Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/PCpQkZvk09sqqGwHDziEfqv7Igk.roa
File:                     PCpQkZvk09sqqGwHDziEfqv7Igk.roa (raw, json)
Hash identifier:          F+msfv7lEOiiRp2ubwvcPjo+0FGBCuqduKuaNTOw2Ik=
Subject key identifier:   3C:2A:50:91:9B:E4:D3:DB:2A:A8:6C:07:0F:38:84:7E:AB:FB:22:09
Certificate issuer:       /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial:       01878002D2E401FBD8D017221575781AB0FC
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/PCpQkZvk09sqqGwHDziEfqv7Igk.roa
Signing time:             Fri 14 Apr 2023 13:44:41 +0000
ROA not before:           Fri 14 Apr 2023 13:44:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201430
IP address blocks:        185.80.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:02:d2:e4:01:fb:d8:d0:17:22:15:75:78:1a:b0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
        Validity
            Not Before: Apr 14 13:44:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3c2a50919be4d3db2aa86c070f38847eabfb2209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0e:32:62:e6:ed:66:5e:ce:dc:91:be:41:de:
                    47:6d:24:ca:26:19:45:e4:ba:f5:18:86:bd:a8:fb:
                    2c:49:93:82:a2:23:05:67:20:8c:0f:57:ed:01:27:
                    b2:09:03:4a:33:9c:18:99:dc:83:cb:ca:96:f5:35:
                    7f:3c:82:8a:57:f7:61:7b:c4:ee:0e:bc:00:94:a7:
                    b9:18:b9:8b:6f:9b:45:64:82:8b:49:e9:0d:7d:16:
                    4b:83:8d:50:ef:5e:85:d4:4d:46:f3:5e:87:87:77:
                    77:d1:b3:01:ed:c7:da:8b:50:c4:75:bb:cf:72:ce:
                    0a:42:1a:8c:8f:23:45:fa:a3:38:4d:04:30:dc:26:
                    8a:aa:1b:00:f5:cb:8a:8c:c6:fb:36:17:c1:c9:2c:
                    5a:88:13:12:b7:fc:e3:b7:75:44:59:6c:95:51:07:
                    9f:5a:ba:4e:0b:53:cf:5e:d6:95:26:36:15:28:13:
                    af:73:81:06:1d:a3:db:2a:3c:92:aa:87:56:dc:78:
                    7c:af:2b:77:59:4b:42:7c:c9:8c:16:3a:bf:1b:24:
                    e0:f7:b9:48:a5:27:ce:83:02:56:eb:f5:21:a3:b1:
                    42:d1:5a:e5:df:70:cd:e5:24:29:ca:f5:15:86:8a:
                    24:1f:a0:44:7a:76:29:47:2e:43:7a:37:2e:83:c4:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2A:50:91:9B:E4:D3:DB:2A:A8:6C:07:0F:38:84:7E:AB:FB:22:09
            X509v3 Authority Key Identifier:
                keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/PCpQkZvk09sqqGwHDziEfqv7Igk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:99:68:bf:0a:b2:97:e9:06:46:c8:69:cb:df:82:5a:4a:d7:
         33:db:95:06:ab:a7:0b:79:c1:8a:e6:dd:19:c8:de:a1:a1:e6:
         29:a8:99:03:40:be:18:28:53:a6:e2:52:63:b6:44:a0:02:a4:
         12:44:de:5b:b0:16:4b:50:09:66:4b:fe:73:21:8e:ab:6e:f5:
         d9:cd:73:29:38:2e:a9:a7:7c:15:b1:80:25:2d:f6:ce:c7:2a:
         26:4a:8c:a2:09:7e:0d:29:ad:61:9b:e6:ad:27:0e:64:6a:3d:
         63:d0:1e:3c:14:63:9c:e0:94:7e:d4:4e:ce:ce:ab:15:03:1b:
         a5:c7:59:3a:28:89:dc:79:07:88:f5:bb:ca:ae:fd:5c:7a:e6:
         ad:61:0d:07:1d:98:40:0e:a7:a4:03:20:1d:9c:ab:6e:78:eb:
         ea:b5:53:78:b2:24:ea:95:ed:f7:cc:42:22:2b:b7:01:d8:75:
         81:64:52:e9:d9:ae:ae:6c:6e:15:dd:42:a0:b8:86:bf:5d:3b:
         c5:50:2e:66:54:ff:9e:8d:85:a5:e5:d0:0e:f8:01:98:29:f1:
         7c:f3:fc:b2:55:a0:ff:40:2a:04:ca:ef:52:20:99:02:3b:20:
         44:6b:ac:32:27:3d:09:00:32:4d:15:0a:e7:39:6b:74:6e:e7:
         ec:b9:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:01 2024 by rpki-client on console-ams.rpki-client.org