Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n3FuW0mHx5LgOC1ILDDQdZ1-q4Q.roa
File:                     n3FuW0mHx5LgOC1ILDDQdZ1-q4Q.roa (raw, json)
Hash identifier:          L3NDuy5WjPU0fKzSi+nZXrVUhrqzFC9pjWWcZVOUdbI=
Subject key identifier:   9F:71:6E:5B:49:87:C7:92:E0:38:2D:48:2C:30:D0:75:9D:7E:AB:84
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       018976E63885A9A1DE830A610308F0D952F4
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n3FuW0mHx5LgOC1ILDDQdZ1-q4Q.roa
Signing time:             Fri 21 Jul 2023 05:22:26 +0000
ROA not before:           Fri 21 Jul 2023 05:22:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13335
IP address blocks:        80.94.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:76:e6:38:85:a9:a1:de:83:0a:61:03:08:f0:d9:52:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jul 21 05:22:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9f716e5b4987c792e0382d482c30d0759d7eab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:f5:13:11:42:17:ad:79:54:d2:76:fb:63:
                    95:10:cf:76:e4:98:bc:19:3e:ec:21:fd:a5:b9:ed:
                    bf:b4:e3:39:02:2f:17:ad:f3:5d:7e:a7:b3:e0:0e:
                    ed:c2:3a:2a:2a:12:08:8c:3b:8c:d0:5b:61:ea:9f:
                    67:da:fe:42:f6:41:c1:39:9e:97:d1:0c:47:b0:1c:
                    58:64:9d:06:7c:a5:7f:53:b7:b7:42:38:f2:e0:05:
                    d0:63:f6:43:f2:15:e6:f1:fe:96:1a:be:23:00:e6:
                    6c:5c:bf:c3:af:e5:89:01:66:71:04:7b:51:3e:05:
                    99:dd:22:ac:5b:81:5d:b1:ca:50:9b:4a:ea:e5:84:
                    85:9c:08:47:1a:c2:aa:ed:91:1c:eb:64:ca:be:de:
                    b6:9e:56:95:0e:18:bc:6e:43:67:44:d8:f6:80:e9:
                    7e:8a:3d:7b:bf:b8:99:76:7d:60:66:cc:07:34:7a:
                    93:3b:b4:91:ee:c4:32:85:ac:6f:32:7e:c4:24:c4:
                    57:ff:bc:2a:48:82:d9:26:76:ea:30:dd:1d:5f:82:
                    47:ea:50:91:a6:68:2f:65:f6:8c:09:db:9f:62:e6:
                    9a:7b:31:37:4a:43:a1:ee:d8:11:bc:b0:6c:5f:eb:
                    7d:a6:19:c2:20:0d:ae:8f:2a:1f:4a:1d:99:db:16:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:6E:5B:49:87:C7:92:E0:38:2D:48:2C:30:D0:75:9D:7E:AB:84
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/n3FuW0mHx5LgOC1ILDDQdZ1-q4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.94.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:c5:35:43:de:8d:0f:f7:31:96:4a:14:86:8e:7f:52:6a:
         08:be:f4:5f:11:a1:5c:b0:ba:c1:02:3b:50:3f:36:78:55:ee:
         66:36:b5:d5:32:0a:13:3a:d7:a5:7b:60:77:3a:f1:3b:3d:58:
         ef:1c:4c:ad:69:12:e7:14:ee:1c:de:74:ca:0a:13:be:1f:e4:
         d8:f0:32:b0:0b:36:e0:3f:00:6a:62:29:04:72:21:85:d5:49:
         88:b3:09:ba:85:d2:ec:72:c4:dc:ed:c2:ba:c5:94:08:47:fe:
         d4:76:14:5c:bf:27:2a:c0:09:61:b0:5e:39:f7:48:dd:a9:69:
         b8:55:62:7d:7d:5b:b0:20:04:0d:19:51:0e:3f:0d:69:0c:f4:
         a8:ad:12:86:6d:4e:43:ba:1b:7a:da:bc:5f:46:51:ee:74:99:
         d5:10:87:13:d8:77:4d:65:bc:57:5e:db:73:43:79:4e:68:0d:
         06:f4:68:74:2b:a5:22:b0:9a:6e:ba:91:ce:de:95:63:f6:c3:
         e2:82:f6:ae:12:50:82:f9:6d:56:54:f2:db:d0:29:da:da:aa:
         74:8d:1b:cd:33:de:4a:4e:1e:66:09:a8:92:f7:f6:46:35:23:
         9e:28:68:3a:0a:f8:89:b0:c6:54:95:8b:67:60:f0:55:dc:bb:
         0d:37:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org