Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa
File:                     9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa (raw, json)
Hash identifier:          URsPBO2hLvVNaXCw3vgHgI7LDQJUZ4vZX/vf1GXVogU=
Subject key identifier:   F5:38:42:58:30:80:39:47:ED:03:D6:60:55:20:8D:AC:E9:85:A8:00
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       0185712791832396ACD6525211D4A006E792
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa
Signing time:             Mon 02 Jan 2023 06:24:56 +0000
ROA not before:           Mon 02 Jan 2023 06:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209096
IP address blocks:        80.249.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:91:83:23:96:ac:d6:52:52:11:d4:a0:06:e7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  2 06:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f538425830803947ed03d66055208dace985a800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:d8:29:ff:90:55:2c:09:4d:cf:c8:9a:75:
                    89:ee:41:70:87:a2:db:2c:f2:3a:f7:de:22:2d:2a:
                    b3:9d:74:b7:80:34:c9:6f:e5:a6:4b:77:14:1d:d6:
                    47:2f:13:47:a9:e9:63:db:d6:c9:9a:c0:66:a1:31:
                    19:7e:13:80:86:6d:fe:b5:87:42:ef:81:01:bf:59:
                    22:14:63:12:00:bf:e4:7c:0a:f4:7f:c1:60:cb:de:
                    ba:45:18:bc:53:3c:5c:0a:4f:74:8d:b0:e1:1f:69:
                    c7:8d:df:b6:e4:67:32:ea:67:a0:f8:fb:09:6a:10:
                    25:57:8e:47:74:f7:aa:31:b2:d2:95:db:1a:0e:fe:
                    14:f4:1c:14:e1:c0:9a:27:f3:8b:fc:ab:01:3e:55:
                    26:8b:26:80:8c:a3:cb:db:2d:a4:a0:c1:0f:4a:6b:
                    df:01:21:e8:d8:7e:c8:bb:ca:fa:92:f0:0b:d6:26:
                    58:4b:df:0c:12:29:59:bd:b7:f2:37:29:df:dd:cf:
                    f8:f4:18:0f:f4:5e:0e:59:06:72:94:96:bc:32:5a:
                    65:c2:03:97:ac:23:f5:41:39:58:7d:c9:93:ca:d2:
                    e4:63:30:ce:15:93:d1:f0:22:95:a3:26:4f:81:f8:
                    ad:c0:a2:14:41:ec:76:8c:5c:75:28:11:06:c6:27:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:42:58:30:80:39:47:ED:03:D6:60:55:20:8D:AC:E9:85:A8:00
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/9ThCWDCAOUftA9ZgVSCNrOmFqAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.249.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:99:92:87:01:a2:34:5c:8b:b6:be:59:14:02:51:76:6a:1c:
         44:88:6a:3e:33:80:53:2c:8b:8f:a9:65:25:40:c3:8d:62:49:
         ff:97:da:ba:30:f6:e6:8f:fb:36:1b:15:3f:e2:d1:be:6b:16:
         19:8d:4c:50:a6:a8:7a:ed:46:2b:e0:8d:61:e4:a3:6b:46:14:
         55:78:4c:53:03:fb:c3:c3:4c:de:8b:a1:ca:d3:9a:0d:00:79:
         fd:fd:69:f6:73:af:58:83:a3:a3:f2:ff:c9:be:3c:36:56:b3:
         33:80:61:7a:ee:20:5c:af:03:70:6c:36:aa:c4:ad:3e:cf:96:
         2b:08:bf:95:c5:a4:28:d3:aa:1c:2e:ba:37:24:7d:1b:3b:f0:
         1b:b3:77:9d:f1:a8:94:50:77:71:b3:e2:4d:4b:28:be:e1:79:
         45:85:d3:b7:99:c4:4e:4e:a2:a9:29:ed:8b:81:50:a6:14:9b:
         c9:33:27:a9:22:e0:e6:32:a5:46:4d:bd:75:d2:90:b5:96:c5:
         62:c1:1d:b5:8f:d3:5c:b1:d0:51:a6:d1:d4:56:4d:00:81:54:
         09:0a:1e:14:1e:38:89:92:13:95:75:5d:9b:38:be:36:a0:1d:
         5b:e3:ec:8c:15:f0:58:c0:47:a2:05:58:c2:8e:5e:2f:35:00:
         c2:87:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:06 2024 by rpki-client on console-fra.rpki-client.org