Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/djM2wAwsSWtY4s539ulWFNNuZSQ.roa
File:                     djM2wAwsSWtY4s539ulWFNNuZSQ.roa (raw, json)
Hash identifier:          LfEQJ7GmaDqgvttDwzRxAdNtKJI04BWB4NpVb2oZNrc=
Subject key identifier:   76:33:36:C0:0C:2C:49:6B:58:E2:CE:77:F6:E9:56:14:D3:6E:65:24
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018A690594094301D7004BB1C9BD881E8F94
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/djM2wAwsSWtY4s539ulWFNNuZSQ.roa
Signing time:             Wed 06 Sep 2023 05:44:47 +0000
ROA not before:           Wed 06 Sep 2023 05:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47585
IP address blocks:        80.71.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Sep 2023 05:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:69:05:94:09:43:01:d7:00:4b:b1:c9:bd:88:1e:8f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Sep  6 05:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=763336c00c2c496b58e2ce77f6e95614d36e6524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:cf:0f:fb:eb:b4:69:78:02:ee:5e:5f:15:
                    93:d0:aa:e4:25:d5:33:6e:ff:e5:a5:c0:6b:db:fb:
                    e5:35:7b:a8:76:8a:e2:b0:fc:93:86:6d:25:92:cc:
                    23:b6:93:e3:b8:2d:2d:7a:71:17:01:4f:36:4a:06:
                    95:54:19:e6:3d:da:72:8a:e6:b0:ea:c6:7a:17:47:
                    67:3f:21:8e:3e:95:06:fe:e3:af:be:90:18:35:95:
                    13:b6:6c:f6:de:44:db:c1:c3:f4:4b:4c:64:3f:fa:
                    52:45:03:09:27:71:9e:ba:48:70:bc:bf:ae:fc:84:
                    1f:9b:e1:44:b1:b4:90:39:94:4b:c9:ab:e6:82:01:
                    0c:a5:3d:88:18:01:72:72:2b:a2:4c:a4:6d:71:48:
                    e8:4c:35:22:2a:22:88:6b:91:7d:36:f9:78:50:7f:
                    46:69:d2:fb:4e:0c:84:32:2a:50:e2:2f:b0:2a:da:
                    a3:07:d9:f0:7e:1a:8e:9f:d0:1d:66:a5:70:81:cc:
                    b7:d1:2e:40:67:1c:f4:87:8a:05:eb:9a:a3:ec:c2:
                    b8:83:10:ba:3b:2a:9f:d7:ac:84:b6:88:dd:c4:c3:
                    2f:6b:c3:8a:b3:a7:f9:5c:d1:df:e2:c7:f5:71:1f:
                    10:8b:48:38:40:70:29:f2:67:ea:6d:42:c1:50:5c:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:36:C0:0C:2C:49:6B:58:E2:CE:77:F6:E9:56:14:D3:6E:65:24
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/djM2wAwsSWtY4s539ulWFNNuZSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:3f:fc:35:b4:3e:98:52:0b:6d:29:cd:38:b9:90:9f:31:
         9e:a7:a5:d9:e8:51:4c:7c:c2:17:98:24:07:64:d3:c4:8e:35:
         13:a0:21:2a:71:e7:30:d9:56:56:2d:bc:83:64:b7:05:72:d5:
         59:92:44:7e:7a:18:27:78:65:f7:f3:66:9d:71:8c:b4:5e:9b:
         1c:20:4d:eb:2f:e4:06:a0:18:99:3d:c9:9a:1d:ba:91:d3:6a:
         63:f2:f3:83:d0:42:92:d3:97:b9:44:07:f6:12:43:3a:79:73:
         83:f7:ee:85:e5:29:04:a8:93:d5:85:d9:09:9f:98:b4:2a:b1:
         5d:60:04:a9:5a:77:a8:cc:e1:4d:1a:55:1e:23:f0:b0:11:9e:
         bf:8d:e9:eb:9f:93:92:c4:ec:db:bf:b2:05:99:49:87:59:50:
         7c:b7:e0:10:fd:35:86:65:3f:9c:89:22:2a:17:da:ce:76:4f:
         86:28:bc:57:7c:11:e0:e4:f9:e7:72:b8:2f:cb:43:88:a7:3d:
         68:80:a4:b9:2e:0b:cb:b9:6f:4e:05:41:16:4a:0a:ba:bc:6f:
         2d:8a:08:8e:34:84:26:49:76:47:fc:99:df:e5:9d:8f:e3:d5:
         56:5e:94:35:7a:d9:b0:cc:0e:3b:0c:9e:53:cf:79:f9:b0:ed:
         37:ea:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:36 2024 by rpki-client on console-ams.rpki-client.org