Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VV94Od5wz8X7uC-jQjKVWJhhAXY.roa
File:                     VV94Od5wz8X7uC-jQjKVWJhhAXY.roa (raw, json)
Hash identifier:          BZOjWBYCyk2I2rmyg6iajFt4/PICV+XZow9nGETcSk0=
Subject key identifier:   55:5F:78:39:DE:70:CF:C5:FB:B8:2F:A3:42:32:95:58:98:61:01:76
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       0185728C836525112DB08FD7E1E12600A881
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VV94Od5wz8X7uC-jQjKVWJhhAXY.roa
Signing time:             Mon 02 Jan 2023 12:54:49 +0000
ROA not before:           Mon 02 Jan 2023 12:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57199
IP address blocks:        80.67.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:83:65:25:11:2d:b0:8f:d7:e1:e1:26:00:a8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Jan  2 12:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=555f7839de70cfc5fbb82fa34232955898610176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:61:fd:a5:5b:62:f4:51:22:0a:e6:95:89:
                    20:db:2e:6e:2f:79:3d:69:68:6e:7a:66:65:6b:66:
                    ab:94:2a:20:a7:ae:c8:7d:fd:62:ca:76:e0:a1:2b:
                    9e:db:31:22:e6:23:f4:79:29:37:2d:7d:62:40:40:
                    8a:88:3b:58:2b:62:23:47:2c:12:e7:95:99:8c:5a:
                    cb:f2:46:a6:b5:d9:75:ed:ec:92:06:be:ba:17:e2:
                    8b:0b:8b:a0:a4:6e:aa:23:31:6b:b5:ce:b2:ce:be:
                    b2:32:80:b1:0b:ba:eb:b5:60:30:6a:97:f9:02:58:
                    fe:da:cd:2e:6f:71:05:4d:af:e4:e9:0c:6c:5d:e4:
                    a1:b5:a3:44:08:05:c9:31:30:89:f5:75:85:7a:25:
                    81:c4:54:90:a0:a7:e0:67:24:07:1f:42:1b:e1:fb:
                    3d:88:b1:fc:c6:de:d3:f5:06:3e:d6:bd:84:d3:67:
                    83:49:8b:3d:94:c5:73:60:a6:6c:81:5d:8d:8c:d4:
                    9c:06:0c:c5:cc:f1:2f:c8:53:ec:c3:6c:53:9d:f3:
                    d7:f1:5f:22:e6:87:b5:ab:99:70:74:92:60:26:92:
                    61:ac:88:77:e3:2f:c9:91:07:97:00:f8:32:70:19:
                    1b:64:df:49:43:00:89:80:08:07:c3:b2:4e:54:dc:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5F:78:39:DE:70:CF:C5:FB:B8:2F:A3:42:32:95:58:98:61:01:76
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/VV94Od5wz8X7uC-jQjKVWJhhAXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:14:3e:b7:83:5b:2d:73:7e:23:c9:3d:2a:8b:92:7f:ee:
         ad:01:c2:29:bd:9b:72:00:3b:11:7d:71:a0:a6:e5:21:b2:c3:
         cf:6e:7d:8c:9d:5d:58:fe:fc:da:ea:e3:46:da:2d:78:a4:56:
         37:7a:2e:7b:72:34:83:87:2c:7e:b9:0e:b3:38:de:25:f7:67:
         6b:e5:ae:26:93:ee:d5:a1:36:b8:38:ab:fc:78:f0:58:5d:49:
         20:81:1c:fd:b8:3b:76:e4:04:ab:32:df:01:e1:a2:0a:3c:d1:
         3a:8e:58:54:be:ae:b6:f7:ae:b8:0e:be:f9:fe:61:27:99:29:
         2f:9c:4c:ef:02:08:69:d1:d5:44:12:d5:d3:b7:dc:ba:02:4b:
         44:d2:ff:5a:99:63:cb:d8:7c:29:3c:7b:65:54:e1:9f:78:5b:
         60:3f:3c:f0:68:3d:71:12:e9:eb:e7:72:92:a7:a5:46:65:e4:
         e2:65:b7:05:e9:e9:05:66:7b:cd:47:ae:a2:70:35:89:f6:a0:
         fb:dd:16:d7:5c:e8:2c:44:57:ec:ff:63:2d:33:38:a6:8d:5c:
         fe:a3:44:93:f5:98:c7:8c:fb:54:a0:b6:1d:3f:7e:4b:cb:33:
         a1:94:b2:66:7c:20:1f:3c:80:92:3f:c1:89:34:d8:52:2c:e4:
         cc:ca:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:20 2024 by rpki-client on console-fra.rpki-client.org