Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa
File:                     GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa (raw, json)
Hash identifier:          umxS3dyb848rlW6E0/VQwWDTRBTjsb2V0ClzPjrb3nQ=
Subject key identifier:   1B:01:1D:D0:21:CE:62:DE:8B:BA:9B:1D:A2:D5:4D:7A:AF:D9:D5:D4
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018998700BE50B2D42E489A88F2F5BDBA3DE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa
Signing time:             Thu 27 Jul 2023 17:40:27 +0000
ROA not before:           Thu 27 Jul 2023 17:40:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200385
IP address blocks:        80.71.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Aug 2023 12:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:98:70:0b:e5:0b:2d:42:e4:89:a8:8f:2f:5b:db:a3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Jul 27 17:40:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b011dd021ce62de8bba9b1da2d54d7aafd9d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:a7:87:bf:c1:96:4c:88:07:3d:88:09:cc:
                    66:5e:e4:98:bc:3f:91:eb:9e:82:93:62:48:e4:45:
                    88:4a:76:05:85:43:5e:d9:2a:f9:21:1b:4b:0b:7e:
                    a8:c3:30:c5:93:33:51:69:18:81:9b:6f:ac:45:0d:
                    bb:b8:0e:f4:75:d8:b0:81:16:8a:c7:d2:d8:a0:57:
                    90:8d:1a:5b:2c:4e:18:0b:97:e4:cf:02:3a:a2:f9:
                    7f:d5:c8:f8:60:61:01:19:d3:1d:c6:d0:ed:a1:bb:
                    53:06:0e:4b:0b:09:76:cf:28:8a:a9:78:7e:16:0d:
                    d8:f1:6c:40:f4:75:17:11:0f:28:4e:81:d1:65:66:
                    5d:1b:a6:fd:f5:f7:76:ee:c8:10:9f:43:52:03:87:
                    ff:5c:3a:00:c2:78:ce:f6:27:51:06:32:93:ce:ff:
                    af:17:08:8e:09:e3:54:ba:67:8c:6a:b0:ea:09:d3:
                    9f:dd:96:07:45:4f:d2:e8:a5:6b:5e:12:99:ec:f4:
                    ed:57:5b:79:c0:29:f0:61:3f:e1:b9:f3:53:94:50:
                    1c:d5:63:44:66:6d:99:49:9a:4c:eb:7b:0f:5d:06:
                    8d:18:68:d3:d7:49:c1:1d:8a:44:92:bc:88:d0:8c:
                    67:3d:47:c1:25:87:ee:7e:17:60:05:27:16:8c:6b:
                    4e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:1D:D0:21:CE:62:DE:8B:BA:9B:1D:A2:D5:4D:7A:AF:D9:D5:D4
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:57:6e:29:b2:ad:fb:fc:98:f2:28:5a:0f:04:fc:56:c1:
         b0:bb:50:ce:08:79:d5:0b:51:a3:b5:fc:53:46:e1:86:2d:38:
         99:33:85:4d:f0:7c:e4:02:e7:c8:1b:ff:e1:b4:53:ca:59:bc:
         e0:87:bc:1e:af:91:a9:c5:de:bc:ad:b8:25:83:4d:24:08:5e:
         42:3f:51:50:3a:4d:10:b6:85:53:11:dd:f4:ec:fe:e1:05:18:
         d6:4a:85:1d:ad:3a:a7:c0:cd:37:ce:07:43:0a:35:50:18:72:
         84:dd:de:cd:7e:dc:70:9b:1e:d9:a9:3f:83:4f:1f:af:8a:8a:
         dd:37:a2:78:86:53:59:b1:28:e4:76:59:73:ca:13:7f:87:9d:
         26:f7:b2:62:09:27:56:0b:0f:ee:65:56:e4:e1:06:b7:df:0a:
         dc:f1:c9:80:d7:ca:26:21:a8:39:33:33:8b:7b:f9:d4:9d:17:
         fc:b6:f7:e0:39:b9:1a:d5:ce:77:0a:8c:b8:da:a4:cb:bd:09:
         43:6a:86:18:32:5f:75:c2:fd:30:77:9f:88:0c:69:8c:76:4b:
         ee:6a:61:23:5a:8c:49:e2:88:55:0a:10:cc:0a:b1:93:36:2b:
         58:10:73:c2:ce:8b:cd:8f:07:b5:b0:f9:86:6e:24:a6:3f:47:
         b1:e1:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org