Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/cC6HYYgYn9SMYj0rdbiXF-haUfM.roa
File:                     cC6HYYgYn9SMYj0rdbiXF-haUfM.roa (raw, json)
Hash identifier:          DUEMR9fl8Y3SojURUG5neuH99wNPXsWMwwxAWg85tpc=
Subject key identifier:   70:2E:87:61:88:18:9F:D4:8C:62:3D:2B:75:B8:97:17:E8:5A:51:F3
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       018E56111B575541375438E22B8F4F8BE598
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/cC6HYYgYn9SMYj0rdbiXF-haUfM.roa
Signing time:             Tue 19 Mar 2024 09:35:45 +0000
ROA not before:           Tue 19 Mar 2024 09:35:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     52209
IP address blocks:        80.75.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 15:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:56:11:1b:57:55:41:37:54:38:e2:2b:8f:4f:8b:e5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Mar 19 09:35:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=702e876188189fd48c623d2b75b89717e85a51f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:26:1b:6d:90:86:8d:c8:cc:09:d9:c2:dd:
                    a4:04:02:22:f9:10:5a:60:00:2b:54:8f:c4:82:32:
                    75:92:0a:7c:2d:60:6a:bb:b1:2b:a7:bf:77:6a:cc:
                    91:41:37:9f:1a:ef:c7:c1:3c:72:5d:16:96:08:68:
                    f4:20:3a:69:e2:fa:89:7d:44:97:25:5e:66:e9:5a:
                    af:b8:ef:6c:b0:9e:cb:d8:cf:ce:ab:e2:11:8a:db:
                    91:f5:88:70:f4:3d:65:09:db:46:a9:d5:ed:66:3c:
                    e1:7e:e4:28:39:70:51:e4:8c:69:2f:19:d4:fb:a2:
                    24:22:e8:4e:8c:fe:70:53:2d:de:bf:b2:a2:7d:46:
                    d0:21:42:6c:37:4e:90:30:d5:2f:93:3d:c0:11:41:
                    b8:cf:39:89:b5:d7:6a:bb:ba:74:38:97:d4:bb:45:
                    a0:7d:93:f5:72:b8:d2:6e:ad:ef:fc:81:48:f1:7a:
                    c7:8a:a0:1b:29:6c:53:ce:85:d3:99:3f:dc:b7:0e:
                    68:61:36:22:63:45:6e:ea:e2:72:ab:95:bc:53:9e:
                    57:19:52:45:95:3c:57:96:79:0e:22:3b:45:97:28:
                    91:61:7d:36:24:6d:67:ab:14:2d:69:af:f7:3e:66:
                    93:33:c1:7a:aa:4e:ae:10:b5:7e:49:42:2e:d8:57:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:87:61:88:18:9F:D4:8C:62:3D:2B:75:B8:97:17:E8:5A:51:F3
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/cC6HYYgYn9SMYj0rdbiXF-haUfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:32:15:a6:2e:da:86:5c:46:28:f3:02:ef:22:6d:87:66:95:
         25:23:2d:7d:6f:0d:1f:f1:18:0b:be:fb:33:99:5e:88:c8:94:
         53:a6:6c:55:13:91:8d:a2:1f:ff:f0:f8:3a:a0:f5:95:ee:2c:
         19:45:80:51:e6:b1:81:b2:a5:31:52:72:1d:94:75:c7:59:59:
         ce:04:e6:37:7a:12:6a:ac:6e:2a:5a:2c:21:7c:ad:ca:95:f7:
         c4:30:cf:b1:64:41:d8:0d:2d:28:68:e2:64:93:96:a5:19:08:
         38:90:08:fd:09:23:14:52:92:c9:5d:4e:57:c8:43:8f:59:85:
         4d:9f:3c:a0:af:eb:46:cf:ed:d8:8c:9c:47:40:98:3f:d2:b4:
         13:f0:c3:74:99:ad:20:99:a8:35:7b:05:6b:d7:9a:45:60:8f:
         da:a2:93:06:aa:61:32:8f:b0:c2:96:48:63:12:0b:40:dc:d7:
         73:06:af:c2:8e:e2:fb:17:f7:da:25:14:1d:63:2d:c1:6b:7b:
         e8:a3:26:0e:d6:a7:2d:12:30:e1:ae:eb:91:c9:4b:6b:fd:f7:
         68:57:77:a6:ce:00:e1:34:09:f3:ae:a0:d5:e2:e7:82:af:fb:
         00:54:ff:32:7a:69:d0:4a:70:e6:c1:e6:52:33:f0:f4:af:ef:
         f7:b1:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:17 2024 by rpki-client on console-fra.rpki-client.org