Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OwNhd7U0RjGHNatDxly6GvBu9_U.roa
File:                     OwNhd7U0RjGHNatDxly6GvBu9_U.roa (raw, json)
Hash identifier:          AQFGHSpRijYPY8thg004Gham1PJoqU+w3AsghHqkwj4=
Subject key identifier:   3B:03:61:77:B5:34:46:31:87:35:AB:43:C6:5C:BA:1A:F0:6E:F7:F5
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       018732C35C5486BA92C434BB5FC7F4221240
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OwNhd7U0RjGHNatDxly6GvBu9_U.roa
Signing time:             Thu 30 Mar 2023 13:44:36 +0000
ROA not before:           Thu 30 Mar 2023 13:44:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        80.93.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 13 Apr 2023 10:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:32:c3:5c:54:86:ba:92:c4:34:bb:5f:c7:f4:22:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Mar 30 13:44:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b036177b53446318735ab43c65cba1af06ef7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:bb:73:7d:2d:96:53:e8:1a:32:70:6c:0e:
                    55:32:91:d2:d4:09:c8:75:18:84:07:0b:b9:a4:0b:
                    6d:6d:92:a1:33:48:c7:d3:ea:c8:7c:e9:73:68:dd:
                    12:33:b5:3d:6d:c3:94:48:4a:d7:01:12:f1:07:82:
                    53:bc:c8:47:90:20:e2:8b:83:4d:27:1a:e9:d3:f1:
                    1b:25:bc:9d:e3:3a:8d:09:9c:12:a0:35:ea:b5:c7:
                    3e:c0:74:fc:94:6e:8b:ed:c4:9b:e6:68:8b:07:95:
                    0b:37:38:4a:30:57:77:00:8c:3b:6b:33:12:8a:51:
                    13:ea:dc:21:a3:f2:f2:c5:6c:7b:dc:d1:f5:20:cf:
                    f2:0f:89:fa:2f:90:f7:a8:1f:62:f7:78:a1:b2:b1:
                    2e:18:85:6c:d1:31:d7:5d:3c:f9:4f:a0:ea:d5:73:
                    65:18:c3:c5:47:bd:9a:cc:3a:4c:78:52:0d:c2:a9:
                    83:0c:8b:46:a8:7d:ed:5f:87:63:48:d8:b5:1b:1e:
                    37:28:07:b2:15:f5:ff:dd:f9:12:ef:e8:46:75:81:
                    33:8a:00:fc:54:3c:c6:29:23:68:55:58:8e:ca:3c:
                    95:b4:b8:79:c8:bf:2d:03:0a:c9:79:92:d6:27:e0:
                    43:a5:ac:07:ad:98:f0:8c:5a:aa:cc:e2:88:a2:e1:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:03:61:77:B5:34:46:31:87:35:AB:43:C6:5C:BA:1A:F0:6E:F7:F5
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OwNhd7U0RjGHNatDxly6GvBu9_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:38:d7:6f:43:23:d9:bc:d7:b1:6d:d2:8a:6e:66:85:c9:
         7e:ab:a1:20:7a:32:d3:44:fa:97:e7:45:f5:93:f6:89:f1:29:
         cf:25:ed:c8:09:a4:b8:0d:ad:79:f9:69:13:9e:5d:75:d5:61:
         7e:3a:89:ea:1a:7b:47:33:20:cc:bb:b4:7c:62:d4:89:0c:2b:
         bd:e9:fc:85:f3:e3:3c:31:ec:21:79:e1:d6:59:92:3a:f0:d4:
         72:6c:f0:77:1e:00:98:2b:a1:3a:45:9b:21:9d:1a:77:d6:fa:
         c0:3f:90:4d:2a:ad:1b:c1:58:ed:3d:8c:44:63:fc:ff:ae:0f:
         85:2c:68:76:df:39:8d:ec:3d:ed:b3:25:08:e3:d1:cb:15:1f:
         ea:e9:8a:2a:42:85:76:b5:0f:ed:e4:10:86:5d:73:78:37:c4:
         8d:51:dd:7b:76:bc:ff:40:e6:e6:8c:18:2b:23:6e:b2:f1:5d:
         18:05:f0:5d:94:4d:fa:45:a6:5d:d6:ec:65:ea:a0:69:c3:55:
         eb:7a:b7:97:20:bf:02:6e:8c:9b:a8:95:7e:a2:31:7a:a8:88:
         82:20:34:f9:2d:3b:44:ea:7c:9b:65:1e:70:b5:39:40:0c:d1:
         39:9f:7d:c3:24:95:04:2d:1f:ea:8f:e7:25:94:3e:7a:55:4e:
         9c:df:b9:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcyw1xUhrqSxDS7X8f0IhJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwMzMwMTM0NDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjAzNjE3N2I1MzQ0NjMxODczNWFiNDNjNjVjYmExYWYwNmVmN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrK7c30tllPoGjJwbA5VMpHS1AnI
dRiEBwu5pAttbZKhM0jH0+rIfOlzaN0SM7U9bcOUSErXARLxB4JTvMhHkCDii4NN
Jxrp0/EbJbyd4zqNCZwSoDXqtcc+wHT8lG6L7cSb5miLB5ULNzhKMFd3AIw7azMS
ilET6twho/LyxWx73NH1IM/yD4n6L5D3qB9i93ihsrEuGIVs0THXXTz5T6Dq1XNl
GMPFR72azDpMeFINwqmDDItGqH3tX4djSNi1Gx43KAeyFfX/3fkS7+hGdYEzigD8
VDzGKSNoVViOyjyVtLh5yL8tAwrJeZLWJ+BDpawHrZjwjFqqzOKIouHgpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsDYXe1NEYxhzWrQ8Zcuhrwbvf1MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvT3dOaGQ3VTBSakdITmF0RHhseTZHdkJ1OV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3OMA0G
CSqGSIb3DQEBCwUAA4IBAQAgTjjXb0Mj2bzXsW3Sim5mhcl+q6EgejLTRPqX50X1
k/aJ8SnPJe3ICaS4Da15+WkTnl111WF+OonqGntHMyDMu7R8YtSJDCu96fyF8+M8
MewheeHWWZI68NRybPB3HgCYK6E6RZshnRp31vrAP5BNKq0bwVjtPYxEY/z/rg+F
LGh23zmN7D3tsyUI49HLFR/q6YoqQoV2tQ/t5BCGXXN4N8SNUd17drz/QObmjBgr
I26y8V0YBfBdlE36RaZd1uxl6qBpw1XrereXIL8CboybqJV+ojF6qIiCIDT5LTtE
6nybZR5wtTlADNE5n33DJJUELR/qj+cllD56VU6c37ky
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org