Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa
File:                     o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa (raw, json)
Hash identifier:          eSo8ppBzmC3G138q1aoV54yo268PMXK6c4M9Iu+XgII=
Subject key identifier:   A3:7F:1D:81:2F:1C:5A:F3:54:C4:A2:7E:97:7F:CE:57:72:50:68:3E
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       0188BD819D60495D14DE553D2C3031DA8A86
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa
Signing time:             Thu 15 Jun 2023 05:22:48 +0000
ROA not before:           Thu 15 Jun 2023 05:22:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205368
IP address blocks:        80.86.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bd:81:9d:60:49:5d:14:de:55:3d:2c:30:31:da:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jun 15 05:22:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a37f1d812f1c5af354c4a27e977fce577250683e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:53:02:d3:96:50:07:c7:f5:7b:ca:6e:5d:
                    26:eb:16:dc:d6:68:88:39:a4:c5:99:0a:86:b9:06:
                    f7:86:c9:c5:6f:ff:bf:21:70:9e:b4:98:ea:db:45:
                    0b:18:e7:1b:20:b9:6d:68:ed:56:1c:56:71:9f:37:
                    82:b9:30:ba:93:27:a9:c6:69:48:ed:66:95:45:35:
                    2c:ae:87:f0:19:0c:07:b4:54:b2:7c:97:7d:75:49:
                    68:00:cb:5b:26:8d:f7:da:dc:89:17:00:a6:c9:4e:
                    ea:77:a4:a0:27:30:ed:da:1f:cd:89:51:06:bf:89:
                    41:56:92:05:23:36:34:17:2d:43:57:35:e4:cb:0d:
                    a3:d2:26:52:af:9f:ca:46:fc:bc:98:bc:08:20:7d:
                    3f:09:b4:6b:1b:ce:c7:8c:b1:00:84:ec:65:54:46:
                    ee:9c:3e:e9:30:d7:dd:93:1b:ce:a8:7c:f4:db:2b:
                    51:5e:a7:ec:73:8f:28:bd:b1:38:1b:b9:e0:a3:f5:
                    a7:69:40:c7:96:5a:ac:2e:27:dc:e8:a2:fc:1a:91:
                    b8:70:08:29:9d:5a:1f:3c:32:54:6c:fd:78:98:6b:
                    77:b1:91:f0:d9:99:66:92:f6:21:60:8a:6e:80:e6:
                    ca:45:ca:6a:07:c7:99:df:cc:b4:18:a8:b9:b3:91:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7F:1D:81:2F:1C:5A:F3:54:C4:A2:7E:97:7F:CE:57:72:50:68:3E
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/o38dgS8cWvNUxKJ-l3_OV3JQaD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:27:0c:52:13:aa:b9:bb:27:1c:5a:64:12:74:fa:cf:52:
         57:37:78:8c:d2:0b:05:79:f8:72:ef:24:fa:92:65:37:1c:76:
         d7:60:28:7a:54:c4:54:98:dc:8c:90:3b:f3:46:b6:6f:88:ae:
         93:86:53:4b:4a:b9:ea:f2:09:1c:b1:98:de:f7:63:7b:51:8b:
         db:ef:2f:e7:06:7f:89:0f:eb:d0:6e:04:63:cc:0a:cc:cc:10:
         73:1f:2f:85:98:ac:17:77:66:2b:e3:0f:cf:ba:16:ea:c7:43:
         6c:c2:d2:a2:f3:8a:f2:5c:5c:44:1c:eb:66:20:78:1b:8e:b9:
         2a:35:51:4b:dd:39:f0:f7:06:30:e4:65:5f:1b:af:71:b7:3c:
         bf:63:23:a4:51:2a:65:e0:ba:21:59:d3:b0:f3:9e:e9:07:e9:
         fb:a2:13:56:c2:a2:59:94:79:9e:9a:fe:63:90:92:b4:12:3f:
         40:aa:91:01:3d:83:3b:a5:15:27:bd:40:f9:25:a8:b3:02:e0:
         39:2d:17:f1:05:4b:43:f5:7c:48:c2:ad:d7:e2:ea:94:13:47:
         31:30:d3:60:fc:6a:76:b5:39:7f:1a:de:94:60:c7:55:27:81:
         b3:af:92:ec:99:4b:e3:71:38:47:fe:4c:2c:5a:d7:8c:26:a6:
         f6:d9:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:02 2024 by rpki-client on console-fra.rpki-client.org