Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/GoLFJoTbyT4_G7WjWe6xmhovMSk.roa
File:                     GoLFJoTbyT4_G7WjWe6xmhovMSk.roa (raw, json)
Hash identifier:          eQ+Eahf6eE3gMjV1ALl2jeIhMcJTakeWPqRo5zBmqeI=
Subject key identifier:   1A:82:C5:26:84:DB:C9:3E:3F:1B:B5:A3:59:EE:B1:9A:1A:2F:31:29
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       0189DA5A9C877ACF14CB831B506FCEAD4C1B
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/GoLFJoTbyT4_G7WjWe6xmhovMSk.roa
Signing time:             Wed 09 Aug 2023 12:51:58 +0000
ROA not before:           Wed 09 Aug 2023 12:51:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     25151
IP address blocks:        80.85.160.0/23 maxlen: 23
                          80.85.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:da:5a:9c:87:7a:cf:14:cb:83:1b:50:6f:ce:ad:4c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Aug  9 12:51:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a82c52684dbc93e3f1bb5a359eeb19a1a2f3129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:ae:25:3d:83:7a:bc:d3:6a:c6:5f:a2:21:
                    dd:e7:2d:a3:d1:1c:27:45:a3:7c:cd:c2:2e:6d:cf:
                    c0:ae:52:b7:01:93:f8:89:99:e5:8f:ca:a8:da:57:
                    e9:0a:a6:16:a0:38:cb:39:fc:34:b6:95:6b:24:6e:
                    e1:e0:0b:2c:b9:da:db:b0:d7:8c:fb:d9:a6:34:fe:
                    28:08:41:14:ef:e3:f8:f4:d9:92:71:dc:82:f9:16:
                    19:a4:61:1d:1b:16:cf:15:9c:2a:62:6d:7f:42:8a:
                    17:97:e5:98:20:75:2b:cb:74:8a:f0:94:b8:b8:05:
                    3f:67:d7:1d:8a:75:51:26:e4:24:67:70:98:f1:e0:
                    a7:be:2c:59:d6:ec:e6:79:63:96:0e:b8:f9:77:1a:
                    b9:a3:d8:12:72:6b:bd:60:4d:13:24:46:34:ba:10:
                    d9:cf:88:bc:18:84:8c:88:be:6f:db:cb:60:01:7d:
                    b7:52:25:6d:7e:e6:19:19:6f:a4:08:70:05:3a:a5:
                    61:01:e1:6d:2d:63:86:ad:f9:02:f1:85:db:83:b1:
                    96:8d:22:17:36:c1:12:fb:6c:2d:21:f4:51:a6:c8:
                    83:48:84:00:99:e1:5b:6f:97:b1:64:41:31:29:f1:
                    28:b4:f2:d4:23:d5:56:b3:14:b9:7d:3e:8a:e0:c4:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:C5:26:84:DB:C9:3E:3F:1B:B5:A3:59:EE:B1:9A:1A:2F:31:29
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/GoLFJoTbyT4_G7WjWe6xmhovMSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.85.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:7e:e9:5a:26:fb:49:36:54:a0:20:d8:4a:1d:a8:4e:63:
         8d:09:f4:59:85:d2:5a:66:d5:28:86:06:1a:18:a3:57:a3:d4:
         3d:e7:4f:f7:ca:49:b4:ce:4c:f7:2f:34:6c:9c:fa:dd:e7:f8:
         d7:35:8c:04:3e:af:39:76:12:a6:2a:fe:e0:f5:02:6c:ce:51:
         2d:79:e2:5e:13:67:81:7c:d5:6b:4b:94:4a:6e:dc:89:be:ed:
         17:2a:16:0f:8a:11:7c:43:51:30:1c:d4:17:a3:03:bb:2a:99:
         65:72:17:9f:88:2c:5b:55:cc:46:63:bd:9d:68:d5:7f:64:6d:
         ef:5b:3b:21:ec:ba:55:94:d4:2f:15:43:7f:9a:d6:4e:ff:a0:
         fe:14:2b:29:a9:02:cc:bc:17:cb:e5:5f:dc:c8:02:7b:45:36:
         64:4b:b0:4a:6c:66:d8:58:4b:45:89:ff:ee:db:1a:c1:7c:0f:
         fe:a7:09:a4:53:35:d3:67:67:18:ab:cc:0e:61:04:05:ad:8b:
         89:78:7a:17:7c:0b:6d:fa:b9:01:c8:15:10:6a:be:c5:cb:c6:
         66:39:e8:6d:c6:40:5a:66:86:7e:0e:93:35:57:06:89:3d:c0:
         38:2d:ef:f3:66:f4:93:49:63:72:51:69:3b:87:69:14:2c:ba:
         50:5f:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 13:51:48 2023 by rpki-client on console-ams.rpki-client.org