Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/75AcStQPlNRTBIksWFkvfTqE9kA.roa
File:                     75AcStQPlNRTBIksWFkvfTqE9kA.roa (raw, json)
Hash identifier:          oU/F5HtOej0XsQ07776QZKAR0YSJspTdRtROyuieVhg=
Subject key identifier:   EF:90:1C:4A:D4:0F:94:D4:53:04:89:2C:58:59:2F:7D:3A:84:F6:40
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       018EE0DD0DB439887B8B59588B8537D86750
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/75AcStQPlNRTBIksWFkvfTqE9kA.roa
Signing time:             Mon 15 Apr 2024 08:26:07 +0000
ROA not before:           Mon 15 Apr 2024 08:26:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58224
IP address blocks:        80.75.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 12:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e0:dd:0d:b4:39:88:7b:8b:59:58:8b:85:37:d8:67:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Apr 15 08:26:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef901c4ad40f94d45304892c58592f7d3a84f640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:0e:a9:7b:80:50:32:15:05:39:27:8e:80:
                    b4:1d:19:28:24:91:62:9b:4f:09:50:37:0a:3b:67:
                    9a:33:52:8b:98:0d:ea:7c:69:ff:61:eb:3a:51:0a:
                    a6:07:b2:a8:85:c2:5a:f8:bc:2a:00:e3:66:96:5e:
                    2b:4a:84:ab:68:7c:23:ca:65:f1:3a:06:f6:28:ec:
                    0a:54:76:04:bb:1d:b6:0e:b2:90:dd:a9:e6:64:58:
                    33:3f:25:a8:1b:19:34:27:e4:18:a7:67:56:61:f2:
                    f2:ab:7b:52:88:27:d9:17:d5:57:af:e8:97:c7:a6:
                    b2:d6:70:e7:a7:ac:11:94:a7:1f:e3:a3:35:93:40:
                    51:d5:a8:dd:8b:f2:44:5b:ba:24:d8:6e:c2:d9:aa:
                    ac:82:7b:44:08:56:12:65:27:97:35:ef:9c:a8:6b:
                    c8:08:2c:b7:c1:c5:6d:0d:67:06:f0:75:43:b7:a3:
                    76:a7:ee:e4:4e:ec:00:da:00:77:1d:00:e1:2a:3a:
                    61:43:4e:61:ee:af:b4:99:1f:6d:37:f1:8b:a1:02:
                    51:27:2e:66:ed:6d:f4:92:30:3e:04:68:7f:17:0c:
                    75:69:86:98:40:f4:d5:c2:94:3f:fe:cd:d5:8d:6c:
                    fb:9d:58:d9:9a:18:c2:c7:8e:1f:ba:6f:3a:65:66:
                    19:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:90:1C:4A:D4:0F:94:D4:53:04:89:2C:58:59:2F:7D:3A:84:F6:40
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/75AcStQPlNRTBIksWFkvfTqE9kA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:15:0b:89:58:1d:11:b2:8a:70:70:08:46:1a:75:b8:31:
         33:0b:8c:61:54:1c:bc:0b:f9:b8:7e:28:6f:3a:f0:4f:7c:a2:
         66:6d:79:b6:6a:39:1a:33:3c:bf:c1:ba:1c:7f:b1:f3:48:f0:
         7f:68:ef:87:e9:39:1d:e6:34:f5:03:74:5a:66:a5:46:31:93:
         09:a5:24:2c:6f:26:37:f9:b2:c3:4d:ad:00:29:a9:2e:cf:fb:
         46:be:29:ad:bf:a0:07:90:27:06:99:8e:ae:12:14:2a:e1:22:
         7e:72:1f:1f:ca:48:be:fd:34:74:c2:4c:f7:3a:b1:48:05:3f:
         a6:8d:a4:68:30:35:75:48:43:61:8d:51:5c:9e:ed:d1:31:63:
         9c:88:5d:66:59:a7:1c:c7:66:b6:cb:ee:1b:fd:f0:fc:22:a2:
         df:b6:a5:0a:4e:fd:94:2e:d6:ec:42:ce:ad:a6:69:32:22:db:
         dc:89:a1:76:af:27:20:65:68:dc:e0:b5:6e:00:2f:0b:57:20:
         07:73:31:d3:ea:19:55:f0:dd:62:dc:a7:f4:b5:6a:d0:3c:25:
         a6:37:84:0f:84:d5:67:ac:80:a2:0a:02:dd:ac:21:be:df:bf:
         3f:0e:84:1b:b7:0e:0e:0b:da:16:38:87:bf:80:58:37:25:00:
         ba:8b:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org