:65:91:
         8b:79:fc:22:63:bd:50:bb:30:91:9e:17:af:3e:7e:33:02:9d:
         43:75:d7:b2:af:03:79:f0:d2:41:df:17:2e:b7:91:58:81:b8:
         8f:f8:d7:8e:c2:c7:96:0a:fa:83:31:c6:e6:28:c2:48:88:94:
         8e:7f:6e:d3:0f:3b:65:ed:58:19:95:75:b3:52:47:27:35:b5:
         66:01:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org