Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PLLMBwhahoCS56S6gOt28FZmHzk.roa
File:                     PLLMBwhahoCS56S6gOt28FZmHzk.roa (raw, json)
Hash identifier:          DW0kzqumsfbAvfoxafpnO90NuY0sB/RobpETOmzP+KI=
Subject key identifier:   3C:B2:CC:07:08:5A:86:80:92:E7:A4:BA:80:EB:76:F0:56:66:1F:39
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01881FD1108984E21464E92316E2C9EDE701
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PLLMBwhahoCS56S6gOt28FZmHzk.roa
Signing time:             Mon 15 May 2023 14:29:34 +0000
ROA not before:           Mon 15 May 2023 14:29:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42831
IP address blocks:        80.93.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:1f:d1:10:89:84:e2:14:64:e9:23:16:e2:c9:ed:e7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: May 15 14:29:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cb2cc07085a868092e7a4ba80eb76f056661f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:26:50:49:d6:ef:45:b5:fb:5f:20:de:08:
                    6c:47:0e:19:f9:2f:09:6f:8c:93:f9:64:a7:a0:14:
                    95:3f:8e:66:e3:8e:ca:c6:11:e2:96:6a:8f:2d:85:
                    6a:b9:06:e7:6f:80:6e:97:10:f8:b5:42:1b:da:14:
                    b1:01:2e:f7:c8:31:4d:2a:6b:0e:74:85:f8:e4:da:
                    f1:5c:be:7e:91:a0:70:2b:16:f9:cf:5f:8d:16:00:
                    de:4d:84:80:0f:23:39:3e:9b:f0:23:ac:0c:b7:14:
                    67:c9:b0:1b:ed:4d:e5:c7:3c:c1:90:3f:e7:0e:6a:
                    32:26:9f:49:f0:b6:3c:20:a9:b7:27:c0:14:fb:7f:
                    74:29:7c:62:f8:05:60:30:71:bb:85:a7:b4:8b:8f:
                    09:a8:f6:f9:dc:51:3b:3a:6e:75:97:4b:73:35:15:
                    c4:45:be:02:31:69:d6:5e:29:87:ed:5c:23:4e:65:
                    cd:e5:48:0c:c9:da:fd:2e:bf:d4:71:28:83:13:7f:
                    47:9f:4c:f5:d2:9d:ca:98:35:c6:46:63:90:35:b4:
                    0e:3a:01:eb:49:2b:ce:db:0e:2a:e7:5a:30:d8:1f:
                    44:8e:31:af:19:e3:50:1f:a0:fd:83:e3:31:58:4b:
                    3b:d2:6a:7e:93:2e:0b:c2:95:ed:45:c6:a4:2b:2f:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B2:CC:07:08:5A:86:80:92:E7:A4:BA:80:EB:76:F0:56:66:1F:39
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/PLLMBwhahoCS56S6gOt28FZmHzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:2a:47:6d:eb:b7:d9:52:2e:54:fc:49:14:9b:0c:6d:5e:
         c4:0d:a3:11:0a:10:24:4a:ad:cd:57:d9:d5:17:c1:14:7e:08:
         b5:29:13:98:65:19:e6:04:f1:2c:2e:0a:38:18:7a:77:ee:01:
         c5:8e:bd:43:ce:60:9c:7a:11:76:68:8e:4c:55:cc:2f:c3:42:
         37:2c:f8:b3:8f:79:8f:c4:01:7b:6d:87:01:d9:8f:fd:2d:4d:
         71:cb:87:03:f3:61:e8:d6:63:98:fc:2b:3c:b6:16:07:4b:50:
         d8:48:ac:5f:e4:0a:94:c6:90:a7:86:0a:7c:02:91:fa:97:c2:
         c0:91:a7:e8:5c:46:9c:2f:40:6b:62:ca:ee:ae:ee:ff:53:f5:
         b2:d2:68:3c:26:7b:d7:6c:5a:1c:70:7b:0b:0b:32:85:95:33:
         99:7d:ae:74:bd:d9:a3:df:47:5b:8e:10:5f:13:a5:3a:57:50:
         c9:90:26:7d:83:d0:08:d5:14:bf:4f:e8:57:a7:d8:9c:6e:42:
         ff:ab:d6:6e:1c:2e:e7:4d:84:06:7e:eb:ff:ee:89:4d:21:92:
         0a:d2:02:ae:54:92:81:9a:12:3a:a9:6b:f7:00:f0:b9:46:7f:
         34:b3:7c:8b:48:41:c4:69:da:5d:1e:94:6b:fd:b3:4c:83:bd:
         6f:a2:7e:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgf0RCJhOIUZOkjFuLJ7ecBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjMwNTE1MTQyOTM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2IyY2MwNzA4NWE4NjgwOTJlN2E0YmE4MGViNzZmMDU2NjYxZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yEmUEnW70W1+18g3ghsRw4Z+S8J
b4yT+WSnoBSVP45m447KxhHilmqPLYVquQbnb4BulxD4tUIb2hSxAS73yDFNKmsO
dIX45NrxXL5+kaBwKxb5z1+NFgDeTYSADyM5PpvwI6wMtxRnybAb7U3lxzzBkD/n
DmoyJp9J8LY8IKm3J8AU+390KXxi+AVgMHG7hae0i48JqPb53FE7Om51l0tzNRXE
Rb4CMWnWXimH7VwjTmXN5UgMydr9Lr/UcSiDE39Hn0z10p3KmDXGRmOQNbQOOgHr
SSvO2w4q51ow2B9EjjGvGeNQH6D9g+MxWEs70mp+ky4LwpXtRcakKy+cWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyyzAcIWoaAkuekuoDrdvBWZh85MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvUExMTUJ3aGFob0NTNTZTNmdPdDI4RlptSHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF3BMA0G
CSqGSIb3DQEBCwUAA4IBAQAkripHbeu32VIuVPxJFJsMbV7EDaMRChAkSq3NV9nV
F8EUfgi1KROYZRnmBPEsLgo4GHp37gHFjr1DzmCcehF2aI5MVcwvw0I3LPizj3mP
xAF7bYcB2Y/9LU1xy4cD82Ho1mOY/Cs8thYHS1DYSKxf5AqUxpCnhgp8ApH6l8LA
kafoXEacL0BrYsruru7/U/Wy0mg8JnvXbFoccHsLCzKFlTOZfa50vdmj30dbjhBf
E6U6V1DJkCZ9g9AI1RS/T+hXp9icbkL/q9ZuHC7nTYQGfuv/7olNIZIK0gKuVJKB
mhI6qWv3APC5Rn80s3yLSEHEadpdHpRr/bNMg71von74
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org