Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa
File:                     DsRPUgg-huqiyETfF94_R69GYfY.roa (raw, json)
Hash identifier:          OSzHFoxQhOL4qUc3gNipBmtdJ3IrDYVKWwloWpNwTXg=
Subject key identifier:   0E:C4:4F:52:08:3E:86:EA:A2:C8:44:DF:17:DE:3F:47:AF:46:61:F6
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F14FF834537BA1F3696AF6E089F7D13
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa
Signing time:             Sun 01 Jan 2023 20:45:25 +0000
ROA not before:           Sun 01 Jan 2023 20:45:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48931
IP address blocks:        80.96.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:ff:83:45:37:ba:1f:36:96:af:6e:08:9f:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ec44f52083e86eaa2c844df17de3f47af4661f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:79:b0:03:18:50:3e:e3:99:45:a6:8d:38:
                    21:b3:11:22:29:b3:89:72:08:03:84:87:fc:a1:20:
                    12:18:d4:20:1e:d6:e5:53:02:b9:05:b3:25:87:1d:
                    93:63:5e:7a:15:a2:72:41:6d:20:06:d2:22:4f:58:
                    12:a7:15:97:ca:f8:0c:2f:de:91:14:ad:e1:a5:fd:
                    ef:25:ed:d9:a2:5e:2e:b1:dc:94:28:2a:5e:47:24:
                    e4:78:d7:b4:46:35:d4:f4:a6:eb:3a:0f:14:e8:15:
                    6d:1e:37:d3:14:6f:f4:f8:02:fe:f9:68:a6:e3:8a:
                    b6:13:bb:e6:97:47:96:3c:45:f8:50:59:cb:5c:f3:
                    d6:c7:1f:b5:a7:f0:5d:88:e7:50:12:a1:f7:d3:3c:
                    68:52:1d:5f:c7:80:56:b0:65:b7:80:13:c5:d5:25:
                    d4:a6:b6:02:a0:63:6e:11:80:36:5b:a4:6b:a9:ee:
                    87:4b:30:47:dc:13:31:bb:2e:d5:51:27:39:25:6c:
                    ea:d1:45:a4:a7:06:98:50:9a:d1:8d:9b:e5:f1:e3:
                    2c:d3:43:ce:db:d6:8c:3a:6f:8e:cf:a7:2f:ad:c1:
                    75:a6:43:d5:18:aa:84:1f:17:97:a0:fe:68:35:84:
                    93:e7:da:02:d7:ce:4d:f0:62:db:9a:7e:72:1b:b1:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C4:4F:52:08:3E:86:EA:A2:C8:44:DF:17:DE:3F:47:AF:46:61:F6
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/DsRPUgg-huqiyETfF94_R69GYfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:a8:cd:39:95:11:cc:3c:83:8e:b5:a0:20:52:1b:25:09:
         35:ac:72:3e:5a:4a:fc:9d:1b:04:22:4f:58:93:98:3d:c6:cf:
         12:95:ae:90:39:92:90:07:de:19:11:00:7d:b2:e5:2f:51:41:
         5f:d5:c3:27:46:2e:a8:e4:de:8a:a4:01:17:cd:7d:cc:95:a8:
         ad:54:c7:11:24:9d:b8:b0:46:57:38:17:c7:42:4f:50:8c:77:
         50:db:3d:b0:80:64:54:a0:7d:22:2d:0d:08:ff:80:9b:03:3f:
         6b:c4:6d:83:d5:85:b8:e6:eb:d5:35:15:26:7c:55:2b:56:59:
         e0:b3:49:ad:d1:31:85:8f:e1:53:c4:e4:a6:cc:99:37:58:36:
         1c:1e:35:45:79:0a:26:ca:e1:98:b2:2d:93:3d:cd:cc:33:70:
         54:60:c2:ab:f8:99:d5:ab:34:d1:a3:01:f4:8f:42:ca:2e:b5:
         bc:d8:56:78:0b:7d:e7:5e:2c:ed:aa:40:db:f1:08:68:24:f6:
         bf:5a:73:9b:8d:8d:53:25:70:5f:55:df:6c:11:0a:68:83:50:
         23:5d:dd:2a:b9:73:c2:e1:b6:d5:2d:25:0d:a9:5c:a4:98:3d:
         59:11:1c:1d:38:90:d6:d6:3b:d2:84:8c:15:b7:1f:62:b4:a6:
         f7:68:b3:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFP+DRTe6HzaWr24In30TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM0NGY1MjA4M2U4NmVhYTJjODQ0ZGYxN2RlM2Y0N2FmNDY2MWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDh5sAMYUD7jmUWmjTghsxEiKbOJ
cggDhIf8oSASGNQgHtblUwK5BbMlhx2TY156FaJyQW0gBtIiT1gSpxWXyvgML96R
FK3hpf3vJe3Zol4usdyUKCpeRyTkeNe0RjXU9KbrOg8U6BVtHjfTFG/0+AL++Wim
44q2E7vml0eWPEX4UFnLXPPWxx+1p/BdiOdQEqH30zxoUh1fx4BWsGW3gBPF1SXU
prYCoGNuEYA2W6Rrqe6HSzBH3BMxuy7VUSc5JWzq0UWkpwaYUJrRjZvl8eMs00PO
29aMOm+Oz6cvrcF1pkPVGKqEHxeXoP5oNYST59oC185N8GLbmn5yG7EVxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7ET1IIPobqoshE3xfeP0evRmH2MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvRHNSUFVnZy1odXFpeUVUZkY5NF9SNjlHWWZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUGBjMA0G
CSqGSIb3DQEBCwUAA4IBAQA+7KjNOZURzDyDjrWgIFIbJQk1rHI+Wkr8nRsEIk9Y
k5g9xs8Sla6QOZKQB94ZEQB9suUvUUFf1cMnRi6o5N6KpAEXzX3MlaitVMcRJJ24
sEZXOBfHQk9QjHdQ2z2wgGRUoH0iLQ0I/4CbAz9rxG2D1YW45uvVNRUmfFUrVlng
s0mt0TGFj+FTxOSmzJk3WDYcHjVFeQomyuGYsi2TPc3MM3BUYMKr+JnVqzTRowH0
j0LKLrW82FZ4C33nXiztqkDb8QhoJPa/WnObjY1TJXBfVd9sEQpog1AjXd0quXPC
4bbVLSUNqVykmD1ZERwdOJDW1jvShIwVtx9itKb3aLNA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org