Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mv9B0jQgvqY_jU2pR4dZgjYoqrM.roa
File:                     mv9B0jQgvqY_jU2pR4dZgjYoqrM.roa (raw, json)
Hash identifier:          MuUAyuk1NGy+tPRNWG5TcbRSxW9t8fxcwtazQIOsiF0=
Subject key identifier:   9A:FF:41:D2:34:20:BE:A6:3F:8D:4D:A9:47:87:59:82:36:28:AA:B3
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       018683912D27807F1D73E0D64E7F9BB3AE57
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mv9B0jQgvqY_jU2pR4dZgjYoqrM.roa
Signing time:             Fri 24 Feb 2023 13:16:14 +0000
ROA not before:           Fri 24 Feb 2023 13:16:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41960
IP address blocks:        80.73.246.0/24 maxlen: 24
                          185.73.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:83:91:2d:27:80:7f:1d:73:e0:d6:4e:7f:9b:b3:ae:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Feb 24 13:16:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9aff41d23420bea63f8d4da9478759823628aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:17:07:23:cd:c7:c1:f3:e3:2f:bb:28:1b:
                    20:05:25:ee:07:16:d2:81:8d:86:2b:1a:70:25:81:
                    82:47:61:6f:4f:6b:cd:86:c6:c4:78:1d:87:dc:e7:
                    fb:6e:e6:94:f9:14:c7:e4:32:ac:76:31:b5:42:78:
                    c4:af:99:65:47:03:48:8d:ed:db:91:98:92:ef:1c:
                    0f:e0:71:71:b6:57:bb:98:f8:e0:c6:a1:c2:e9:10:
                    a6:1c:a3:cc:f8:3e:89:16:69:7b:5a:c2:43:5f:48:
                    e9:85:a8:ee:6c:73:2c:93:e0:bd:0c:40:43:3d:7d:
                    a0:63:3b:13:df:90:1c:fa:87:fa:03:47:33:9f:7b:
                    2e:38:d1:fa:ac:e7:de:3c:ff:b5:45:cf:00:55:c8:
                    2b:e2:52:08:24:36:80:0c:14:9c:7f:49:a4:6e:c5:
                    9b:ff:a4:76:d4:64:2f:ac:2d:b9:d8:e6:95:e3:e9:
                    e8:8b:87:d4:81:c5:9d:fe:ec:72:c3:f8:41:22:15:
                    93:15:d0:ff:56:17:df:b8:a6:f1:2c:fc:30:c0:39:
                    30:ea:4f:f1:47:56:06:3a:7e:38:61:2e:f1:dd:2e:
                    1a:47:25:82:c1:c4:77:d1:27:1e:3b:a2:1b:c3:50:
                    ae:33:c8:38:40:36:41:99:52:f9:8d:7a:4d:19:99:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:41:D2:34:20:BE:A6:3F:8D:4D:A9:47:87:59:82:36:28:AA:B3
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/mv9B0jQgvqY_jU2pR4dZgjYoqrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.246.0/24
                  185.73.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:76:e3:7d:ea:06:e1:22:1e:52:0f:87:a4:b6:f5:6e:57:be:
         e7:c4:af:00:cd:73:c6:0c:46:f8:77:82:3a:97:92:03:3a:b1:
         08:51:b9:d7:34:4b:64:d6:97:eb:aa:ca:6f:7b:f2:6e:df:82:
         a0:d3:d8:00:0d:69:c9:87:eb:f0:47:d8:de:e4:95:96:d3:47:
         2d:41:14:14:39:a6:9d:36:e5:71:8c:58:99:17:25:92:67:05:
         ef:c5:ef:9c:08:f0:52:19:db:eb:3f:d8:27:3f:7f:81:85:0b:
         e7:2f:82:0b:cb:30:88:6f:b8:d4:9d:6d:3f:56:a5:22:ce:8c:
         6e:ac:62:f7:8c:34:4a:af:a9:07:5b:93:07:f0:30:89:81:01:
         2a:78:91:8a:ea:27:9f:4f:dd:13:0b:34:de:d3:20:87:02:f1:
         29:93:f2:e2:b1:67:02:91:6d:4a:91:ee:0b:c6:7f:c8:58:21:
         ef:a1:47:13:43:16:de:bc:65:e7:1d:29:c5:53:cc:35:1f:0b:
         6d:53:aa:c3:d6:cf:8b:76:ec:99:59:53:80:84:1c:44:23:1c:
         60:a8:79:3f:6a:e4:e2:b6:0e:36:d7:b5:b2:c5:35:46:5c:ba:
         31:8d:64:92:19:2d:bc:64:ed:93:24:ac:ec:da:5f:73:8d:1a:
         4e:25:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org