Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa
File:                     8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa (raw, json)
Hash identifier:          FR5h0jDHWcMoWX45N9FLgXzv7TyMd5jsQGJEo0fVpEE=
Subject key identifier:   F3:EC:B5:35:15:BA:11:12:67:35:B7:28:24:1C:D2:CF:99:05:07:39
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       018570797ADF0307EB5E7F24566E21ED6F5C
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa
Signing time:             Mon 02 Jan 2023 03:14:47 +0000
ROA not before:           Mon 02 Jan 2023 03:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41584
IP address blocks:        193.164.80.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:7a:df:03:07:eb:5e:7f:24:56:6e:21:ed:6f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Jan  2 03:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f3ecb53515ba11126735b728241cd2cf99050739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:8b:15:78:cf:91:e5:98:69:c6:f4:3a:ab:
                    ed:80:ee:cd:25:43:3b:7d:a4:46:48:e5:09:3f:c2:
                    3b:75:c7:b6:71:db:01:bd:d9:cc:c9:7c:d6:68:b6:
                    1b:8e:7e:82:83:8c:14:4d:3a:2f:b2:e8:22:ea:69:
                    70:4f:26:71:65:c0:10:6e:68:20:1e:eb:0e:dd:07:
                    16:d2:ed:c8:02:42:72:e0:fd:6b:e9:8e:fb:ce:7f:
                    c6:59:7b:8d:df:2b:86:df:c3:38:a8:ca:02:50:4c:
                    5b:ca:58:fd:7d:46:2a:e7:e7:1b:fc:a2:4a:7d:f1:
                    a6:87:ca:3f:8b:32:fe:86:d6:ef:26:4d:68:cf:0d:
                    5c:2f:55:77:a1:f7:b2:94:10:0e:70:4f:17:c7:d7:
                    db:9c:6a:ef:ac:1f:64:67:01:e4:5e:3f:40:c4:53:
                    63:fe:d4:13:b0:0b:76:5a:d2:a0:7c:10:6d:f9:a7:
                    e3:81:4f:b2:20:ac:1f:24:7b:4a:d5:ff:9e:39:ed:
                    61:94:1f:aa:66:fa:c8:0d:f7:c8:e4:7f:85:e1:05:
                    9a:f9:bd:97:22:24:a1:3d:cb:8f:fd:18:7f:f0:a7:
                    85:eb:ce:57:a4:bc:cd:7c:5e:0c:d3:2a:d1:f3:4e:
                    a5:ba:d7:bb:ac:ac:95:9f:11:0e:a5:c4:f6:66:77:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:B5:35:15:BA:11:12:67:35:B7:28:24:1C:D2:CF:99:05:07:39
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/8-y1NRW6ERJnNbcoJBzSz5kFBzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:8c:53:be:2b:c7:78:a3:cc:9a:7e:b2:17:a8:78:5d:0b:
         2f:82:97:b3:66:cd:35:29:d1:2a:7f:1d:b0:21:d8:a3:e5:c5:
         21:ab:64:0f:b5:e6:15:52:fb:b7:d8:60:8c:32:a9:bf:c3:6b:
         c5:27:cd:0b:78:41:68:c1:57:7f:8b:c9:4b:16:70:8e:56:fa:
         f7:cc:cc:2f:53:bb:bd:05:49:df:f7:1b:0e:1a:2e:81:6d:3d:
         76:44:99:11:73:a7:39:e5:75:1c:51:d6:94:e7:84:72:38:3d:
         32:c4:b4:72:72:ad:14:98:63:23:e9:af:92:2f:ba:e4:88:33:
         84:a7:d2:17:6f:a2:2d:f7:91:ee:28:97:83:ab:ed:35:cb:30:
         25:46:29:21:49:b2:60:8b:36:23:ab:60:2f:0f:71:0a:98:62:
         1a:8f:8a:86:8b:7a:55:7f:92:2a:4b:92:0b:29:0b:13:32:f6:
         2d:27:d1:cf:9b:4a:ef:3b:ed:06:a0:9c:ae:33:35:55:78:e8:
         68:58:3c:c3:74:a0:b1:09:9e:cf:25:98:60:fd:70:e5:3b:ad:
         47:79:e2:2a:72:5d:e1:07:a2:62:ec:62:81:46:80:60:23:a2:
         68:1c:88:2c:0f:81:ce:9a:00:eb:5b:57:a3:da:1b:68:65:65:
         2e:0e:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:44 2024 by rpki-client on console-fra.rpki-client.org