Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/5qO0M5sfAxQ_F92AsDC-r03JLrg.roa
File:                     5qO0M5sfAxQ_F92AsDC-r03JLrg.roa (raw, json)
Hash identifier:          5BGPhHr+7Bc7lC86FetMyAbjkv97l1ciKIziZbMY3hY=
Subject key identifier:   E6:A3:B4:33:9B:1F:03:14:3F:17:DD:80:B0:30:BE:AF:4D:C9:2E:B8
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019299361848153B6E43A185138C6B639F30
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/5qO0M5sfAxQ_F92AsDC-r03JLrg.roa
Signing time:             Thu 17 Oct 2024 06:41:52 +0000
ROA not before:           Thu 17 Oct 2024 06:41:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215096
IP address blocks:        212.22.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 17 Oct 2024 11:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:99:36:18:48:15:3b:6e:43:a1:85:13:8c:6b:63:9f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Oct 17 06:41:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e6a3b4339b1f03143f17dd80b030beaf4dc92eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:fe:c4:d5:6e:a3:69:36:85:5f:d0:1d:94:
                    13:e1:76:48:2d:b3:0d:66:8d:07:43:44:e2:e6:fb:
                    a2:63:bf:e5:60:c0:b8:35:86:aa:58:5d:28:22:cc:
                    66:96:71:32:c1:71:52:3b:6f:00:f5:59:10:ca:00:
                    90:05:fc:5b:d8:f5:eb:7b:03:23:e7:09:57:e2:df:
                    f5:93:ac:df:c2:ce:52:d6:17:eb:da:67:4a:6c:d2:
                    cd:09:e1:a9:eb:f9:8d:fa:94:2c:81:b4:04:86:fe:
                    68:ed:a9:15:d4:de:14:20:a2:a7:f2:b0:4d:fa:b0:
                    be:2d:10:53:87:b6:45:b6:58:09:51:e2:35:52:53:
                    33:4c:f9:91:1a:a0:1d:c0:27:61:c7:61:08:d6:e7:
                    44:1a:1c:1f:99:44:47:a5:db:f1:21:fa:16:8d:76:
                    20:56:d1:cd:ed:bc:40:7b:c9:2b:fc:c3:7d:23:6f:
                    6b:ca:a7:75:19:31:bc:34:a7:c3:ec:b7:78:03:d9:
                    4a:08:14:5d:a7:cf:30:0b:5c:e5:ac:e3:ea:a8:45:
                    d7:c4:25:df:8b:61:03:fa:d0:c5:e9:13:f0:9a:6e:
                    be:dd:fc:fe:bc:6c:00:74:ba:30:6b:b9:81:83:8d:
                    a8:3e:24:4e:fd:bb:a7:40:6e:36:5d:2e:44:7d:4c:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A3:B4:33:9B:1F:03:14:3F:17:DD:80:B0:30:BE:AF:4D:C9:2E:B8
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/5qO0M5sfAxQ_F92AsDC-r03JLrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.22.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:cb:ba:12:3d:62:64:a2:5b:d5:0e:e6:b3:89:14:40:f4:4a:
         f9:3d:9b:e6:e5:ed:d1:49:81:84:1a:9f:2c:fe:26:7f:7f:87:
         d5:71:db:6d:7a:b0:51:ea:41:0f:40:e4:ab:62:79:17:40:1a:
         a1:a9:48:0f:ee:37:f9:cc:06:b5:2e:d6:52:fa:c8:94:2d:40:
         dd:58:a4:3b:1d:17:b0:df:be:4b:4b:36:c8:49:04:11:ea:69:
         ab:9b:d8:af:d9:64:70:8f:12:50:c2:f9:ff:93:86:bf:6e:1d:
         01:aa:9c:44:cc:62:9f:45:51:68:20:c1:52:f9:51:8b:24:55:
         fa:7a:d7:e6:a6:b2:26:f3:98:95:2b:07:d9:9d:97:6c:c1:1a:
         3b:7c:60:fc:6d:35:51:24:96:0c:87:87:24:11:d6:5d:3d:97:
         2b:7d:b5:c4:05:75:42:b0:27:43:21:cf:38:b5:75:ef:ec:ba:
         a8:b3:c0:50:42:a9:54:52:20:8f:b1:2c:92:b5:71:ff:35:1c:
         23:0e:09:57:83:78:60:09:60:34:a6:25:b5:62:f0:da:b5:dc:
         d3:5a:88:99:23:39:1d:3e:e9:70:e2:68:4d:fc:6f:8c:77:74:
         d4:78:0a:7a:7c:24:9d:ce:f2:fd:97:02:9a:d6:99:fd:ab:29:
         e2:ea:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 15:02:37 2024 by rpki-client on console-fra.rpki-client.org