Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78TmHgPykP7AZ-NIHrHFDBoO2Bk.roa
File:                     78TmHgPykP7AZ-NIHrHFDBoO2Bk.roa (raw, json)
Hash identifier:          T0VwPy1bbLP2G7fx0r1NM/A/t+DJLiIjEj0oCdfD6Ig=
Subject key identifier:   EF:C4:E6:1E:03:F2:90:FE:C0:67:E3:48:1E:B1:C5:0C:1A:0E:D8:19
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018625DB8E768686D7A16585C9767C0495A7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78TmHgPykP7AZ-NIHrHFDBoO2Bk.roa
Signing time:             Mon 06 Feb 2023 08:33:11 +0000
ROA not before:           Mon 06 Feb 2023 08:33:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200293
IP address blocks:        80.76.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 May 2023 10:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:25:db:8e:76:86:86:d7:a1:65:85:c9:76:7c:04:95:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb  6 08:33:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efc4e61e03f290fec067e3481eb1c50c1a0ed819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:bc:cd:c5:0e:f7:71:02:e9:bd:46:ae:01:
                    e6:70:42:ae:5b:76:fe:30:f3:76:4b:92:db:cf:f6:
                    f9:1a:7e:9b:b7:86:af:ce:d7:ce:58:9d:65:e5:7c:
                    87:77:1f:56:55:34:49:41:72:23:43:b4:2a:d0:1c:
                    a6:fe:ec:58:39:7b:cc:27:96:f5:fa:d8:f3:10:d6:
                    0c:3f:56:7a:32:ca:91:75:4a:e2:3d:1a:30:dd:4a:
                    8b:cf:0d:0a:d4:fb:08:05:22:aa:91:7c:43:4f:86:
                    6f:cb:38:b0:2b:f4:3c:f7:1d:1c:94:09:a8:51:7d:
                    81:5e:aa:18:8b:05:d6:13:08:a5:9d:41:31:5f:2f:
                    74:b4:51:c5:13:66:21:01:78:62:36:fe:bd:35:5b:
                    9e:e6:2b:c2:13:ce:5f:46:e5:ba:75:9a:0c:b3:28:
                    62:45:21:63:86:08:e8:bc:33:fe:4a:71:18:79:0f:
                    80:7c:a5:e9:36:cd:40:11:6f:59:fe:a7:7c:0f:a2:
                    0f:0e:ba:58:f0:ed:59:22:5b:e0:e9:88:8e:d7:e3:
                    1d:d9:9e:df:f7:6b:8a:77:6f:bd:8d:f8:e2:28:d3:
                    76:59:1e:81:5a:fc:8d:91:b0:ef:f8:55:ef:7a:1b:
                    47:f5:c1:3b:95:15:3e:fe:c2:99:8d:45:b6:1c:0e:
                    5e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C4:E6:1E:03:F2:90:FE:C0:67:E3:48:1E:B1:C5:0C:1A:0E:D8:19
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/78TmHgPykP7AZ-NIHrHFDBoO2Bk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:e7:a1:73:bc:df:2b:29:66:ca:43:00:2f:66:a5:b8:69:
         9e:70:56:92:0b:61:c4:0b:91:80:4b:d1:b1:fa:98:d1:7f:4f:
         f7:fe:b1:e0:f9:71:1c:1e:cc:d6:47:a6:53:23:e4:42:e0:42:
         a2:7d:f2:fc:22:51:e1:6b:da:65:93:20:57:e2:fe:9f:fe:d0:
         f8:6e:98:b8:90:a7:6a:a3:7e:5a:8f:0c:d6:16:34:39:1d:ee:
         37:21:89:df:54:22:70:0e:95:f0:59:7f:f7:c0:64:bc:33:3f:
         88:1c:52:b6:a4:9f:31:26:94:17:70:90:f8:78:e2:9c:58:28:
         9b:11:6e:be:cb:47:15:fb:ac:ef:44:9b:fe:a7:d7:20:c6:c8:
         fe:80:66:42:f9:4f:b4:c5:cc:78:09:a9:98:77:42:a3:ef:59:
         e2:95:09:64:ef:d9:67:2e:bf:7a:c1:af:8a:b9:cf:f9:11:ca:
         5e:eb:48:a6:d6:3f:9a:57:94:35:6f:e6:0c:f4:e6:93:33:33:
         5b:f0:97:d6:b1:c1:aa:d9:be:4d:c5:32:b6:7d:bf:ed:c5:93:
         89:77:50:42:af:b9:a8:af:d1:da:61:62:6b:3a:47:4c:3c:c9:
         be:87:ca:e3:1a:5a:89:19:31:8b:60:28:67:ef:b1:53:4c:3e:
         65:b9:bb:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYl2452hobXoWWFyXZ8BJWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMjA2MDgzMzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmM0ZTYxZTAzZjI5MGZlYzA2N2UzNDgxZWIxYzUwYzFhMGVkODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD68zcUO93EC6b1GrgHmcEKuW3b+
MPN2S5Lbz/b5Gn6bt4avztfOWJ1l5XyHdx9WVTRJQXIjQ7Qq0Bym/uxYOXvMJ5b1
+tjzENYMP1Z6MsqRdUriPRow3UqLzw0K1PsIBSKqkXxDT4ZvyziwK/Q89x0clAmo
UX2BXqoYiwXWEwilnUExXy90tFHFE2YhAXhiNv69NVue5ivCE85fRuW6dZoMsyhi
RSFjhgjovDP+SnEYeQ+AfKXpNs1AEW9Z/qd8D6IPDrpY8O1ZIlvg6YiO1+Md2Z7f
92uKd2+9jfjiKNN2WR6BWvyNkbDv+FXvehtH9cE7lRU+/sKZjUW2HA5eIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/E5h4D8pD+wGfjSB6xxQwaDtgZMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNzhUbUhnUHlrUDdBWi1OSUhySEZEQm9PMkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEwxMA0G
CSqGSIb3DQEBCwUAA4IBAQCghOehc7zfKylmykMAL2aluGmecFaSC2HEC5GAS9Gx
+pjRf0/3/rHg+XEcHszWR6ZTI+RC4EKiffL8IlHha9plkyBX4v6f/tD4bpi4kKdq
o35ajwzWFjQ5He43IYnfVCJwDpXwWX/3wGS8Mz+IHFK2pJ8xJpQXcJD4eOKcWCib
EW6+y0cV+6zvRJv+p9cgxsj+gGZC+U+0xcx4CamYd0Kj71nilQlk79lnLr96wa+K
uc/5Ecpe60im1j+aV5Q1b+YM9OaTMzNb8JfWscGq2b5NxTK2fb/txZOJd1BCr7mo
r9HaYWJrOkdMPMm+h8rjGlqJGTGLYChn77FTTD5lubsB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:59 2024 by rpki-client on console-fra.rpki-client.org