Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/lP-E-J83jsIuUP_UGx8rr0BCMk0.roa
File:                     lP-E-J83jsIuUP_UGx8rr0BCMk0.roa (raw, json)
Hash identifier:          aZSPxtnTbS9Hn+foDce3/sDzEEPm18brr2hySWklVLU=
Subject key identifier:   94:FF:84:F8:9F:37:8E:C2:2E:50:FF:D4:1B:1F:2B:AF:40:42:32:4D
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       01856D0A9EDFE874187A4022A9AD3B7C2BF7
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/lP-E-J83jsIuUP_UGx8rr0BCMk0.roa
Signing time:             Sun 01 Jan 2023 11:14:50 +0000
ROA not before:           Sun 01 Jan 2023 11:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42075
IP address blocks:        185.80.72.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:9e:df:e8:74:18:7a:40:22:a9:ad:3b:7c:2b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Jan  1 11:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=94ff84f89f378ec22e50ffd41b1f2baf4042324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:82:60:c6:3e:7b:13:4b:4c:d0:25:93:01:
                    75:2f:a7:cb:d6:ef:4b:7d:90:1f:84:3d:40:ba:6e:
                    56:a4:ff:96:43:b9:0e:4c:e8:7d:43:67:3e:2d:0f:
                    31:83:bd:2f:4b:db:e3:44:21:15:fc:12:2d:41:a1:
                    7e:84:34:e4:cb:62:e8:33:53:e5:00:da:73:9a:14:
                    ae:e2:5f:62:4d:a4:b1:5c:94:20:02:41:02:17:4a:
                    d6:c5:84:17:48:5b:89:6d:7f:0f:76:b0:f2:e4:8d:
                    cd:0c:ad:f8:54:e9:d1:b2:88:33:78:c6:8b:a6:8c:
                    bf:e0:05:c7:12:f8:12:fe:e9:f3:f5:46:ca:22:8d:
                    7d:63:d4:7b:3a:48:f4:c4:64:16:ae:59:56:e5:ce:
                    4b:8c:9d:b0:82:47:fc:9c:4e:8e:83:9b:85:94:9e:
                    0a:c9:fa:29:0b:cd:05:5c:88:0a:e2:61:fd:02:cb:
                    ab:9a:64:50:08:2f:c0:a1:75:a5:99:64:14:88:e4:
                    f3:56:dc:d3:78:40:33:f2:33:c7:54:0f:e2:a3:f6:
                    e4:14:64:af:c1:1f:67:f2:89:95:56:94:3a:36:13:
                    de:0c:68:c1:d6:ff:b7:40:3f:b5:3c:c4:53:18:e9:
                    b8:0f:e5:f9:a5:ba:2b:d9:dc:6e:12:45:e9:52:51:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FF:84:F8:9F:37:8E:C2:2E:50:FF:D4:1B:1F:2B:AF:40:42:32:4D
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/lP-E-J83jsIuUP_UGx8rr0BCMk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:a1:e3:73:ab:c4:8b:df:8a:eb:c1:63:0a:fb:90:30:c5:
         e9:7a:62:cf:5d:33:20:23:e9:34:3c:16:0c:f6:81:6c:db:e2:
         cc:ab:d6:66:e0:54:57:10:15:03:1c:62:a0:aa:90:27:66:d2:
         21:46:a4:54:6f:c1:86:51:91:dc:e8:58:ce:4f:1e:9f:31:94:
         b1:cb:1e:4e:ac:72:f1:c8:66:63:02:60:2a:f3:e1:6c:74:66:
         68:08:40:29:9a:3f:a6:12:19:d6:e7:81:49:fc:9f:76:97:ff:
         7c:51:ad:17:99:e3:17:b1:ba:85:57:fd:a8:ef:34:54:10:70:
         a2:ec:9b:87:62:c2:43:c4:9c:54:ed:c9:44:27:82:03:3f:da:
         be:d3:d3:80:f3:0b:d9:72:d8:3d:1f:49:d3:f9:0c:46:5e:bb:
         e4:0b:40:91:1e:a0:5a:e1:92:3d:4a:9b:65:bc:1d:4f:3d:28:
         e4:e1:98:b1:aa:44:90:2a:cb:c6:56:c7:30:a0:5c:eb:94:29:
         be:f2:01:83:0a:5f:c5:d6:ff:10:93:49:2c:12:1f:99:a6:8d:
         a8:9f:bf:82:ff:b1:4e:a5:38:2b:3f:0b:94:9a:de:69:4a:49:
         ac:15:7d:71:f1:ed:4d:1d:d0:ee:7b:a2:6c:3f:50:db:e1:57:
         de:42:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:05 2024 by rpki-client on console-ams.rpki-client.org