Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1tv8UeWRpxwfLQqh3_9dMubi0Kc.roa
File:                     1tv8UeWRpxwfLQqh3_9dMubi0Kc.roa (raw, json)
Hash identifier:          bnbAKF9AVNA7XRkz4ogWrq6lwBxkV7PgHvlzEclpwhw=
Subject key identifier:   D6:DB:FC:51:E5:91:A7:1C:1F:2D:0A:A1:DF:FF:5D:32:E6:E2:D0:A7
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       0188959C958C51EEFE2A985A58FBC22C9A6C
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1tv8UeWRpxwfLQqh3_9dMubi0Kc.roa
Signing time:             Wed 07 Jun 2023 11:27:27 +0000
ROA not before:           Wed 07 Jun 2023 11:27:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3507
IP address blocks:        89.23.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Jun 2023 19:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:9c:95:8c:51:ee:fe:2a:98:5a:58:fb:c2:2c:9a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Jun  7 11:27:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6dbfc51e591a71c1f2d0aa1dfff5d32e6e2d0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:6c:a6:74:94:f5:62:e3:f5:de:e3:2f:7d:
                    1e:aa:22:07:36:c1:57:8d:f7:0b:70:af:96:cd:20:
                    e9:e3:41:0c:db:db:24:e9:73:84:93:51:f0:d6:a2:
                    10:33:81:7d:4c:96:f5:b8:58:01:9a:3a:a6:54:59:
                    1a:ee:ae:c3:c8:09:4b:3c:24:f7:1e:a5:b6:3e:ca:
                    f2:a0:8b:6f:c9:d6:2c:62:32:64:e5:c9:aa:13:fc:
                    64:54:d9:9e:69:a6:c5:a8:8e:f5:8b:a2:f4:53:15:
                    d4:38:8c:1d:4e:25:be:cc:eb:d4:eb:7c:b1:53:87:
                    8f:57:fa:1b:d8:93:ea:87:cf:b6:9e:0f:34:53:9c:
                    b6:d1:e2:bc:66:1f:60:de:46:ea:f2:1e:9d:e8:52:
                    27:9e:ed:13:d6:9e:79:7f:2d:b3:c5:2e:99:7d:6c:
                    7f:45:59:a9:1e:59:03:50:99:d9:e9:8a:a3:a4:f1:
                    ee:b2:3f:fa:14:ec:0e:09:c8:6f:51:1d:75:1a:6c:
                    6d:67:dc:1e:48:90:c6:78:bb:22:ef:04:79:4b:70:
                    6e:e8:c9:55:2a:32:cf:6c:0f:04:7b:13:fc:65:d3:
                    bf:5a:1a:18:47:7b:5e:6d:2a:23:54:ff:19:7c:8f:
                    7d:5c:c7:13:c7:65:58:4a:a1:7f:0f:88:bb:01:d0:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DB:FC:51:E5:91:A7:1C:1F:2D:0A:A1:DF:FF:5D:32:E6:E2:D0:A7
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/1tv8UeWRpxwfLQqh3_9dMubi0Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:4e:32:e2:ef:ae:87:be:81:09:b3:87:76:36:0d:18:0d:
         15:48:a8:3b:14:80:b8:ba:ee:a1:6a:f7:b4:57:a7:40:d0:91:
         aa:89:32:23:de:05:ee:66:cb:be:e8:a0:88:61:4d:e3:41:8a:
         89:a3:2b:fb:22:91:e3:e8:0f:01:63:48:7c:89:81:64:7e:8a:
         8b:e2:4b:7d:10:2f:ea:bf:30:34:63:7c:7b:d1:68:fa:e5:25:
         a1:a9:39:4b:63:4e:5f:23:40:cf:f5:3b:56:45:0f:8d:69:4a:
         19:c6:5a:d2:30:a8:5e:f0:74:26:2a:22:e0:ca:bd:56:f1:36:
         8f:c0:3d:02:4e:d7:e4:9f:91:df:15:92:2c:3f:25:85:df:7d:
         9c:a2:06:7f:32:03:c2:bd:16:a3:74:41:d7:5d:88:b4:b2:5e:
         f1:23:6f:2f:cc:92:0f:98:b2:ea:39:34:8f:54:8c:d5:cf:11:
         e2:d2:1d:58:78:59:70:6d:c2:0f:4e:5b:6c:8b:9f:b7:c1:e5:
         ed:c6:bc:d4:e3:8e:70:ff:86:ea:1d:32:97:23:1b:e0:46:97:
         69:38:e8:a8:57:1b:7f:d3:38:8a:eb:e3:c1:e1:8b:a1:33:0c:
         5c:7a:e9:48:6c:f0:a0:a7:40:98:b5:c7:8a:48:22:21:d5:83:
         38:36:53:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org