Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa
File:                     A7q7FjMMTrFWjVpQP1aGDwL-euo.roa (raw, json)
Hash identifier:          CPPfxUcYn0q2/+exXdHLUjMK4J4jmC7B/sOd+lZxI1U=
Subject key identifier:   03:BA:BB:16:33:0C:4E:B1:56:8D:5A:50:3F:56:86:0F:02:FE:7A:EA
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       0187BD3B286C85B5B9C4419840F351B784E4
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa
Signing time:             Wed 26 Apr 2023 11:03:03 +0000
ROA not before:           Wed 26 Apr 2023 11:03:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24232
IP address blocks:        212.11.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 26 Apr 2023 12:40:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bd:3b:28:6c:85:b5:b9:c4:41:98:40:f3:51:b7:84:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Apr 26 11:03:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03babb16330c4eb1568d5a503f56860f02fe7aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:fc:93:c2:23:f8:f4:ff:9f:5c:9b:8d:cf:
                    b8:2b:4a:43:b5:74:50:70:c4:12:85:41:e1:ec:70:
                    4e:28:bb:2f:87:ef:da:db:3d:f3:8c:f1:36:31:68:
                    53:b9:50:3b:e8:33:f0:d8:bd:8d:bd:f9:e3:cc:c9:
                    d6:9b:20:10:aa:d8:27:c7:cf:4b:ff:16:aa:ad:00:
                    e8:b5:fd:f4:fd:b7:67:02:36:a2:85:63:33:21:9d:
                    3b:4c:b5:bb:94:45:4b:e3:3b:99:f3:db:a2:73:5e:
                    48:d8:65:0c:50:85:35:a0:6d:e9:cd:ff:ca:8a:b3:
                    8c:4b:0f:b2:e1:ba:75:dd:d9:81:3e:74:1a:92:68:
                    45:d5:51:84:52:96:5a:51:bf:89:5f:70:c8:68:8f:
                    5a:8a:44:7d:57:69:32:2d:ff:3d:22:75:1e:f5:cd:
                    52:9a:18:c9:6f:c9:47:4f:f0:78:11:cb:f7:72:68:
                    50:38:f9:2f:2f:54:a4:2a:ab:6f:a3:d1:43:d0:bd:
                    88:05:db:50:d9:8f:75:67:06:b9:6f:5a:6d:99:2e:
                    a2:64:46:e5:ee:cb:6b:af:f7:8b:92:c1:8e:c1:66:
                    e3:30:4a:0e:18:f7:03:d2:24:c4:76:b4:f4:c4:7b:
                    f3:e0:79:94:a4:fb:b7:40:1a:bb:25:54:35:81:13:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:BB:16:33:0C:4E:B1:56:8D:5A:50:3F:56:86:0F:02:FE:7A:EA
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/A7q7FjMMTrFWjVpQP1aGDwL-euo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.11.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:ee:b2:ff:e0:68:05:9d:48:fe:01:c3:fa:16:6f:a9:30:
         ee:ad:a3:df:1b:82:4d:51:ef:5f:c4:6c:92:4e:2e:39:ac:d1:
         8e:c1:b1:e5:66:88:4d:8e:dc:24:d6:5e:b4:31:d1:fe:29:41:
         19:55:08:da:c2:92:95:04:4f:c5:80:7d:27:b8:60:66:d3:42:
         d9:3d:92:74:f3:ab:e8:58:d9:c2:d2:66:97:af:d4:d6:ad:17:
         64:c7:6c:14:f5:69:a4:32:47:f6:9c:fa:de:d9:bc:e6:fb:18:
         a3:01:c1:38:45:e9:7f:17:02:dc:45:b8:72:6e:d8:8e:6b:2e:
         77:50:30:09:6a:a3:40:2e:f6:38:67:73:ac:c8:97:e8:86:90:
         2f:eb:be:d3:9a:a8:81:44:20:ba:f8:c7:b8:e9:4f:98:fb:30:
         44:8a:b4:9a:a9:45:f9:91:31:84:15:6d:90:d6:a6:19:be:e6:
         0e:78:f8:66:3d:64:a0:9d:01:13:94:7b:5c:8a:b5:a8:9d:f3:
         d9:20:f3:2f:93:27:b1:38:f8:63:0d:1d:95:46:e3:4b:fb:99:
         98:48:b2:72:e0:67:1b:bd:3a:c2:66:50:d5:34:dd:31:49:46:
         8a:f5:bb:cb:9d:53:d4:ed:02:1f:39:2c:ee:b9:f8:de:30:57:
         8a:88:52:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe9OyhshbW5xEGYQPNRt4TkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjMwNDI2MTEwMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2JhYmIxNjMzMGM0ZWIxNTY4ZDVhNTAzZjU2ODYwZjAyZmU3YWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRb8k8Ij+PT/n1ybjc+4K0pDtXRQ
cMQShUHh7HBOKLsvh+/a2z3zjPE2MWhTuVA76DPw2L2NvfnjzMnWmyAQqtgnx89L
/xaqrQDotf30/bdnAjaihWMzIZ07TLW7lEVL4zuZ89uic15I2GUMUIU1oG3pzf/K
irOMSw+y4bp13dmBPnQakmhF1VGEUpZaUb+JX3DIaI9aikR9V2kyLf89InUe9c1S
mhjJb8lHT/B4Ecv3cmhQOPkvL1SkKqtvo9FD0L2IBdtQ2Y91Zwa5b1ptmS6iZEbl
7strr/eLksGOwWbjMEoOGPcD0iTEdrT0xHvz4HmUpPu3QBq7JVQ1gROmLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAO6uxYzDE6xVo1aUD9Whg8C/nrqMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvQTdxN0ZqTU1UckZXalZwUVAxYUdEd0wtZXVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AtQMA0G
CSqGSIb3DQEBCwUAA4IBAQAcBO6y/+BoBZ1I/gHD+hZvqTDuraPfG4JNUe9fxGyS
Ti45rNGOwbHlZohNjtwk1l60MdH+KUEZVQjawpKVBE/FgH0nuGBm00LZPZJ086vo
WNnC0maXr9TWrRdkx2wU9WmkMkf2nPre2bzm+xijAcE4Rel/FwLcRbhybtiOay53
UDAJaqNALvY4Z3OsyJfohpAv677TmqiBRCC6+Me46U+Y+zBEirSaqUX5kTGEFW2Q
1qYZvuYOePhmPWSgnQETlHtcirWonfPZIPMvkyexOPhjDR2VRuNL+5mYSLJy4Gcb
vTrCZlDVNN0xSUaK9bvLnVPU7QIfOSzuufjeMFeKiFKX
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:13 2024 by rpki-client on console-ams.rpki-client.org