Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa
File:                     OgftgL4sUoL2xbBKQTEnEjdsIkA.roa (raw, json)
Hash identifier:          zMmcGqGlDwC9tdzLp4kB1rulEH9s8G4qzTrNOgD8VAI=
Subject key identifier:   3A:07:ED:80:BE:2C:52:82:F6:C5:B0:4A:41:31:27:12:37:6C:22:40
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018DAC187B426B514F442152BCFE80F2E876
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa
Signing time:             Thu 15 Feb 2024 09:28:21 +0000
ROA not before:           Thu 15 Feb 2024 09:28:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49581
IP address blocks:        212.80.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 17 Mar 2024 15:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:18:7b:42:6b:51:4f:44:21:52:bc:fe:80:f2:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Feb 15 09:28:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3a07ed80be2c5282f6c5b04a41312712376c2240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:44:98:84:26:a7:43:42:07:5b:de:f6:15:
                    3c:00:24:12:bc:6f:60:20:0a:b9:45:fb:88:3f:b5:
                    bc:2b:b0:2d:98:80:8c:f8:c5:20:56:89:a7:73:b1:
                    8f:f8:44:9a:e8:77:b2:66:5c:fa:a8:2a:5c:86:49:
                    db:79:b8:04:2d:35:1c:b9:ec:72:e5:c8:00:52:e9:
                    9b:bc:e3:5f:71:76:09:92:57:65:5c:df:f9:42:c5:
                    c5:ce:10:7f:17:15:aa:44:0d:7d:4a:09:f1:8d:21:
                    d5:1f:03:88:18:3a:b6:c1:6f:6a:ad:34:b7:c9:aa:
                    93:94:35:e2:48:fc:58:ff:87:73:10:0e:4e:84:b7:
                    7f:42:7f:9c:ec:bd:d9:4d:27:cb:ec:94:c8:00:22:
                    05:88:10:fe:7b:5c:ea:d8:83:9b:97:69:6e:66:47:
                    7d:c7:39:a4:5b:b0:f1:98:4c:42:e2:4c:df:c8:53:
                    51:87:36:07:b0:83:93:49:7e:b1:c6:67:6f:06:f6:
                    66:12:69:50:77:09:10:70:51:90:97:37:36:7f:56:
                    0f:e6:3b:05:c0:0e:4c:33:83:44:3b:f3:4a:09:e7:
                    ee:fc:a1:83:e4:ec:18:e4:bb:ff:8d:b7:45:b2:c1:
                    97:fa:d6:c2:38:c6:b6:64:cc:08:fb:c7:dd:b5:ce:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:ED:80:BE:2C:52:82:F6:C5:B0:4A:41:31:27:12:37:6C:22:40
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OgftgL4sUoL2xbBKQTEnEjdsIkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:94:37:5c:4a:be:b4:fa:69:b4:27:99:2a:a7:d9:aa:14:03:
         aa:a7:7b:f9:83:56:99:06:85:f8:a0:0a:e5:ab:e9:c1:30:d7:
         80:96:f9:0b:62:f7:d0:6e:88:8f:cd:25:5c:c5:81:e7:69:c3:
         a6:2a:12:bd:82:80:51:81:42:60:81:46:72:b9:5f:44:34:38:
         94:c7:7f:c1:b9:52:67:b0:ae:16:53:fc:cb:7a:a3:3e:af:f6:
         71:f3:70:f1:eb:b5:b1:a0:1d:2f:29:5a:85:7a:9d:e9:ac:b0:
         3a:3b:47:4d:a4:c3:a8:55:5b:94:ea:3c:04:eb:5f:c7:3e:c4:
         fa:a3:a8:b2:8d:f9:aa:ee:bf:5b:b7:08:fb:48:6a:a8:60:df:
         5f:cf:3b:d3:42:2d:d4:1a:82:d7:03:44:08:75:fa:67:4d:ab:
         6a:5c:07:e5:61:3c:70:2b:d9:1d:5b:94:4c:19:6f:36:c5:f1:
         c8:3c:27:09:2e:52:25:9c:53:bd:d0:40:b5:d7:aa:51:b5:ce:
         d1:3b:53:b7:ae:b9:10:af:5e:b9:8e:87:85:5f:ac:9e:68:27:
         c5:87:00:b6:ec:be:dd:9a:d6:cf:b1:79:d8:32:dd:af:92:af:
         f6:b2:41:d0:91:4f:94:3e:d7:f5:45:37:a6:7c:a9:79:5b:56:
         4c:12:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org