Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/t1Z82c22MQT9R_yjoH5CIsLbfLc.roa
File:                     t1Z82c22MQT9R_yjoH5CIsLbfLc.roa (raw, json)
Hash identifier:          tBh5CvblYbkv8BOe7Pqz0TBbtZzGofrGfIcvvYw8da0=
Subject key identifier:   B7:56:7C:D9:CD:B6:31:04:FD:47:FC:A3:A0:7E:42:22:C2:DB:7C:B7
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       018D552931D4BB68C08811CC81DDD9C6D8C8
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/t1Z82c22MQT9R_yjoH5CIsLbfLc.roa
Signing time:             Mon 29 Jan 2024 12:19:39 +0000
ROA not before:           Mon 29 Jan 2024 12:19:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44947
IP address blocks:        212.80.24.0/24 maxlen: 24
                          212.80.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:55:29:31:d4:bb:68:c0:88:11:cc:81:dd:d9:c6:d8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan 29 12:19:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7567cd9cdb63104fd47fca3a07e4222c2db7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:a1:60:16:0b:0b:e0:eb:ac:27:a1:95:6c:
                    aa:32:4b:d1:86:92:04:36:25:23:81:53:24:94:06:
                    3e:6c:0c:61:e6:6c:82:4e:12:34:5f:fd:0b:2a:7e:
                    a4:71:9d:55:ef:9e:b4:28:81:cc:3c:bb:6d:32:bc:
                    b0:00:55:4e:b7:e4:4c:ec:79:e8:e3:c8:58:c8:fd:
                    0a:0f:9a:92:9e:bb:a9:28:a7:90:fa:4a:41:b2:a3:
                    52:e5:4e:d8:e8:e7:ea:2a:ad:f7:d1:b0:78:5d:b8:
                    ce:dd:21:87:15:6d:89:bc:2e:e8:47:0f:a0:68:24:
                    1b:b9:9f:34:7b:24:60:50:1e:8e:61:66:92:14:49:
                    4b:46:7f:db:13:9f:61:cf:f0:17:15:9d:dc:cd:73:
                    76:56:f6:30:35:43:6f:d4:ec:28:05:b0:8e:5c:b8:
                    e3:ea:08:8a:23:28:b3:c2:06:61:7e:ba:d7:ea:88:
                    4f:42:c6:1a:f3:65:8a:63:47:aa:83:11:b7:d1:3f:
                    6a:57:1d:78:0d:47:89:b5:6b:3c:c8:79:3c:6f:e8:
                    76:92:3b:3b:49:83:b9:10:ef:00:83:26:ff:4d:a6:
                    04:0c:eb:e1:b1:f6:49:6d:d0:29:43:1d:eb:d2:3e:
                    91:ef:10:c4:a9:2f:10:0a:7f:ba:5f:b0:02:92:0d:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:7C:D9:CD:B6:31:04:FD:47:FC:A3:A0:7E:42:22:C2:DB:7C:B7
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/t1Z82c22MQT9R_yjoH5CIsLbfLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.24.0/24
                  212.80.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f9:07:a9:1c:14:3f:86:97:82:7e:39:75:ea:c0:d2:76:fb:
         f1:d7:fe:d3:a6:9d:d9:1d:5b:b1:87:e2:f9:b3:5d:b3:ab:98:
         43:87:ab:67:48:8a:4d:3a:cd:ac:64:39:c7:4b:e4:6e:78:f7:
         7e:6e:3a:c4:1d:d1:86:f9:be:35:df:0b:65:85:45:0d:4a:32:
         f1:b3:43:94:8f:f5:82:4e:6f:0a:84:40:69:28:e9:cc:fe:ec:
         da:45:49:d1:aa:59:e1:03:7f:a3:b9:6e:8a:b3:80:1b:26:94:
         49:6d:d0:a3:b1:b6:b3:34:49:f1:86:f4:54:2e:38:93:cc:c8:
         25:1f:3b:86:81:22:17:a7:c3:8d:19:2c:ae:87:74:d8:a8:05:
         ca:d2:a0:db:77:f2:83:f3:9a:b9:34:fd:11:b2:3e:fe:97:2d:
         f8:50:76:93:71:3e:37:0b:59:f6:93:02:51:fd:f3:d7:5b:95:
         2a:71:a9:5e:c4:62:83:64:62:62:98:79:55:b7:a6:04:24:d8:
         72:fd:b0:a4:46:2c:48:ce:b6:16:17:fc:8f:b2:00:5c:a7:63:
         e8:3f:3a:5e:2d:28:0c:11:65:7e:42:5a:92:c5:65:a8:15:7c:
         1f:75:64:a4:64:2f:18:88:86:78:9c:1c:cd:c7:1c:af:e5:2d:
         58:5b:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org