Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/V0fgRax_95nvwfoClwki-oCdZjg.roa
File:                     V0fgRax_95nvwfoClwki-oCdZjg.roa (raw, json)
Hash identifier:          vZGytJ91B2Et0BuOwhVyMWhdNx2Ie/pzpoOST72XCbQ=
Subject key identifier:   57:47:E0:45:AC:7F:F7:99:EF:C1:FA:02:97:09:22:FA:80:9D:66:38
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       01872D0B51C988621DB715E86076FDAE95EC
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/V0fgRax_95nvwfoClwki-oCdZjg.roa
Signing time:             Wed 29 Mar 2023 11:05:29 +0000
ROA not before:           Wed 29 Mar 2023 11:05:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211826
IP address blocks:        80.93.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 30 May 2023 13:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2d:0b:51:c9:88:62:1d:b7:15:e8:60:76:fd:ae:95:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Mar 29 11:05:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5747e045ac7ff799efc1fa02970922fa809d6638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:7a:14:5f:9a:32:a5:1b:31:f6:ac:7a:6f:
                    b4:e6:e8:bf:c9:27:b7:f6:cc:cd:95:96:b9:ec:24:
                    88:6f:0d:14:e6:fb:c8:12:30:62:46:e5:0b:d0:98:
                    0f:7c:63:3f:90:a2:0a:05:b0:9c:95:e1:1e:66:fd:
                    ee:70:8e:b4:fe:b7:10:cc:81:46:66:b3:7e:03:1b:
                    7c:26:93:ec:ab:6a:ab:04:a1:86:a3:e2:16:20:38:
                    4a:2f:2d:89:33:4f:a5:07:34:51:e8:a1:d5:60:8b:
                    cb:1e:20:bd:93:9f:86:85:e4:bf:42:a3:9c:96:a2:
                    7f:3f:21:bb:df:b4:5e:26:9e:f5:8f:f6:d4:e8:0d:
                    0f:ec:d9:5d:be:68:f0:b2:8f:e0:69:a4:85:67:d2:
                    f2:a7:e4:05:b1:0a:ce:cd:5d:3b:d8:56:70:6b:fb:
                    98:f3:b6:5e:df:ce:e0:4b:63:8f:db:1c:31:5b:51:
                    3c:16:94:6d:e2:6d:b3:0d:89:0f:f0:7c:33:51:5a:
                    7f:36:f1:a1:d5:7d:5c:9c:e2:8c:0a:7c:b0:c0:56:
                    f0:a3:9e:57:52:0e:2e:9e:00:ab:09:f1:ed:e4:a7:
                    97:4c:56:b1:09:80:c6:37:8e:d3:d5:aa:f3:d7:e9:
                    23:ce:da:3d:b0:0e:6e:9b:c3:28:e2:e0:12:95:b5:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:E0:45:AC:7F:F7:99:EF:C1:FA:02:97:09:22:FA:80:9D:66:38
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/V0fgRax_95nvwfoClwki-oCdZjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:b7:f4:b4:9d:ae:f0:d4:e3:c9:9c:b0:56:af:0e:20:95:
         88:a0:02:ab:e6:19:6b:7d:7e:f9:cc:e6:30:5d:9d:fa:5b:6e:
         69:a1:c7:26:1f:c2:79:9c:18:59:8d:2b:0b:c7:b5:e3:4e:86:
         b4:85:c5:41:bc:d9:35:ba:bb:83:4f:35:1b:03:00:1d:83:f6:
         ed:6f:11:a1:ea:d3:a8:ce:9a:d2:f5:98:dc:60:c1:c0:ee:7f:
         70:5f:67:33:88:66:7f:da:51:6c:4c:4d:79:1c:4d:03:6f:60:
         6d:83:6f:f1:84:e1:97:1e:69:a8:9d:fd:b6:9d:34:c1:30:58:
         2b:a4:bf:8d:1f:7a:9a:34:a4:f7:0c:b4:51:b8:1b:03:df:61:
         8e:3c:7b:35:33:4c:ed:6c:ad:04:f6:0e:03:eb:56:c6:bb:26:
         56:ae:65:06:6e:85:11:74:ac:a3:f3:8c:fe:bc:28:d3:c5:8b:
         10:39:7f:0c:46:3b:51:bc:85:02:4f:6f:8a:66:3a:ba:1c:ae:
         fd:ef:79:ee:6d:af:71:d3:f0:a5:d3:bb:28:aa:eb:6b:67:df:
         17:68:03:23:8e:f4:53:a3:89:77:e7:84:9c:60:33:81:b7:d5:
         a1:83:ce:b4:cf:03:7f:4f:cb:8b:7e:f2:61:f6:24:e7:f5:0c:
         73:27:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org