Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wDx7V27v-HjLftgX2iGyEuDoXfo.roa
File:                     wDx7V27v-HjLftgX2iGyEuDoXfo.roa (raw, json)
Hash identifier:          Ahhxf7VItCpjOvcUAH619viYlGydDgAjHB6EIrZKo2o=
Subject key identifier:   C0:3C:7B:57:6E:EF:F8:78:CB:7E:D8:17:DA:21:B2:12:E0:E8:5D:FA
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       018911307C64C6892816469CCF4EC9C08BC8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wDx7V27v-HjLftgX2iGyEuDoXfo.roa
Signing time:             Sat 01 Jul 2023 11:22:17 +0000
ROA not before:           Sat 01 Jul 2023 11:22:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        80.93.205.0/24 maxlen: 24
                          80.93.203.0/24 maxlen: 24
                          80.93.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jul 2023 12:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:11:30:7c:64:c6:89:28:16:46:9c:cf:4e:c9:c0:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Jul  1 11:22:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c03c7b576eeff878cb7ed817da21b212e0e85dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4a:28:36:ba:4d:3f:73:5d:10:11:ea:fd:2d:
                    cb:a2:47:9c:ae:c0:47:5c:26:e5:e1:b3:61:2a:53:
                    a3:6f:33:1c:cd:73:18:5c:be:31:d1:cb:96:e2:80:
                    82:af:93:40:8c:c0:47:2f:e0:0f:99:fc:31:fc:61:
                    0d:f1:8e:e0:e2:5f:b8:a9:9f:82:20:64:40:64:fd:
                    5a:f9:06:86:35:93:f5:ee:22:dc:45:a2:db:71:96:
                    86:37:2e:b4:2b:e3:23:a1:9e:69:35:db:e3:a0:f8:
                    05:a1:13:9b:2c:48:84:b2:47:38:9e:97:99:c6:21:
                    94:4a:9b:82:1c:e4:64:52:3f:34:ed:7e:83:34:9c:
                    9a:1c:8d:a4:6a:9a:1e:4b:51:bd:36:51:b5:65:52:
                    be:f5:e9:f4:51:56:49:bd:d5:c1:f9:23:12:27:e8:
                    a7:c8:f3:e6:d3:d2:3d:61:16:31:ad:7a:10:98:8c:
                    59:24:30:d6:f0:55:44:f8:61:fd:86:97:c5:5a:f8:
                    05:84:00:b1:d1:63:47:d7:83:88:f5:be:b3:75:56:
                    82:ea:ca:cf:f1:77:6a:84:53:c0:e2:54:af:89:ed:
                    43:0d:57:76:85:34:f1:83:1e:c2:51:6b:83:8a:5a:
                    6f:cd:1e:c4:3c:55:15:73:4c:24:e6:8c:8a:c0:54:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:7B:57:6E:EF:F8:78:CB:7E:D8:17:DA:21:B2:12:E0:E8:5D:FA
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/wDx7V27v-HjLftgX2iGyEuDoXfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.203.0/24
                  80.93.205.0/24
                  80.93.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:39:50:aa:ff:98:37:53:87:e1:49:74:eb:f1:10:b9:41:
         e5:86:09:b4:76:95:0c:2c:0f:d3:ab:45:b1:d8:fa:fd:1b:4c:
         84:aa:d5:f4:21:27:c2:5d:d2:4c:3c:11:dd:3a:8e:34:39:2b:
         db:81:ad:ed:ce:72:09:91:63:b4:22:71:c9:3f:23:48:e6:1b:
         9a:5d:d2:29:a1:22:d1:a2:b6:2a:8e:95:7b:08:cf:a1:98:06:
         bc:1c:af:7b:b7:36:69:63:fd:66:d4:d0:b2:62:75:6d:96:32:
         7e:4a:03:9f:6a:b7:de:d6:ce:62:f3:ac:50:4e:ef:f0:a2:5d:
         f6:26:dc:f9:b4:88:8c:54:23:36:7d:fc:d3:0a:db:33:9b:05:
         24:1a:d0:12:a6:98:c9:03:e4:1e:af:66:78:6d:36:c4:fa:78:
         fc:f1:42:a6:ba:70:62:6c:1a:dd:31:4d:20:d1:59:dc:ab:67:
         81:61:35:cc:23:c4:f1:45:9e:1a:cc:37:96:aa:9b:03:ae:4a:
         f1:09:ef:2c:19:95:a5:94:b7:77:8c:2d:60:89:f8:05:a0:f7:
         82:c3:7a:e6:87:95:46:bb:25:a8:e6:0b:00:a2:ea:0d:54:37:
         ef:64:30:5b:f9:7e:86:69:f3:1a:2a:86:fc:67:16:d6:80:1e:
         39:b0:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org