Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A6knuZ_AYbrUsjrM1134ojtt5XI.roa
File:                     A6knuZ_AYbrUsjrM1134ojtt5XI.roa (raw, json)
Hash identifier:          OIR2ldWyOBa4S3rBq98QI5f2+5SsEPvGsfPWnB2gMgs=
Subject key identifier:   03:A9:27:B9:9F:C0:61:BA:D4:B2:3A:CC:D7:5D:F8:A2:3B:6D:E5:72
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018A6B141A91A59121F164181549BBB01D9D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A6knuZ_AYbrUsjrM1134ojtt5XI.roa
Signing time:             Wed 06 Sep 2023 15:19:54 +0000
ROA not before:           Wed 06 Sep 2023 15:19:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47757
IP address blocks:        80.71.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 05:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6b:14:1a:91:a5:91:21:f1:64:18:15:49:bb:b0:1d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Sep  6 15:19:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03a927b99fc061bad4b23accd75df8a23b6de572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:39:25:e6:4c:46:34:c5:49:09:bb:ff:14:
                    0d:9c:af:44:37:de:9c:44:a7:72:5a:c5:90:51:33:
                    98:b5:f4:00:66:af:82:81:08:de:bd:4a:c2:b2:50:
                    13:de:c6:ce:6b:61:0b:05:a3:34:97:26:72:1a:37:
                    1e:e0:61:f6:07:bc:d4:c2:ad:85:8f:65:37:7a:4f:
                    05:a7:64:ec:32:30:8d:a0:6d:a8:82:07:ad:91:7e:
                    21:4b:df:e9:e7:5d:11:37:e6:58:49:8e:8a:e5:5a:
                    11:b0:8a:1c:ee:a1:c9:7c:cc:6b:cf:0b:64:75:fb:
                    1f:46:b9:19:f7:a7:47:84:59:ed:67:b2:12:3c:07:
                    1c:47:64:30:b5:60:b7:45:6a:b2:23:17:e5:c6:c5:
                    ef:c1:c2:fe:80:42:31:5f:e9:75:92:8c:e5:83:03:
                    96:55:c1:fc:96:0a:33:e1:70:e6:6b:80:a1:7e:56:
                    e5:44:31:bc:10:9d:f4:d9:d2:0c:02:19:67:82:54:
                    04:41:e7:d8:dd:2b:da:0d:aa:40:d0:b8:2a:7a:4f:
                    8b:7d:dc:f0:bd:3c:47:f3:b9:3c:6a:49:32:e5:ac:
                    86:86:21:f8:38:ff:24:99:c3:97:c9:50:73:75:6d:
                    70:6e:9b:26:0a:18:0f:17:8d:d9:c9:3b:ab:78:ee:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:27:B9:9F:C0:61:BA:D4:B2:3A:CC:D7:5D:F8:A2:3B:6D:E5:72
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/A6knuZ_AYbrUsjrM1134ojtt5XI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:62:33:93:8c:02:85:d7:43:da:60:53:47:1b:2e:20:ba:4d:
         46:ae:aa:a4:ae:4e:5a:5a:12:8b:06:49:d2:20:14:3e:34:cd:
         b7:94:16:1a:fd:ef:39:6c:d4:de:21:6e:dc:a1:6a:26:6e:c2:
         3a:46:ef:98:4c:dd:c3:fe:ac:b3:72:fa:c2:47:12:f9:6c:5a:
         d3:bb:3d:9f:e2:e5:d6:75:19:04:db:2a:3f:62:1b:11:52:3c:
         9f:4e:e7:6e:d4:95:ee:71:d1:b6:b1:98:e9:39:59:08:f5:ff:
         1c:42:90:15:34:8a:e6:77:2a:a9:09:5c:a6:dc:e5:21:5f:eb:
         ca:9b:60:1a:bf:27:3e:47:69:66:c7:1e:9c:76:68:12:25:c1:
         19:13:93:9e:63:fc:87:1c:e7:fc:2c:d0:1b:f6:2a:8c:7a:6e:
         c6:8a:f6:f4:45:c8:4e:3a:33:d9:fd:a9:b4:e9:17:8f:7e:e4:
         c7:ec:f0:3e:00:98:16:78:92:90:16:60:8c:42:6c:c1:33:fc:
         84:6c:27:c7:9d:fe:c8:54:2c:50:50:3b:90:e7:41:36:2d:1d:
         a1:df:43:61:61:3c:9f:78:5a:85:04:27:5e:de:78:61:29:18:
         33:fd:02:9e:10:d0:52:88:f5:ee:4d:f2:93:78:54:8b:31:51:
         6e:4e:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org