Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pTxnaeLNjzergUK15Se1lyNt24U.roa
File:                     pTxnaeLNjzergUK15Se1lyNt24U.roa (raw, json)
Hash identifier:          Dt1o8/x/C+gFahv1fy/G8BJPrc48DWjfK79giChpPHY=
Subject key identifier:   A5:3C:67:69:E2:CD:8F:37:AB:81:42:B5:E5:27:B5:97:23:6D:DB:85
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       018842EE78FA4A444E12865BC7D94C167A6A
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pTxnaeLNjzergUK15Se1lyNt24U.roa
Signing time:             Mon 22 May 2023 10:08:24 +0000
ROA not before:           Mon 22 May 2023 10:08:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211585
IP address blocks:        80.93.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 May 2023 11:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:42:ee:78:fa:4a:44:4e:12:86:5b:c7:d9:4c:16:7a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: May 22 10:08:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a53c6769e2cd8f37ab8142b5e527b597236ddb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:8d:82:da:1a:7d:0d:54:57:fb:62:00:9b:
                    58:84:37:c1:a2:a5:00:dd:69:b2:f4:2b:b2:c3:d7:
                    ab:67:80:b6:be:9e:fe:04:1a:2d:aa:20:37:4a:10:
                    4f:57:7e:67:5c:fa:a5:de:81:67:6b:c9:e3:b3:d1:
                    a8:dd:fa:62:a3:ca:6b:ac:a8:2a:91:3b:6c:a0:e6:
                    b9:a9:fa:47:cd:6c:3f:f9:b4:3d:06:ff:bf:bc:0f:
                    82:b8:8f:b2:f7:b8:82:e1:e1:d2:cc:57:fd:db:ab:
                    88:ca:12:b2:6b:6c:7e:36:51:a1:c7:c9:b9:e1:b0:
                    5b:2d:c5:bd:5a:b4:f5:31:a9:30:2d:20:5a:52:74:
                    ef:2c:a7:ec:80:a2:15:40:5e:b9:1e:df:3c:b5:09:
                    98:e4:77:cb:4b:ba:6a:81:d7:81:9d:0d:e6:84:b4:
                    6e:64:a5:f2:0e:83:7c:f0:08:b4:61:71:9b:4f:0d:
                    62:ea:fb:d2:1b:42:bd:06:54:60:ba:b4:bd:88:82:
                    d9:9f:b8:d4:5d:6d:ea:1f:34:be:1c:22:a0:4e:94:
                    bb:fa:70:39:ce:0f:26:d7:18:1d:bc:9e:63:5f:ed:
                    55:8a:61:ec:22:38:c8:41:41:b1:0b:d2:44:01:dc:
                    4d:2e:6a:5f:a9:24:99:c9:3c:5e:1c:8c:04:45:3c:
                    15:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:67:69:E2:CD:8F:37:AB:81:42:B5:E5:27:B5:97:23:6D:DB:85
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/pTxnaeLNjzergUK15Se1lyNt24U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:88:40:d2:06:10:01:57:8f:98:d9:7e:f7:a1:f7:60:42:2e:
         26:16:8b:54:07:b3:d9:d0:00:f1:ff:fa:22:be:91:64:af:79:
         12:62:d8:14:26:a4:6c:7c:94:0c:9e:df:0e:4d:33:f2:6c:0a:
         85:bd:b3:62:3a:4d:d5:6e:8d:a0:e7:7e:1c:1c:18:4c:ab:91:
         cc:a9:ea:32:a7:8f:63:52:14:e0:f9:ab:5b:7e:e3:9d:61:fe:
         6b:36:22:d0:6e:5e:e2:59:1e:3b:4d:c4:d6:40:bb:3b:9e:4c:
         59:f3:5f:a6:e0:b4:b4:e8:84:3d:b4:85:c3:62:e6:ad:63:f9:
         7d:d6:6e:c8:8c:a5:8a:c6:36:1b:f3:c4:5f:e8:d9:47:e2:38:
         58:7c:86:03:5d:b4:43:43:f8:d0:71:67:5e:91:1e:a6:29:80:
         0e:4a:62:64:6e:82:4a:b0:81:90:85:ae:09:ea:95:df:76:28:
         0a:3b:8e:91:1a:df:e0:d9:6a:43:2f:b8:ee:b4:cf:35:42:40:
         51:96:97:1a:29:5b:be:31:3f:81:65:83:54:91:41:58:5a:c3:
         72:e2:52:9b:aa:d4:44:e1:68:d0:c1:35:ec:c1:d9:94:93:ca:
         f7:c8:29:da:0e:38:52:87:17:ae:90:50:38:58:5a:97:08:9e:
         ca:a0:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org