Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/eIug7pBMfFypK1lzGGftNSoLHl0.roa
File:                     eIug7pBMfFypK1lzGGftNSoLHl0.roa (raw, json)
Hash identifier:          aJd5sly942tfJ8udMWlMEMPYxrGVuRIHF73+ROqSEds=
Subject key identifier:   78:8B:A0:EE:90:4C:7C:5C:A9:2B:59:73:18:67:ED:35:2A:0B:1E:5D
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       018572D5C1B13B2D2D56C457B63814434E55
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/eIug7pBMfFypK1lzGGftNSoLHl0.roa
Signing time:             Mon 02 Jan 2023 14:14:49 +0000
ROA not before:           Mon 02 Jan 2023 14:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199620
IP address blocks:        80.86.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:d5:c1:b1:3b:2d:2d:56:c4:57:b6:38:14:43:4e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jan  2 14:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=788ba0ee904c7c5ca92b59731867ed352a0b1e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:51:fe:ad:f0:cc:26:bc:cf:a6:12:6d:39:
                    7e:68:3e:43:63:57:32:06:7b:68:a2:75:9f:ea:4b:
                    18:3e:6a:22:4e:8a:18:9e:fe:8a:69:00:de:87:e0:
                    2d:3f:b0:a7:ad:d1:00:b6:41:5f:2e:03:ba:43:28:
                    7d:5e:df:15:7e:46:23:d2:65:e7:28:e6:85:e0:68:
                    bc:6e:6f:04:ba:8d:c1:46:01:59:f4:b8:a3:95:60:
                    41:98:2b:df:d9:0d:d8:5a:34:34:69:b7:2d:d7:5f:
                    cb:08:3a:a5:88:f4:5f:8a:ba:aa:5e:48:bb:0f:14:
                    1d:59:a1:90:89:61:ca:37:2f:7a:9b:16:fe:dd:4c:
                    20:19:0b:19:03:f7:1a:ac:cc:8b:36:63:bc:6f:a9:
                    48:ff:65:48:dc:aa:f4:36:36:39:1d:45:aa:ad:68:
                    5e:49:30:ac:8c:ad:ea:14:90:de:50:c8:dc:70:21:
                    b3:ad:a0:7f:24:c0:2c:ba:b7:3e:b4:65:5c:59:7d:
                    5f:b8:55:85:46:15:ee:85:7c:ff:6f:84:f5:fa:ad:
                    35:60:4e:d9:6d:90:0b:ad:d5:5c:9d:b1:1c:aa:51:
                    d3:c9:3b:0e:68:28:28:fc:02:76:43:f1:5d:2f:42:
                    fa:75:00:eb:44:16:9e:9f:3f:bb:78:96:88:aa:99:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:A0:EE:90:4C:7C:5C:A9:2B:59:73:18:67:ED:35:2A:0B:1E:5D
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/eIug7pBMfFypK1lzGGftNSoLHl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:14:e5:b9:a7:7b:71:fa:15:78:e5:45:73:a7:88:cb:e5:79:
         d8:a0:dc:b2:a8:ba:d3:d4:77:d1:8b:f2:90:60:e6:ea:7d:21:
         2d:98:41:53:e3:61:cd:59:1d:20:46:7b:9f:3a:d1:a7:8a:9e:
         05:96:ec:c6:c3:05:92:1f:e8:c3:8a:51:e4:e5:fb:ce:c2:57:
         c5:a4:96:15:ee:10:d9:fd:8c:c1:0b:b1:ac:40:c7:df:3d:f3:
         af:b8:74:4a:1b:68:c9:3a:96:a0:b4:c7:75:d3:e6:e6:2a:22:
         97:fd:57:a1:6f:d0:f7:3d:20:80:2a:6c:48:89:df:eb:8e:e6:
         bf:8b:9b:12:f7:b8:b6:81:1e:47:b6:03:64:ca:35:53:38:d8:
         ba:df:ae:2d:d8:8c:5a:d9:bc:5f:e6:42:ad:17:02:ac:26:b2:
         04:3e:99:65:2c:73:09:9b:27:ad:8f:e9:da:d7:fa:ee:83:43:
         b4:d1:95:32:e0:fd:4a:72:8a:3b:25:12:a4:85:b9:12:88:27:
         e7:3b:c3:29:1a:72:de:6b:97:3c:5e:84:a5:c3:26:ba:52:1f:
         7f:ea:60:82:ba:0b:fa:1e:34:cb:35:9e:be:ab:5f:75:29:13:
         84:da:32:da:06:97:fc:6a:f5:96:9e:83:74:7d:7f:3c:22:fb:
         e7:a2:de:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:02 2024 by rpki-client on console-fra.rpki-client.org