Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/QRGZxS5-iXjjZqf6sM5weOgCYF4.roa
File:                     QRGZxS5-iXjjZqf6sM5weOgCYF4.roa (raw, json)
Hash identifier:          mifjsXN06wzpNy7pyU7qdDK+oNbOl7x8jbbaUwpv+vU=
Subject key identifier:   41:11:99:C5:2E:7E:89:78:E3:66:A7:FA:B0:CE:70:78:E8:02:60:5E
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       018570B095D27AAEEC96A56FB04C58FFEAF7
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/QRGZxS5-iXjjZqf6sM5weOgCYF4.roa
Signing time:             Mon 02 Jan 2023 04:14:58 +0000
ROA not before:           Mon 02 Jan 2023 04:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41960
IP address blocks:        80.73.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 Feb 2023 13:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b0:95:d2:7a:ae:ec:96:a5:6f:b0:4c:58:ff:ea:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Jan  2 04:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=411199c52e7e8978e366a7fab0ce7078e802605e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:4d:25:3a:81:f8:b5:09:07:ac:68:24:81:
                    d9:76:96:8f:33:e9:2f:dc:56:e4:33:f0:a1:1f:15:
                    18:0c:70:6c:f8:77:50:b1:0c:9e:6c:56:19:ec:89:
                    52:43:fd:50:32:a1:d0:82:f9:36:e3:7e:eb:c6:35:
                    e8:c5:a9:88:e8:59:25:2b:e4:98:34:34:92:64:34:
                    8f:49:52:88:13:ae:6b:1a:4b:51:b6:b0:d7:bd:19:
                    20:6c:3d:64:55:71:4b:46:ee:7c:5d:d6:2d:42:f1:
                    0f:06:77:e1:d1:41:2e:07:5a:a7:b8:ec:74:42:ad:
                    d4:0a:b8:6a:55:dc:f0:c8:99:93:77:d9:40:80:a9:
                    d7:09:17:bf:f7:67:47:bb:46:cd:66:4a:f5:c2:4f:
                    ea:4d:2f:4b:a9:da:21:bd:bb:52:23:96:d7:24:e7:
                    a0:69:80:a4:c5:45:b4:96:94:00:fb:45:a3:f3:00:
                    1f:37:70:a2:3e:36:20:6a:e9:c8:bf:63:81:28:03:
                    0a:98:d0:2f:cf:24:87:3a:d6:68:58:9f:fd:7a:53:
                    6e:9f:7d:95:a2:dc:8e:6e:b0:96:7c:6e:db:b8:25:
                    ca:11:63:e1:21:fd:41:33:0e:c6:2f:4c:66:b0:d7:
                    d5:a1:c6:1a:63:8c:8b:59:2f:84:e2:1e:2e:2e:ba:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:11:99:C5:2E:7E:89:78:E3:66:A7:FA:B0:CE:70:78:E8:02:60:5E
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/QRGZxS5-iXjjZqf6sM5weOgCYF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:16:a9:5c:df:d2:8b:e1:e0:49:3e:4d:9c:b3:31:26:c0:80:
         27:6d:c3:37:46:41:a7:6a:17:0e:d2:c9:0f:82:06:a2:b0:0e:
         00:fc:b9:e5:ee:77:fa:63:ed:dd:56:ad:8b:cd:6f:8b:fa:79:
         ce:af:ec:62:46:d2:27:fe:6b:8b:79:bd:5c:9b:da:fe:55:e0:
         c7:a0:15:78:a5:99:91:a5:04:5e:1a:21:91:c7:27:78:9b:34:
         c5:dc:3e:50:cc:ab:1c:00:89:c8:01:de:9d:44:04:d6:ad:98:
         96:63:8b:36:19:95:8f:9d:05:94:19:e8:f1:5c:95:df:aa:cd:
         1c:78:f8:c4:77:42:48:7d:e3:b2:68:c6:06:81:eb:51:59:f9:
         39:a3:ca:79:62:da:6d:a0:13:4a:83:7c:34:af:b3:10:2a:0b:
         83:25:85:8a:5a:32:0c:22:fe:4d:4d:9d:73:e2:ce:70:49:fc:
         ce:5f:9d:e2:0f:42:b9:65:e3:34:83:84:71:f8:58:3a:ed:10:
         21:e7:f2:57:25:60:19:ad:cf:05:17:42:64:30:00:df:ec:88:
         a8:92:d7:48:a3:4e:25:61:aa:c7:dc:1d:27:4b:04:5f:b8:7f:
         db:e0:fe:46:cb:07:ee:21:7e:00:62:3c:4b:f7:8b:f7:5b:d7:
         ae:77:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org