Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/LpEDzKSG97YHGXnjg7bjid2JLFU.roa
File:                     LpEDzKSG97YHGXnjg7bjid2JLFU.roa (raw, json)
Hash identifier:          5wBMC7cE94fj28SHRd5OXX830tFVk4pKlMg2tkMD9B8=
Subject key identifier:   2E:91:03:CC:A4:86:F7:B6:07:19:79:E3:83:B6:E3:89:DD:89:2C:55
Certificate issuer:       /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial:       01856FC279A7B625D01D0D2A985218431566
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/LpEDzKSG97YHGXnjg7bjid2JLFU.roa
Signing time:             Sun 01 Jan 2023 23:54:54 +0000
ROA not before:           Sun 01 Jan 2023 23:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206583
IP address blocks:        185.80.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:79:a7:b6:25:d0:1d:0d:2a:98:52:18:43:15:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
        Validity
            Not Before: Jan  1 23:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e9103cca486f7b6071979e383b6e389dd892c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:c8:de:ac:af:41:05:77:45:18:da:4e:cc:
                    f2:60:83:6d:97:85:13:94:c3:98:e8:03:07:71:09:
                    e3:eb:56:90:e3:4d:fc:dd:cc:a1:22:be:3f:be:fe:
                    40:fd:76:5a:cf:dd:cf:48:c5:ba:26:a5:9d:4e:d5:
                    f7:14:4e:f6:6d:ad:81:61:1c:63:fc:1d:19:3b:53:
                    9f:02:d5:68:1b:cd:37:d4:f0:74:c3:dc:9c:87:72:
                    84:c6:3e:6b:96:19:7a:cd:53:7e:17:c4:42:9f:49:
                    29:3a:87:d8:0d:5f:b9:63:70:dc:93:03:2e:e4:59:
                    0e:42:78:15:d6:c1:f8:91:56:c5:1a:05:35:fa:ab:
                    5f:03:42:ef:f5:84:1e:63:be:fa:34:89:2a:66:97:
                    47:34:13:f1:01:a5:07:61:47:46:48:43:c3:2e:ba:
                    b3:04:da:91:0a:56:52:89:6b:c1:bb:19:15:0f:f6:
                    ed:be:42:87:c1:0f:b3:91:c7:bd:5a:84:2a:0e:47:
                    2e:67:1b:3c:41:05:fc:42:fe:c7:b9:fa:af:f4:98:
                    0c:8b:66:aa:ea:5a:bd:ad:08:f7:0b:89:3c:36:a0:
                    6e:8b:11:0d:62:f5:55:d2:28:0e:a5:f4:09:40:85:
                    b2:39:6f:ee:b0:ac:4f:d8:25:4b:39:06:22:08:25:
                    16:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:03:CC:A4:86:F7:B6:07:19:79:E3:83:B6:E3:89:DD:89:2C:55
            X509v3 Authority Key Identifier:
                keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/LpEDzKSG97YHGXnjg7bjid2JLFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:8f:bb:1d:9a:b9:f5:5d:80:1f:37:d8:42:10:5c:40:54:ef:
         4c:5c:b0:ae:ad:67:25:2d:c4:7d:04:6e:ea:e3:7e:44:17:99:
         37:c6:98:16:da:73:f2:f1:46:86:28:c9:a5:18:63:b1:f6:00:
         70:eb:c2:52:88:e4:50:3b:1b:7f:7a:39:5e:25:90:21:e6:98:
         12:a9:2b:dd:c4:e7:33:d5:f9:d1:38:56:0f:b9:32:5e:6d:db:
         21:69:e7:38:3d:46:c0:67:aa:dc:85:28:83:fa:fb:c6:7b:27:
         06:d5:75:89:ff:86:5d:15:a1:7e:00:65:7b:bb:53:11:3e:21:
         0f:35:a6:dc:a2:12:25:3f:4e:56:c2:2a:b2:78:64:05:c4:c7:
         96:a4:87:37:9c:57:d4:eb:59:48:7a:be:d0:8d:60:c5:12:0e:
         21:c2:a9:98:15:cf:ed:b6:9d:9a:b9:82:33:83:39:25:4d:b9:
         d7:3b:87:3d:56:f4:0a:85:8f:2d:3d:b8:35:d7:e3:d1:6a:d7:
         7d:45:19:a0:18:19:ea:57:41:1c:5c:90:90:5b:0a:ed:5c:02:
         2a:52:9b:73:b0:c3:85:df:3d:d7:d6:f2:e8:a6:dc:f1:8b:1c:
         65:27:09:12:86:1d:3c:ef:98:78:ca:96:8b:b7:82:ea:85:4c:
         01:c1:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:18 2024 by rpki-client on console-fra.rpki-client.org