Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa
File:                     fUjVo60ckso1H9QaggAY5dWDOyM.roa (raw, json)
Hash identifier:          jH/NykimZtVGRQ8e34O5xfbPM2vbVpE98FbQodtewKY=
Subject key identifier:   7D:48:D5:A3:AD:1C:92:CA:35:1F:D4:1A:82:00:18:E5:D5:83:3B:23
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       01866DF3C4E7E1432948E8A527259E493A15
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa
Signing time:             Mon 20 Feb 2023 08:32:17 +0000
ROA not before:           Mon 20 Feb 2023 08:32:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        80.71.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6d:f3:c4:e7:e1:43:29:48:e8:a5:27:25:9e:49:3a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Feb 20 08:32:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d48d5a3ad1c92ca351fd41a820018e5d5833b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:9f:b0:29:d4:bf:55:86:49:8a:74:93:61:
                    a4:69:89:82:63:29:49:64:21:2a:5f:8f:84:32:1a:
                    4c:41:e9:73:cf:40:fd:88:d4:7d:ad:dd:eb:22:9c:
                    af:e4:53:bd:70:be:d1:1d:56:41:df:a4:50:da:b7:
                    c7:27:2a:1c:11:78:1e:59:64:1b:f3:bc:57:75:ea:
                    56:03:8d:45:89:86:9d:5a:d0:52:8b:9b:0c:01:0b:
                    d9:ef:9b:5b:b2:4c:f2:b6:64:ab:7e:43:69:d2:13:
                    08:bc:0c:4b:a2:ca:f8:55:92:47:b8:83:a8:e2:ce:
                    59:31:b7:2a:26:ae:00:c8:62:5f:c5:e0:c4:21:fe:
                    dc:6a:5f:b5:3d:4a:2a:85:5e:d3:af:9b:df:36:81:
                    3a:39:22:57:75:13:37:fc:06:de:e0:26:d5:6c:3f:
                    69:d2:87:79:59:41:d9:48:2d:e5:da:44:43:6c:83:
                    df:96:3a:7e:4e:18:42:fb:20:df:6f:0b:2d:85:0e:
                    14:82:da:07:b9:ed:54:8c:47:a1:0b:e7:44:d4:80:
                    07:59:20:68:0d:eb:79:5b:e9:fa:12:e0:62:3f:0d:
                    b9:5f:74:50:da:0d:f9:f8:f0:3f:36:ae:f8:9e:a2:
                    50:f0:9e:3a:31:7b:ed:5d:bf:2c:72:a5:ed:a2:e4:
                    01:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:D5:A3:AD:1C:92:CA:35:1F:D4:1A:82:00:18:E5:D5:83:3B:23
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:80:26:3f:a5:67:32:79:9a:1a:b5:0a:49:f7:26:32:cc:
         ed:73:8e:88:56:39:77:13:e5:d6:d3:26:40:f5:a4:23:b6:36:
         50:70:77:07:3c:1b:75:ca:88:40:c1:63:10:0c:d4:d9:ed:25:
         95:e0:99:84:ae:17:ef:61:0f:72:74:28:4c:2f:03:b7:c2:35:
         77:62:b4:58:01:cb:f5:31:df:88:ee:a0:bf:0f:46:5e:a6:59:
         78:ad:7d:d8:9a:d8:15:1f:29:3b:f5:e6:3e:00:cd:69:fd:ed:
         27:f2:57:07:e8:5b:2c:3e:9e:22:88:1f:e5:d6:e9:af:a1:f3:
         c0:33:4e:42:a2:ca:c8:be:b7:f6:bd:f1:43:1f:12:90:7d:6f:
         f6:a0:8a:6a:93:e0:53:e5:b7:66:ff:e9:01:23:97:66:57:96:
         f6:dc:b1:00:87:c7:cd:c0:c3:4e:0b:be:1e:3f:60:11:7d:60:
         6e:84:52:c4:61:b7:12:51:1c:d7:15:46:07:24:2d:6a:b8:a2:
         50:74:f0:a5:f4:ff:6f:d3:6d:20:2d:4a:17:aa:44:82:ff:25:
         0b:d0:be:8d:60:fe:76:36:86:b6:ea:27:28:24:81:58:90:49:
         68:02:99:6e:fb:95:74:cf:7d:f6:e6:0e:7c:3f:08:c3:81:8f:
         7e:1e:d9:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZt88Tn4UMpSOilJyWeSToVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwMjIwMDgzMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDQ4ZDVhM2FkMWM5MmNhMzUxZmQ0MWE4MjAwMThlNWQ1ODMzYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiGfsCnUv1WGSYp0k2GkaYmCYylJ
ZCEqX4+EMhpMQelzz0D9iNR9rd3rIpyv5FO9cL7RHVZB36RQ2rfHJyocEXgeWWQb
87xXdepWA41FiYadWtBSi5sMAQvZ75tbskzytmSrfkNp0hMIvAxLosr4VZJHuIOo
4s5ZMbcqJq4AyGJfxeDEIf7cal+1PUoqhV7Tr5vfNoE6OSJXdRM3/Abe4CbVbD9p
0od5WUHZSC3l2kRDbIPfljp+ThhC+yDfbwsthQ4UgtoHue1UjEehC+dE1IAHWSBo
Det5W+n6EuBiPw25X3RQ2g35+PA/Nq74nqJQ8J46MXvtXb8scqXtouQBHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1I1aOtHJLKNR/UGoIAGOXVgzsjMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvZlVqVm82MGNrc28xSDlRYWdnQVk1ZFdET3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfmMA0G
CSqGSIb3DQEBCwUAA4IBAQCjsYAmP6VnMnmaGrUKSfcmMsztc46IVjl3E+XW0yZA
9aQjtjZQcHcHPBt1yohAwWMQDNTZ7SWV4JmErhfvYQ9ydChMLwO3wjV3YrRYAcv1
Md+I7qC/D0Zepll4rX3YmtgVHyk79eY+AM1p/e0n8lcH6FssPp4iiB/l1umvofPA
M05CosrIvrf2vfFDHxKQfW/2oIpqk+BT5bdm/+kBI5dmV5b23LEAh8fNwMNOC74e
P2ARfWBuhFLEYbcSURzXFUYHJC1quKJQdPCl9P9v020gLUoXqkSC/yUL0L6NYP52
Noa26icoJIFYkEloAplu+5V0z3325g58PwjDgY9+Htmt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org