Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/pC4Mhj1S7lNxp2nJLOg6UW2RInA.roa
File:                     pC4Mhj1S7lNxp2nJLOg6UW2RInA.roa (raw, json)
Hash identifier:          nWkAptU5Y6FiKiHhnmlZ9S3b8LsBRWgWtYBmVuVsvJY=
Subject key identifier:   A4:2E:0C:86:3D:52:EE:53:71:A7:69:C9:2C:E8:3A:51:6D:91:22:70
Certificate issuer:       /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial:       0185715561AFFB89507B6E3251AD89EFF261
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/pC4Mhj1S7lNxp2nJLOg6UW2RInA.roa
Signing time:             Mon 02 Jan 2023 07:14:58 +0000
ROA not before:           Mon 02 Jan 2023 07:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35470
IP address blocks:        213.249.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:61:af:fb:89:50:7b:6e:32:51:ad:89:ef:f2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
        Validity
            Not Before: Jan  2 07:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a42e0c863d52ee5371a769c92ce83a516d912270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:f6:54:38:d2:8b:9c:0f:d6:ac:2f:69:9a:
                    ae:c1:d2:86:a7:b1:9a:ff:ed:f8:c7:40:05:6f:08:
                    26:a7:89:f2:3c:72:58:6e:14:9d:d3:a0:50:2a:c2:
                    06:bc:a6:32:e3:52:fc:28:bb:43:d1:ee:80:bb:af:
                    45:29:43:a0:44:6d:01:00:9c:fe:77:29:04:d4:a1:
                    3f:44:e6:11:9d:62:84:63:7d:18:72:4a:41:4c:95:
                    6a:8c:97:5d:6e:39:63:e8:87:1c:db:b4:b2:4c:6c:
                    86:04:8a:e9:92:93:96:51:06:4c:c5:05:be:15:a6:
                    fe:37:b1:04:93:a4:76:c6:25:b8:3a:74:06:69:eb:
                    f0:f9:cd:79:ca:37:72:79:cd:4a:87:44:67:b7:3a:
                    9e:33:91:f0:50:46:e2:81:6f:64:2e:ad:57:bd:31:
                    9c:77:38:d9:e7:27:1b:b0:97:9b:e5:15:73:7d:56:
                    34:3b:dc:8f:74:67:8b:14:c5:f1:d0:aa:56:f2:13:
                    a5:c9:73:af:d5:8c:fd:33:f6:64:fa:6f:a6:64:0a:
                    dc:c1:de:7f:dd:89:1e:18:64:02:fb:70:b2:af:ea:
                    3e:4f:72:33:9d:16:be:1b:5b:e4:90:35:80:d0:b7:
                    55:f4:5b:e1:38:a1:62:20:21:b3:72:c7:86:65:84:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2E:0C:86:3D:52:EE:53:71:A7:69:C9:2C:E8:3A:51:6D:91:22:70
            X509v3 Authority Key Identifier:
                keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/pC4Mhj1S7lNxp2nJLOg6UW2RInA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.249.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d6:d1:46:89:de:82:d8:b1:6e:e0:42:72:4f:3e:71:07:15:
         2b:cf:f4:40:f3:c7:60:e5:5a:de:f7:54:71:cd:d1:12:71:ab:
         28:b7:10:09:dd:f7:95:9c:02:65:89:dd:fb:7a:6c:f8:2c:1e:
         ae:d7:d8:9b:c3:c9:37:0d:87:12:70:ba:2f:6a:64:5b:eb:53:
         8f:9c:c1:54:25:02:b3:7b:40:22:8f:8e:05:d7:e2:67:5f:af:
         3d:d8:89:68:67:48:ff:3c:6e:67:23:95:ce:4a:fc:a1:1c:17:
         68:e8:65:21:8b:da:0b:27:77:4a:c0:5a:ec:f5:1d:41:b4:bd:
         97:15:6e:40:d3:51:f9:4d:0b:ad:b3:01:b5:74:b7:0e:b7:6c:
         9b:27:cd:cb:28:29:ee:fb:43:5f:53:b7:4e:51:d9:95:e0:8c:
         a7:ec:be:94:94:32:18:27:89:dc:86:b8:31:4f:b5:f0:11:66:
         28:3f:97:84:82:c9:d4:8b:d7:b8:8d:2e:8a:36:dc:af:55:59:
         52:89:61:23:55:36:23:66:51:ab:e8:66:a3:f1:03:2d:79:49:
         71:7e:9c:78:d8:44:b4:d5:79:b8:b3:6e:86:84:b5:81:8a:cf:
         56:84:63:c7:1f:20:b7:b2:6a:6e:a9:4a:ca:32:db:af:78:9e:
         e6:0d:2c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:58 2024 by rpki-client on console-ams.rpki-client.org