Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H776GXRdcutISOD9gE0yZygymSE.roa
File:                     H776GXRdcutISOD9gE0yZygymSE.roa (raw, json)
Hash identifier:          ktzkbXr5eTWqEGsZiNcahDbYOLKX/L5Z5/Tvl2e/yA0=
Subject key identifier:   1F:BE:FA:19:74:5D:72:EB:48:48:E0:FD:80:4D:32:67:28:32:99:21
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01896DC2256DD009E69F66CC718EBFF0D38D
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H776GXRdcutISOD9gE0yZygymSE.roa
Signing time:             Wed 19 Jul 2023 10:46:27 +0000
ROA not before:           Wed 19 Jul 2023 10:46:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50089
IP address blocks:        80.242.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6d:c2:25:6d:d0:09:e6:9f:66:cc:71:8e:bf:f0:d3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jul 19 10:46:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1fbefa19745d72eb4848e0fd804d326728329921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:88:aa:77:ae:2b:27:77:a8:2f:ab:28:31:
                    37:72:2b:a2:3f:48:ee:d4:c9:52:ea:9c:f4:1e:d5:
                    73:9c:13:54:18:88:b8:f9:df:06:dc:35:3c:b7:3e:
                    e7:27:b5:48:11:99:24:c6:f6:8c:0f:4b:81:10:15:
                    55:a6:84:88:d5:02:05:1f:5f:9f:d6:d3:48:60:ee:
                    63:55:6e:43:cf:5f:d8:8f:65:a2:45:c0:f3:b3:88:
                    9c:89:32:00:ee:63:80:05:d5:38:9c:b3:6b:ba:ef:
                    e5:14:1d:20:00:3c:59:72:35:f8:38:2b:8b:a2:30:
                    44:b2:2c:fe:89:c0:ac:0d:e0:25:0d:aa:a8:23:be:
                    2d:4a:14:c3:ad:24:05:f1:c0:9e:4b:74:2f:8b:7b:
                    d0:cd:d8:ef:38:47:04:29:17:35:57:02:17:d4:7e:
                    3d:fb:d6:87:76:d5:41:8a:c2:6f:da:6b:7b:fa:39:
                    55:d7:4a:48:28:71:3b:d9:60:76:68:c8:2a:15:0c:
                    ea:09:4c:1e:7f:d7:32:de:ba:7e:ff:a0:78:3d:9b:
                    48:14:b8:4f:19:67:58:aa:9b:3f:ab:93:7d:72:0a:
                    e1:e5:1c:95:83:fc:15:9f:99:ec:6b:e1:7d:d4:6c:
                    10:f9:5d:98:c1:6f:db:d8:af:50:ec:11:f7:d8:0c:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BE:FA:19:74:5D:72:EB:48:48:E0:FD:80:4D:32:67:28:32:99:21
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/H776GXRdcutISOD9gE0yZygymSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:73:99:f3:63:16:2e:a4:13:3b:79:04:bb:3e:99:5a:d1:
         91:9f:34:06:97:10:a5:53:72:9b:ec:f5:72:3a:7b:74:ec:26:
         03:92:80:8f:ff:b4:0c:ae:c5:8f:2c:98:49:f5:1e:20:0a:99:
         b2:df:4c:47:26:0c:72:fc:e3:d9:99:1e:31:31:bf:5d:18:91:
         a7:da:ce:4f:77:42:a2:32:f4:3b:07:6f:a0:86:1d:15:73:13:
         47:09:e0:74:ee:cb:19:1b:9e:4e:e4:b5:62:65:78:df:28:c0:
         94:e3:9b:1e:1f:13:ab:84:51:ad:88:c0:c2:69:e3:36:4f:6f:
         52:4f:36:fa:30:fb:4c:76:c3:b1:1b:47:cc:17:bb:c2:ea:be:
         06:86:73:d3:1b:d9:4f:66:68:75:69:cf:45:dd:d9:40:a6:b8:
         68:a4:1c:c2:2b:61:12:25:de:c0:e5:93:7b:f7:bd:d0:ab:59:
         0f:bf:3b:93:11:92:79:60:f9:ed:60:ed:3e:40:6c:00:db:8e:
         52:86:da:8f:4c:95:0e:6f:b4:7f:5c:d6:33:40:6a:0a:e6:16:
         54:af:c0:c1:5e:38:0a:fd:9a:69:73:4c:6d:47:44:3f:e5:ac:
         b0:00:94:70:4f:d4:78:04:98:2e:3e:7a:56:db:7d:81:8d:91:
         d7:59:d4:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYltwiVt0Anmn2bMcY6/8NONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwNzE5MTA0NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmJlZmExOTc0NWQ3MmViNDg0OGUwZmQ4MDRkMzI2NzI4MzI5OTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwuIqneuKyd3qC+rKDE3ciuiP0ju
1MlS6pz0HtVznBNUGIi4+d8G3DU8tz7nJ7VIEZkkxvaMD0uBEBVVpoSI1QIFH1+f
1tNIYO5jVW5Dz1/Yj2WiRcDzs4iciTIA7mOABdU4nLNruu/lFB0gADxZcjX4OCuL
ojBEsiz+icCsDeAlDaqoI74tShTDrSQF8cCeS3Qvi3vQzdjvOEcEKRc1VwIX1H49
+9aHdtVBisJv2mt7+jlV10pIKHE72WB2aMgqFQzqCUwef9cy3rp+/6B4PZtIFLhP
GWdYqps/q5N9cgrh5RyVg/wVn5nsa+F91GwQ+V2YwW/b2K9Q7BH32AzKnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB+++hl0XXLrSEjg/YBNMmcoMpkhMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvSDc3NkdYUmRjdXRJU09EOWdFMHlaeWd5bVNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPI8MA0G
CSqGSIb3DQEBCwUAA4IBAQBvAXOZ82MWLqQTO3kEuz6ZWtGRnzQGlxClU3Kb7PVy
Ont07CYDkoCP/7QMrsWPLJhJ9R4gCpmy30xHJgxy/OPZmR4xMb9dGJGn2s5Pd0Ki
MvQ7B2+ghh0VcxNHCeB07ssZG55O5LViZXjfKMCU45seHxOrhFGtiMDCaeM2T29S
Tzb6MPtMdsOxG0fMF7vC6r4GhnPTG9lPZmh1ac9F3dlAprhopBzCK2ESJd7A5ZN7
973Qq1kPvzuTEZJ5YPntYO0+QGwA245ShtqPTJUOb7R/XNYzQGoK5hZUr8DBXjgK
/Zppc0xtR0Q/5aywAJRwT9R4BJguPnpW232BjZHXWdSu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org