Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/8Pung5JGeZSSkS-WwQ70jKwhVN4.roa
File:                     8Pung5JGeZSSkS-WwQ70jKwhVN4.roa (raw, json)
Hash identifier:          da0jt3bcppdiJkx0mY6Er9mi3oqb3JllMNlLwmf+LR8=
Subject key identifier:   F0:FB:A7:83:92:46:79:94:92:91:2F:96:C1:0E:F4:8C:AC:21:54:DE
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       018EEC17302288E02830D6F633E3E9E08256
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/8Pung5JGeZSSkS-WwQ70jKwhVN4.roa
Signing time:             Wed 17 Apr 2024 12:45:26 +0000
ROA not before:           Wed 17 Apr 2024 12:45:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215633
IP address blocks:        80.75.213.0/24 maxlen: 24
                          2a09:2b80:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 20 Apr 2024 16:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ec:17:30:22:88:e0:28:30:d6:f6:33:e3:e9:e0:82:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Apr 17 12:45:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f0fba7839246799492912f96c10ef48cac2154de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:71:2a:f8:1e:bf:0c:42:ef:3b:43:a5:0e:
                    07:d9:eb:d6:22:d4:71:35:c4:28:a8:ab:b3:be:55:
                    6b:7a:18:1c:84:8d:ce:78:2a:cd:14:55:a5:a7:09:
                    cc:2b:ba:9e:73:8a:f3:cc:f4:8d:d3:3f:f2:f1:ff:
                    55:ce:d3:8b:b1:34:95:77:0c:99:d0:97:37:80:23:
                    46:25:bb:95:bb:3e:24:36:56:71:2a:38:b2:9d:54:
                    8f:19:e2:33:59:35:33:2e:b1:b6:72:30:6e:a2:1b:
                    58:90:5b:26:66:c2:b6:dc:e7:5b:e5:03:47:dc:9a:
                    d8:45:f1:c6:88:b3:e9:67:77:53:98:80:b1:13:23:
                    30:00:20:2b:e1:9c:a4:a9:86:c1:f7:54:87:36:c3:
                    51:8c:d3:02:e4:b3:6b:f2:88:f3:49:a1:3a:46:ab:
                    dd:40:7c:22:2b:e0:50:31:2b:a6:d5:0c:d3:e5:0c:
                    81:6f:90:e6:d2:69:f3:73:4a:03:3b:3c:af:94:a8:
                    a4:5c:df:d8:dc:aa:d3:96:e2:be:b1:9e:f6:dd:b1:
                    0a:ba:25:9a:06:ad:4b:51:2a:0a:5e:30:05:03:3d:
                    a2:19:b1:29:db:06:17:a9:c9:e5:92:c4:aa:cf:bc:
                    bd:db:34:f0:18:64:e6:84:2a:c1:f3:a1:b7:e6:ab:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:A7:83:92:46:79:94:92:91:2F:96:C1:0E:F4:8C:AC:21:54:DE
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/8Pung5JGeZSSkS-WwQ70jKwhVN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24
                IPv6:
                  2a09:2b80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:72:d5:18:b6:d3:3d:a2:12:c5:ff:ea:69:ce:2d:ff:a3:
         23:22:5f:19:68:4d:84:58:5c:40:79:21:48:0a:f9:96:83:f8:
         70:03:c1:94:8d:b5:f7:37:54:5d:3b:a5:93:dd:23:e7:d5:76:
         e1:ab:9c:06:1c:f2:1b:00:5e:01:01:ce:b6:01:9c:ea:4d:bb:
         79:f2:16:65:89:c2:a1:a5:59:f8:6c:f8:af:c4:81:75:27:b9:
         82:4f:d5:b5:3a:6c:24:a0:93:d4:39:c6:d8:76:ca:1c:1b:5e:
         d0:e7:37:db:0c:31:d1:20:c3:e7:94:37:6e:55:a5:ed:64:49:
         c9:8c:dd:41:42:df:4c:1c:b7:d2:06:c8:3a:b8:c3:46:4a:50:
         ff:9a:02:09:af:75:9e:90:58:d8:61:83:39:f9:1a:76:8a:6b:
         e8:54:6f:1c:01:e8:f0:c6:b8:f4:31:5f:bf:af:bb:a4:1b:e9:
         8e:25:a4:db:1e:17:02:8e:2f:50:8c:d6:3e:b5:0e:45:c7:a5:
         f8:ac:43:d8:54:27:c4:ad:a9:7a:07:01:d3:62:e8:5d:9a:69:
         29:11:ce:67:65:db:39:3c:d6:68:fe:8b:f0:79:03:c2:cf:e4:
         5d:aa:dd:80:a9:7f:6a:07:3d:65:3c:b0:f5:fd:64:d1:8a:de:
         54:82:b9:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7sFzAiiOAoMNb2M+Pp4IJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjQwNDE3MTI0NTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGZiYTc4MzkyNDY3OTk0OTI5MTJmOTZjMTBlZjQ4Y2FjMjE1NGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPFxKvgevwxC7ztDpQ4H2evWItRx
NcQoqKuzvlVrehgchI3OeCrNFFWlpwnMK7qec4rzzPSN0z/y8f9VztOLsTSVdwyZ
0Jc3gCNGJbuVuz4kNlZxKjiynVSPGeIzWTUzLrG2cjBuohtYkFsmZsK23Odb5QNH
3JrYRfHGiLPpZ3dTmICxEyMwACAr4ZykqYbB91SHNsNRjNMC5LNr8ojzSaE6Rqvd
QHwiK+BQMSum1QzT5QyBb5Dm0mnzc0oDOzyvlKikXN/Y3KrTluK+sZ723bEKuiWa
Bq1LUSoKXjAFAz2iGbEp2wYXqcnlksSqz7y92zTwGGTmhCrB86G35qt/8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPD7p4OSRnmUkpEvlsEO9IysIVTeMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvOFB1bmc1SkdlWlNTa1MtV3dRNzBqS3doVk40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx
LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUEvVMA8E
AgACMAkDBwAqCSuAAAEwDQYJKoZIhvcNAQELBQADggEBAKBVctUYttM9ohLF/+pp
zi3/oyMiXxloTYRYXEB5IUgK+ZaD+HADwZSNtfc3VF07pZPdI+fVduGrnAYc8hsA
XgEBzrYBnOpNu3nyFmWJwqGlWfhs+K/EgXUnuYJP1bU6bCSgk9Q5xth2yhwbXtDn
N9sMMdEgw+eUN25Vpe1kScmM3UFC30wct9IGyDq4w0ZKUP+aAgmvdZ6QWNhhgzn5
GnaKa+hUbxwB6PDGuPQxX7+vu6Qb6Y4lpNseFwKOL1CM1j61DkXHpfisQ9hUJ8St
qXoHAdNi6F2aaSkRzmdl2zk81mj+i/B5A8LP5F2q3YCpf2oHPWU8sPX9ZNGK3lSC
uRM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org