Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zO-kMk543fUUtzPprk2m78Ow1L0.roa
File:                     zO-kMk543fUUtzPprk2m78Ow1L0.roa (raw, json)
Hash identifier:          BGMlaV3QU8t8VgNW/ur++AiJmE4YIXpI9aqHU8CMq/I=
Subject key identifier:   CC:EF:A4:32:4E:78:DD:F5:14:B7:33:E9:AE:4D:A6:EF:C3:B0:D4:BD
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       0185EF3507C605BD13ABA993534EADAC8E74
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zO-kMk543fUUtzPprk2m78Ow1L0.roa
Signing time:             Thu 26 Jan 2023 17:51:48 +0000
ROA not before:           Thu 26 Jan 2023 17:51:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60657
IP address blocks:        80.96.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ef:35:07:c6:05:bd:13:ab:a9:93:53:4e:ad:ac:8e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan 26 17:51:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ccefa4324e78ddf514b733e9ae4da6efc3b0d4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:58:ec:29:6f:f3:a0:e1:95:ca:41:db:39:ba:
                    28:1c:33:25:fa:b3:12:11:c6:b2:59:b4:5b:c8:c8:
                    42:0a:c5:17:af:cb:d7:eb:5c:5e:fa:a8:40:69:fc:
                    b2:65:f8:4c:83:da:a7:eb:57:d7:14:cd:97:b8:5a:
                    8f:5d:ef:bf:3c:d1:5f:a7:df:30:1d:b1:cd:28:8b:
                    32:2d:ba:76:92:e6:6a:2a:d1:be:6f:59:1a:f7:21:
                    5b:81:c0:55:c7:46:3f:63:62:e8:8a:f4:04:2c:78:
                    e5:7d:28:40:62:1e:84:2b:53:74:58:19:a5:9f:fa:
                    40:ef:3f:34:c7:72:e1:7a:e8:50:45:87:33:9c:04:
                    2c:ab:e4:92:c4:ea:52:87:bb:5f:d3:59:c0:51:d9:
                    50:7a:92:5b:6e:9b:92:28:3a:a1:9f:e7:0c:73:ac:
                    20:f9:c5:86:18:f2:3f:01:a5:29:18:4f:3e:43:ef:
                    87:9f:a2:6c:10:66:8f:61:36:7c:f9:bc:48:74:7a:
                    f4:3d:ea:f4:60:b6:19:5b:46:f8:1b:05:72:fb:ea:
                    bf:0f:a8:0e:07:3b:8d:d9:c9:5d:f3:ad:c4:ed:ee:
                    d9:3b:bb:2a:00:12:39:bd:91:58:14:ff:14:76:6a:
                    30:89:6c:ec:e0:c8:63:7b:e7:d2:aa:ca:0a:59:d0:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EF:A4:32:4E:78:DD:F5:14:B7:33:E9:AE:4D:A6:EF:C3:B0:D4:BD
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/zO-kMk543fUUtzPprk2m78Ow1L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.96.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:29:55:02:ea:e6:13:e2:f5:db:e7:ca:25:11:82:af:39:
         8f:46:1b:78:c8:d9:7f:90:85:3d:cc:a2:d2:1a:d8:db:5e:ec:
         d1:f7:51:16:a1:1d:94:0e:f7:86:70:d6:28:8c:bf:b5:e4:41:
         d8:88:30:1d:3f:f8:c1:70:34:1b:be:e3:9a:c3:a4:ba:10:b2:
         02:82:1d:a5:13:55:69:89:47:b2:ba:60:3c:d7:9a:66:35:8a:
         7b:e8:ab:a8:ff:2b:90:30:1a:bd:a0:ff:5f:41:82:b5:8e:44:
         8a:8e:4f:4c:c7:56:97:9a:ba:87:26:21:48:5c:88:ca:64:9c:
         cc:0f:b0:db:1a:e9:61:e9:7a:41:e5:94:d5:31:0e:98:15:4f:
         f3:f7:53:6d:f7:27:17:0f:e6:a6:eb:0e:a1:9a:2a:60:fa:29:
         12:c5:61:eb:82:e0:8a:be:b5:bf:96:d2:2a:cb:83:19:92:90:
         eb:fe:f1:0a:ba:14:f7:20:26:df:f2:48:bc:89:05:31:5d:9f:
         a4:7f:0a:92:a1:bd:63:7d:61:1f:ed:ef:5a:02:72:88:0b:4e:
         02:82:08:f0:fc:2f:2b:8a:a2:c9:be:b5:07:36:b9:33:c8:f6:
         65:f5:8f:2e:51:84:90:24:55:8f:76:e3:e6:c8:d3:03:e6:0e:
         e4:ea:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org