Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa
File:                     Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa (raw, json)
Hash identifier:          O8R6GhMuM5vbmtdTNtcChTIhNCuhj+1jyedR5SNni4I=
Subject key identifier:   52:FA:FF:D0:A0:FB:E8:92:DC:84:39:A3:18:34:CE:66:65:CC:F5:1A
Certificate issuer:       /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial:       018A403F37A612ACEF91219DFA668F54C1D0
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa
Signing time:             Tue 29 Aug 2023 07:43:19 +0000
ROA not before:           Tue 29 Aug 2023 07:43:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16228
IP address blocks:        80.246.160.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:3f:37:a6:12:ac:ef:91:21:9d:fa:66:8f:54:c1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
        Validity
            Not Before: Aug 29 07:43:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52faffd0a0fbe892dc8439a31834ce6665ccf51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:87:a1:c5:6e:77:41:b3:1d:af:e6:91:39:ac:
                    73:90:4e:bc:5b:a6:0a:8d:00:dc:6d:c2:32:d2:82:
                    05:64:3e:e6:85:3d:df:e5:82:83:5b:26:c8:e9:3b:
                    5f:db:7f:0c:e7:b4:af:9d:bb:5e:c0:48:8b:3b:25:
                    1a:bd:0a:a7:37:ae:89:4e:b4:5d:db:a6:79:db:62:
                    49:1d:5b:ac:e3:5f:7d:9d:93:bf:c2:bd:2e:0a:f4:
                    a4:44:a4:9b:cc:62:45:23:25:57:72:2f:7a:f4:3b:
                    a7:48:4b:1c:f4:92:09:e8:79:41:72:d4:77:7b:a8:
                    36:d7:bc:b4:aa:53:a1:02:d6:e9:bb:16:00:5f:89:
                    65:f2:b0:8f:6b:3e:5f:e8:db:fc:db:43:39:21:27:
                    ac:02:3c:4a:3a:35:e1:10:10:9d:91:5f:c7:02:40:
                    23:d0:4a:81:da:e4:79:07:fe:94:b9:3a:b1:9e:a2:
                    a0:ac:e7:7a:42:1e:b5:a5:b5:34:23:a5:d9:11:f7:
                    1f:4c:64:8e:f2:ca:a3:2a:0f:a6:bf:31:25:d0:64:
                    d3:36:4c:e5:3e:45:10:21:4b:90:72:04:dc:cb:e1:
                    46:76:31:74:e4:7b:ca:fd:e6:fb:32:8d:38:6c:09:
                    11:cf:e8:a9:fd:11:df:fd:45:f3:dd:fb:17:21:d0:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:FF:D0:A0:FB:E8:92:DC:84:39:A3:18:34:CE:66:65:CC:F5:1A
            X509v3 Authority Key Identifier:
                keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/Uvr_0KD76JLchDmjGDTOZmXM9Ro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:d9:d7:2b:d1:e1:77:14:7c:10:a8:0e:51:fd:44:22:19:f3:
         87:a0:86:98:43:21:8f:e3:23:1e:c1:07:f2:5c:70:fc:94:e5:
         06:f5:a5:6d:53:ec:20:89:fc:97:6b:68:88:41:66:c6:9e:2a:
         ad:34:0f:df:de:3c:05:36:be:78:71:db:97:ad:ab:7f:ef:69:
         f6:05:f2:69:d2:dc:92:d6:96:27:e8:77:49:0c:2f:62:73:59:
         e8:e1:77:cc:08:83:c1:d6:05:4f:43:12:6e:2b:c7:59:f1:cd:
         ed:b6:07:81:ec:29:21:b3:5b:a5:17:a7:1e:eb:24:71:4b:e4:
         00:5c:1b:36:55:fd:bc:8e:e4:e8:1a:4d:5f:d4:21:87:a8:58:
         4f:ce:b5:72:f3:44:7b:99:5f:7b:e1:8c:25:d0:bc:7a:fb:23:
         3a:37:8d:76:f9:53:cb:a2:ff:28:40:db:e6:6f:58:17:2a:fa:
         d7:94:2e:ef:02:74:a0:70:c0:be:f8:cc:ba:a5:56:74:02:44:
         52:2f:d0:4e:cb:f8:3a:31:8c:eb:9a:bc:19:ad:8e:e9:a6:de:
         b3:ab:34:24:09:7b:6f:f5:e4:8f:18:b5:5f:69:c7:a6:d4:9b:
         81:21:05:dd:b5:c8:fb:29:a4:ab:2b:4a:58:a3:a8:df:45:1e:
         67:ca:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:22 2024 by rpki-client on console-fra.rpki-client.org