Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/RMpSZPeD6wTAj5S3KSlnw5MTyAQ.roa
File:                     RMpSZPeD6wTAj5S3KSlnw5MTyAQ.roa (raw, json)
Hash identifier:          sUeA1qudItMAMXx40IxP6pWSmFzV8fpFW1vdk//XtuA=
Subject key identifier:   44:CA:52:64:F7:83:EB:04:C0:8F:94:B7:29:29:67:C3:93:13:C8:04
Certificate issuer:       /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial:       018AF4D2842FEFEE1A7E3B40B13B1D74FFB7
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/RMpSZPeD6wTAj5S3KSlnw5MTyAQ.roa
Signing time:             Tue 03 Oct 2023 09:15:51 +0000
ROA not before:           Tue 03 Oct 2023 09:15:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12552
IP address blocks:        80.242.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 14:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f4:d2:84:2f:ef:ee:1a:7e:3b:40:b1:3b:1d:74:ff:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
        Validity
            Not Before: Oct  3 09:15:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44ca5264f783eb04c08f94b7292967c39313c804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:b2:75:4f:ab:45:c9:2a:39:25:ce:93:fb:
                    f8:ae:ed:1d:77:87:e8:c5:54:ad:2b:9f:dd:f3:9a:
                    57:f4:c1:7a:05:6e:91:4f:b4:d3:86:21:d7:70:12:
                    cd:4a:40:2e:47:0e:7c:c8:e6:71:da:e2:32:1e:48:
                    27:99:10:55:46:8f:5f:06:ca:b4:20:61:01:0e:e0:
                    c1:b0:d8:f3:15:5d:32:29:5b:d6:bb:27:4e:32:41:
                    92:8c:e0:a4:0f:16:67:98:14:b7:e1:bc:86:81:1d:
                    35:d5:65:a7:42:40:02:ec:e3:5a:de:28:92:3a:1d:
                    fc:1d:57:9d:4c:fd:8e:52:4d:de:4e:62:6a:6c:b7:
                    59:15:a8:20:5d:1b:72:24:27:92:a8:35:fe:72:c0:
                    40:18:93:2f:53:65:45:79:d2:be:ae:8d:a3:d1:be:
                    4f:4d:97:3a:cc:84:8f:06:08:95:48:15:0f:19:ad:
                    17:b1:98:7a:21:91:25:99:f2:42:c1:9b:13:01:b4:
                    5a:95:3b:d5:00:36:d2:f1:7f:a6:80:f5:9c:38:56:
                    08:2e:db:db:69:d9:43:f3:3f:a6:10:00:04:d8:60:
                    9e:04:81:d7:24:d5:5d:cc:f6:44:a6:77:b6:63:7a:
                    50:36:04:ca:1e:a4:fc:68:b7:5f:c1:f1:e9:df:65:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:52:64:F7:83:EB:04:C0:8F:94:B7:29:29:67:C3:93:13:C8:04
            X509v3 Authority Key Identifier:
                keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/RMpSZPeD6wTAj5S3KSlnw5MTyAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.242.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:e3:ec:a0:e5:00:de:99:a5:51:7b:99:a0:8d:a8:78:f6:
         43:f2:0c:3f:58:ee:8a:64:fe:75:31:2c:eb:fb:15:20:70:33:
         e9:d4:dd:e7:a4:99:2c:e6:7f:55:b1:9f:9c:77:07:37:d4:b2:
         9b:c2:df:d3:46:91:96:d9:cb:09:6e:eb:35:b2:8d:ad:24:37:
         7f:67:60:97:0f:49:3d:c9:bc:9d:bd:e4:b0:9b:b7:4b:5f:f6:
         6b:cb:d2:4d:b7:6f:77:fb:cf:31:9a:69:29:96:44:8d:a2:d2:
         ad:45:71:60:24:80:d0:f0:17:46:ec:18:b0:16:ad:27:d8:17:
         78:ef:70:cd:2e:24:ad:a9:53:45:48:4f:4c:d0:27:22:5b:37:
         b0:94:cf:e7:41:7c:5e:54:df:89:e8:18:57:63:6c:4a:35:46:
         35:44:03:76:d2:04:bd:e4:05:14:00:17:43:13:a1:cc:a9:8d:
         f9:c5:ee:51:fc:ab:65:45:9b:9e:93:0a:93:9c:c6:3e:9c:1b:
         2a:23:0f:22:69:e2:2b:f5:c1:b9:da:1c:18:29:cc:f1:ee:4c:
         9f:9c:56:80:b6:56:81:61:0b:4b:d1:4a:1e:22:d6:93:ea:c5:
         51:6e:11:f2:df:43:d8:75:8d:56:da:08:f3:d9:9a:c7:83:51:
         ce:d8:48:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr00oQv7+4afjtAsTsddP+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx
ZWI5Y2EwHhcNMjMxMDAzMDkxNTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGNhNTI2NGY3ODNlYjA0YzA4Zjk0YjcyOTI5NjdjMzkzMTNjODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxROydU+rRckqOSXOk/v4ru0dd4fo
xVStK5/d85pX9MF6BW6RT7TThiHXcBLNSkAuRw58yOZx2uIyHkgnmRBVRo9fBsq0
IGEBDuDBsNjzFV0yKVvWuydOMkGSjOCkDxZnmBS34byGgR011WWnQkAC7ONa3iiS
Oh38HVedTP2OUk3eTmJqbLdZFaggXRtyJCeSqDX+csBAGJMvU2VFedK+ro2j0b5P
TZc6zISPBgiVSBUPGa0XsZh6IZElmfJCwZsTAbRalTvVADbS8X+mgPWcOFYILtvb
adlD8z+mEAAE2GCeBIHXJNVdzPZEpne2Y3pQNgTKHqT8aLdfwfHp32UOaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFETKUmT3g+sEwI+UtykpZ8OTE8gEMB8GA1UdIwQY
MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt
MTg1MGZmZjA0NDI1LzEvUk1wU1pQZUQ2d1RBajVTM0tTbG53NU1UeUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1
LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPIfMA0G
CSqGSIb3DQEBCwUAA4IBAQAGouPsoOUA3pmlUXuZoI2oePZD8gw/WO6KZP51MSzr
+xUgcDPp1N3npJks5n9VsZ+cdwc31LKbwt/TRpGW2csJbus1so2tJDd/Z2CXD0k9
ybydveSwm7dLX/Zry9JNt293+88xmmkplkSNotKtRXFgJIDQ8BdG7BiwFq0n2Bd4
73DNLiStqVNFSE9M0CciWzewlM/nQXxeVN+J6BhXY2xKNUY1RAN20gS95AUUABdD
E6HMqY35xe5R/KtlRZuekwqTnMY+nBsqIw8iaeIr9cG52hwYKczx7kyfnFaAtlaB
YQtL0UoeItaT6sVRbhHy30PYdY1W2gjz2ZrHg1HO2EgJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:58 2024 by rpki-client on console-ams.rpki-client.org