Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa
File:                     faVER0OejA1XnxVFwMnu-IPoLOI.roa (raw, json)
Hash identifier:          R7O/Qc6QMbcNjgMttyqK17MMAO406cS2sHM2+Itqq8M=
Subject key identifier:   7D:A5:44:47:43:9E:8C:0D:57:9F:15:45:C0:C9:EE:F8:83:E8:2C:E2
Certificate issuer:       /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial:       018E995C9405B9B247AE03BAE49F35C922F2
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa
Signing time:             Mon 01 Apr 2024 11:12:44 +0000
ROA not before:           Mon 01 Apr 2024 11:12:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215724
IP address blocks:        80.73.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Apr 2024 17:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:99:5c:94:05:b9:b2:47:ae:03:ba:e4:9f:35:c9:22:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
        Validity
            Not Before: Apr  1 11:12:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7da54447439e8c0d579f1545c0c9eef883e82ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fa:bc:6f:d0:83:ac:1b:4a:23:9b:58:bc:a8:
                    03:7c:cd:9d:c0:51:ce:c1:5e:22:77:f0:c0:68:56:
                    e6:e6:dd:b4:f5:69:61:42:0a:78:d6:b5:fe:05:23:
                    48:64:4c:f9:42:1a:b4:c4:61:f8:7e:8d:a2:e5:46:
                    a8:55:ef:04:db:10:93:04:3a:5f:55:82:3d:83:f9:
                    e8:59:da:8a:e5:2d:54:f7:53:38:5f:5f:a7:84:bd:
                    8c:03:77:9c:18:48:ff:eb:41:5f:0e:2b:2c:9d:2e:
                    64:d7:f0:2a:c2:9d:d8:60:b8:85:9a:ba:a1:eb:0e:
                    31:3a:30:ce:26:5c:eb:5f:a3:b1:dd:1e:23:4a:b1:
                    b8:77:11:f6:d8:3b:c8:ed:59:1f:f7:9e:81:4e:12:
                    db:fa:13:a0:87:82:3c:56:37:01:2e:b7:b2:05:25:
                    dc:bc:6b:bd:0a:8e:be:93:04:75:39:ba:70:d5:c3:
                    d4:f8:20:10:b8:14:46:03:05:80:fd:0d:49:d4:58:
                    06:78:8a:48:1e:c2:62:f4:be:0a:3d:ab:79:2a:a6:
                    17:46:bc:05:f7:61:b4:ae:d2:03:df:04:9e:2c:72:
                    13:0b:57:31:47:3c:da:90:6d:50:32:06:6d:b1:db:
                    26:88:9d:1d:b9:6c:1b:e8:f9:46:7e:5f:61:33:ac:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:44:47:43:9E:8C:0D:57:9F:15:45:C0:C9:EE:F8:83:E8:2C:E2
            X509v3 Authority Key Identifier:
                keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/faVER0OejA1XnxVFwMnu-IPoLOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:61:a2:15:69:6c:d3:db:0b:98:13:3a:00:2c:2f:5d:cb:
         69:83:69:0a:f5:ff:89:5e:da:0e:f0:c2:17:45:9b:5e:a1:62:
         0d:33:81:1e:4d:d2:50:82:f6:c0:d6:b1:31:c4:fa:01:ac:90:
         ca:d5:44:4d:46:f5:0b:d8:65:ab:3c:b2:8f:e6:d7:cd:eb:46:
         44:e5:d0:c7:cd:a5:e6:c6:99:ff:3e:9e:0c:02:51:53:30:65:
         0f:90:da:b2:78:47:b6:34:a4:11:23:b7:48:14:eb:dc:ed:ad:
         ac:1d:9b:65:20:de:3f:a5:c9:a5:0f:18:95:04:4a:ee:b5:d2:
         96:99:5a:8f:29:7f:b7:0b:51:be:d4:ad:e7:e6:2f:9d:e0:3f:
         d6:22:74:d6:0a:6b:cd:10:14:d9:91:a5:50:b0:28:d4:4d:4b:
         4a:53:92:b5:11:2c:37:e7:c1:b9:b7:bf:aa:6b:41:a2:6e:5e:
         15:7d:34:d7:6e:97:72:df:e4:3a:d2:06:d3:20:a9:5d:64:52:
         df:5c:42:1d:f5:2d:2c:60:4b:3f:cd:49:d0:51:de:6b:2e:32:
         30:52:27:9d:2b:48:0c:ea:a6:94:f2:e9:14:6a:f5:fa:ac:06:
         b7:45:f8:35:09:42:b0:34:d1:a2:f8:f4:40:60:68:b0:2f:84:
         f0:4a:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org