Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eVwHH-NRdKOelrdFMFiF7NluhIA.roa
File:                     eVwHH-NRdKOelrdFMFiF7NluhIA.roa (raw, json)
Hash identifier:          LB2WviA2gFaGwaJ8axnLeBhVNfvWo8NeB882ZwX4z6o=
Subject key identifier:   79:5C:07:1F:E3:51:74:A3:9E:96:B7:45:30:58:85:EC:D9:6E:84:80
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018CCA2A4895C62C98C16514D8BF3743993D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eVwHH-NRdKOelrdFMFiF7NluhIA.roa
Signing time:             Tue 02 Jan 2024 12:33:37 +0000
ROA not before:           Tue 02 Jan 2024 12:33:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210107
IP address blocks:        80.71.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 07:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:48:95:c6:2c:98:c1:65:14:d8:bf:37:43:99:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Jan  2 12:33:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=795c071fe35174a39e96b745305885ecd96e8480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fb:9e:3e:26:d0:52:38:ee:46:79:c5:f0:b2:
                    83:99:b2:8b:6a:2c:52:68:8e:f6:d0:9b:84:cb:7b:
                    fa:9d:6e:99:c7:e3:0c:9a:12:45:ed:3d:af:83:40:
                    5b:43:b6:76:ec:bc:b0:a0:49:e9:28:46:2c:87:8c:
                    58:0e:20:81:bb:3c:08:0e:03:ea:b0:4c:82:ed:fd:
                    e4:e6:d8:3c:2b:0f:2a:4b:b9:2a:80:a6:f0:56:e4:
                    88:94:48:27:30:7a:b3:b7:6b:cf:bf:7d:7d:46:73:
                    3d:dd:95:1f:25:9d:44:8a:5c:4f:44:05:d9:a9:a7:
                    5d:4e:86:ce:f7:5a:93:c5:c7:7f:9d:c0:f2:dc:e0:
                    86:70:21:6a:85:c3:46:e1:f9:3a:94:58:25:14:9e:
                    47:dd:80:f2:ea:85:e3:f3:b4:7b:07:21:b1:da:f0:
                    53:da:e3:ea:f1:cb:47:a1:4d:30:af:f5:27:ce:42:
                    30:4f:21:a6:2c:7d:bd:44:f7:1e:dc:98:e8:bc:9d:
                    cb:f1:5b:d3:a9:2d:cc:cb:91:3b:93:47:ea:06:ed:
                    8e:a0:2e:d0:4f:b1:15:3f:11:86:64:eb:f0:cf:9c:
                    13:fb:5f:36:fc:c1:cc:5a:14:9b:77:85:85:43:89:
                    87:fc:70:e2:7b:7b:e3:e8:5b:5c:bd:92:ca:a8:4f:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5C:07:1F:E3:51:74:A3:9E:96:B7:45:30:58:85:EC:D9:6E:84:80
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eVwHH-NRdKOelrdFMFiF7NluhIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:b7:c5:e0:56:b6:66:ec:c7:b9:e5:94:b1:4f:f2:d4:04:
         66:29:dd:1b:f8:b7:6e:ec:b6:8d:6c:5b:98:0f:7d:10:4a:9e:
         e8:66:14:97:6d:73:18:d0:20:e8:7d:ef:3b:2b:05:05:cd:39:
         15:33:af:5f:b8:da:28:11:58:bb:b0:07:fc:75:2a:13:01:90:
         c5:95:a9:df:ba:73:6b:e8:cd:22:7d:65:4f:93:88:32:29:18:
         d3:71:ba:92:cf:be:d1:81:ad:3f:a4:6c:39:13:67:bd:43:62:
         ca:5e:42:f2:a3:4f:08:84:05:ed:68:ff:49:99:2f:65:9b:c2:
         b9:80:f5:1f:58:77:8c:7d:9e:34:4e:95:41:b5:ef:27:5d:21:
         62:f2:d5:97:5a:9f:19:37:4b:e2:bc:d4:c0:c4:63:35:84:ea:
         26:64:83:36:7f:c3:2d:96:23:b3:df:75:44:dd:c5:a2:f1:2e:
         6b:a2:84:55:6d:f7:89:f3:2d:dd:ce:c1:81:23:be:1b:ed:3c:
         3f:55:00:ba:80:c3:7b:23:db:d0:7a:51:4f:d4:45:88:f6:be:
         96:17:c4:3f:56:f2:a0:b0:98:40:ee:81:16:36:86:23:b6:29:
         49:2a:40:c0:45:45:c6:32:59:fd:ea:e8:23:18:95:6a:94:fa:
         73:40:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 10:50:01 2024 by rpki-client on console-ams.rpki-client.org