Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-WkkWAxA6F8peci2jniySi4S68s.roa
File:                     1-WkkWAxA6F8peci2jniySi4S68s.roa (raw, json)
Hash identifier:          Rwqy5yjK7xM2OTxBnH2xxNUyUlNIwbQNaI6fBW4odQ4=
Subject key identifier:   F9:69:24:58:0C:40:E8:5F:29:79:C8:B6:8E:78:B2:4A:2E:12:EB:CB
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F14EE14E37219CD0D895ABC32730D29
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-WkkWAxA6F8peci2jniySi4S68s.roa
Signing time:             Sun 01 Jan 2023 20:45:20 +0000
ROA not before:           Sun 01 Jan 2023 20:45:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12446
IP address blocks:        80.96.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 19 Nov 2023 17:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:ee:14:e3:72:19:cd:0d:89:5a:bc:32:73:0d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f96924580c40e85f2979c8b68e78b24a2e12ebcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:d4:1d:20:8b:84:9f:f1:f5:c2:f3:29:42:
                    7f:a1:87:96:20:a8:67:b8:3b:ac:15:1f:2b:7a:83:
                    6d:25:15:c5:a4:65:c2:ea:97:2f:f8:91:63:97:16:
                    b6:a4:e6:ff:19:83:8f:49:b4:33:6c:08:8a:32:a0:
                    32:49:75:23:ef:69:a8:37:0f:7e:cb:0e:90:b0:1b:
                    05:e5:69:7e:9a:20:82:50:eb:2a:a2:7e:eb:b6:7e:
                    f2:ce:7f:c4:df:64:fd:95:fa:fc:88:65:e7:c5:d9:
                    33:7f:1d:87:4c:f8:39:91:9c:3d:c1:5f:78:34:ca:
                    59:17:18:3f:0a:a9:ba:e7:9e:27:ee:f2:23:65:d4:
                    94:c3:15:68:2a:92:40:77:69:d2:c1:25:f9:63:57:
                    f1:25:b6:41:f4:68:c9:17:26:18:ff:20:bd:d9:a1:
                    86:25:2d:2a:1b:b5:0f:f8:4e:f3:61:2f:aa:48:a0:
                    52:0f:f4:c7:89:e5:fb:73:66:9d:79:ef:79:1f:7f:
                    ac:27:f2:68:a8:1b:64:50:c8:f2:72:f7:76:06:00:
                    a5:1f:b5:50:99:71:30:af:2a:d9:13:ce:8e:c7:56:
                    f7:fb:bd:09:33:4d:23:92:fa:20:8a:ce:66:91:ca:
                    15:91:e6:54:14:af:df:a7:8f:b6:df:fe:59:f2:d6:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:69:24:58:0C:40:E8:5F:29:79:C8:B6:8E:78:B2:4A:2E:12:EB:CB
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-WkkWAxA6F8peci2jniySi4S68s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:b4:02:55:06:b0:6d:f4:c7:43:f9:2a:44:1a:b5:de:56:
         3a:4d:89:57:6d:f8:58:12:34:bd:fb:f5:c4:7f:ea:e7:1b:22:
         08:1e:7c:be:5d:82:d5:5f:c0:93:ea:e8:1b:21:44:17:76:af:
         c3:6d:15:24:a3:a3:8b:03:16:db:5f:4b:57:60:07:45:3f:f0:
         06:c7:95:25:c1:37:6c:ed:96:0b:70:9e:99:3f:1b:d7:33:c0:
         15:65:bf:75:1b:48:93:a1:bf:0a:f8:c9:5a:cd:be:a6:15:be:
         72:53:21:ea:75:fc:da:52:62:0b:dc:79:e1:8a:94:3d:5f:7f:
         ba:52:18:3d:93:46:3c:70:76:68:90:39:cb:b5:59:0f:21:31:
         ef:90:e1:98:b8:2c:f3:7d:bf:30:56:3f:12:72:50:b3:3c:40:
         a0:8e:27:af:bf:e5:5b:8d:26:15:2f:42:7c:c8:c2:20:82:c3:
         76:16:aa:d3:4a:60:fe:ea:f7:96:c2:bc:7c:3d:b3:64:33:36:
         32:26:cb:12:7e:42:6c:85:36:06:76:57:ff:40:dd:15:51:59:
         f6:44:e2:a2:f8:6b:7b:51:98:45:03:c5:16:66:0e:57:2a:a4:
         bf:fe:6b:70:ec:2f:db:c7:bc:c9:ae:68:29:fb:be:81:69:91:
         c2:29:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org