Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/329G_JdJrYX5nG-LkWYq0RiZoT8.roa
File:                     329G_JdJrYX5nG-LkWYq0RiZoT8.roa (raw, json)
Hash identifier:          wCeQC4nNEEc/+3QbGn+wDvCQCXrsRdl2PDaQTUfOFJE=
Subject key identifier:   DF:6F:46:FC:97:49:AD:85:F9:9C:6F:8B:91:66:2A:D1:18:99:A1:3F
Certificate issuer:       /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial:       018DB7507D52C2B4038C74775D7C68A4939E
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/329G_JdJrYX5nG-LkWYq0RiZoT8.roa
Signing time:             Sat 17 Feb 2024 13:45:21 +0000
ROA not before:           Sat 17 Feb 2024 13:45:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216054
IP address blocks:        80.75.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 20:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b7:50:7d:52:c2:b4:03:8c:74:77:5d:7c:68:a4:93:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
        Validity
            Not Before: Feb 17 13:45:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=df6f46fc9749ad85f99c6f8b91662ad11899a13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:d3:5d:e5:c0:57:8a:07:7e:ac:2b:8c:03:
                    45:66:67:ca:83:83:88:30:ab:8f:ef:99:b9:72:56:
                    67:b1:77:62:f8:6f:75:29:d8:a2:10:01:e1:b7:36:
                    37:54:ca:5c:a6:18:e9:77:59:bb:a5:fe:df:ba:21:
                    2d:b6:9e:d3:7a:37:19:ad:4c:cb:53:04:a4:60:41:
                    55:89:ed:d1:17:6f:e2:73:ad:f7:99:b4:10:98:d8:
                    70:b4:1a:81:8d:16:65:df:b4:2a:07:5e:04:72:e4:
                    7d:40:16:9f:6b:3a:29:81:63:f1:6a:4c:7d:6d:e7:
                    73:17:41:06:ed:51:79:31:3e:ef:62:c1:53:76:7d:
                    b4:20:7e:c5:46:70:5a:bc:b0:14:4f:c8:8c:b1:7a:
                    9f:5a:d9:92:10:35:de:42:41:7c:af:e0:95:ef:dc:
                    bf:8f:fa:e6:73:85:79:9d:5d:4e:75:db:2a:2a:c1:
                    71:28:6b:b3:cf:ce:0b:58:50:a4:ca:c4:b5:48:80:
                    4d:67:f1:3e:89:cc:ba:dc:cb:6a:af:98:b1:f6:13:
                    f2:1e:7a:31:1d:67:74:48:83:a5:d9:9e:98:dd:ee:
                    d7:a5:96:dd:8d:7e:24:8c:91:98:4f:27:61:62:8f:
                    96:86:d1:ab:d7:bf:c0:5c:34:1a:21:23:c9:01:57:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:46:FC:97:49:AD:85:F9:9C:6F:8B:91:66:2A:D1:18:99:A1:3F
            X509v3 Authority Key Identifier:
                keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/329G_JdJrYX5nG-LkWYq0RiZoT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:79:a7:1c:f1:86:72:06:d1:d1:37:96:d5:2f:01:93:63:
         f1:dd:42:ba:83:e2:5f:8a:c4:19:06:8c:de:1d:73:75:97:f5:
         a9:9c:31:10:44:14:51:63:14:8a:7b:af:e9:96:fd:ba:12:d9:
         33:a3:0a:55:4f:cf:18:19:83:72:d9:af:50:1f:b3:a2:22:c4:
         63:4b:28:b0:d0:30:ef:30:c1:0c:51:6a:01:dd:39:93:a5:85:
         35:2e:a1:07:07:08:74:ae:2f:30:5f:ee:48:cc:e1:3a:e7:15:
         43:46:65:71:d7:bb:ea:c3:c6:1d:9b:11:e8:1a:3d:70:f7:31:
         09:77:49:e5:5e:fb:71:07:6f:e4:f7:cc:b1:f1:2c:3b:14:b6:
         3f:d3:31:08:7a:d8:e8:b9:fb:05:bf:b5:2d:c6:ac:da:c8:c1:
         88:05:ce:c8:ff:8b:ea:cd:cf:7b:5b:7d:e6:4e:f8:e5:c8:ce:
         d3:b2:5b:5a:3c:72:67:60:9a:da:fb:5e:61:ef:d4:8d:23:39:
         9c:93:f2:5a:9a:9c:f8:d8:19:c4:8d:81:3d:1e:2a:2b:d4:32:
         94:b8:2f:9b:c5:1f:a8:83:7c:69:da:ff:8a:00:44:a9:63:f4:
         d1:22:c3:0e:91:28:06:a8:22:71:91:9e:cc:4d:4a:a8:d6:97:
         90:70:06:c5
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 17 23:38:18 2024 by rpki-client on console-ams.rpki-client.org