Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/I8S0S5SygYHJsJ6eFXB24y5EM5Q.roa
File:                     I8S0S5SygYHJsJ6eFXB24y5EM5Q.roa (raw, json)
Hash identifier:          HPYw874V3yGuckfI3J9ebOC5U7dHGYF5pZmrwALYP+w=
Subject key identifier:   23:C4:B4:4B:94:B2:81:81:C9:B0:9E:9E:15:70:76:E3:2E:44:33:94
Certificate issuer:       /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial:       018DB8D85554FCEA12DCC24744B154915AFB
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/I8S0S5SygYHJsJ6eFXB24y5EM5Q.roa
Signing time:             Sat 17 Feb 2024 20:53:21 +0000
ROA not before:           Sat 17 Feb 2024 20:53:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215633
IP address blocks:        80.75.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Mar 2024 11:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b8:d8:55:54:fc:ea:12:dc:c2:47:44:b1:54:91:5a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
        Validity
            Not Before: Feb 17 20:53:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=23c4b44b94b28181c9b09e9e157076e32e443394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:5f:d9:fa:f2:e7:ff:91:46:7a:4f:c1:fc:
                    70:f5:42:c0:8f:e0:dd:6a:df:96:e0:d5:a0:a5:f5:
                    f1:46:b7:64:77:a8:09:c1:62:19:c5:53:0c:a0:32:
                    6c:45:e0:30:bb:ea:14:22:b2:d4:c2:cc:36:65:02:
                    f8:0f:28:22:8c:f9:66:55:bf:f0:d5:2c:ca:0a:af:
                    ca:18:43:93:39:01:a3:40:2b:5f:55:58:52:33:fd:
                    a3:74:0a:54:0f:92:0a:ec:ff:af:1d:33:3a:f5:26:
                    09:7e:c9:4b:34:b2:3f:d5:89:dc:4b:c2:f6:6d:fe:
                    1b:55:14:bd:ab:53:12:e2:f8:74:45:cd:9e:2f:62:
                    99:df:92:81:27:9a:83:22:f8:3b:aa:ac:cb:b8:40:
                    1a:83:1b:59:76:ff:c6:d9:8c:45:68:a3:55:8c:4e:
                    37:13:9a:ce:4a:73:b4:dd:8e:cf:8d:ba:93:69:b6:
                    ee:a2:09:9c:3d:d6:9a:c3:b3:8d:f7:f5:42:2d:2f:
                    9f:68:13:c3:3a:45:94:53:7c:29:16:64:f5:45:1e:
                    8f:5b:a5:1e:41:68:f8:98:ab:cf:f9:98:03:de:c0:
                    9b:dc:b5:cd:d4:1c:b3:61:91:21:8a:71:56:1f:fe:
                    ca:7a:66:f1:7d:07:63:fa:5b:37:d4:11:fd:93:a2:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:B4:4B:94:B2:81:81:C9:B0:9E:9E:15:70:76:E3:2E:44:33:94
            X509v3 Authority Key Identifier:
                keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/I8S0S5SygYHJsJ6eFXB24y5EM5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:ef:c7:fb:1e:86:bc:dc:b6:9b:74:54:4e:e9:1c:0f:c1:
         f4:ec:15:0d:a4:ed:dd:21:20:8c:bc:7f:a9:24:9e:74:38:fa:
         e4:c6:26:b0:1e:f0:16:ae:5f:df:08:ff:34:04:16:ae:8f:a5:
         fe:ea:16:e5:e3:19:37:c5:65:4e:44:58:d6:98:4c:8b:cc:72:
         86:f3:ae:cd:ea:f8:49:79:3e:38:af:91:95:3a:5a:c6:bc:b8:
         a7:ee:96:0f:b8:f5:97:e3:ed:1c:0e:7a:fa:17:78:4a:cb:a2:
         79:6a:c2:40:03:01:0f:4b:cc:2e:57:d2:71:0c:e1:f2:9b:30:
         bb:2e:2f:9f:92:0b:91:18:cb:91:d5:18:7b:e3:29:97:74:c8:
         a0:39:09:81:54:db:55:c5:81:c0:9b:fe:8a:dd:b1:4f:2c:ce:
         92:c3:81:dc:40:22:d1:2a:9d:51:0e:60:a8:16:50:e5:a0:7f:
         d5:60:76:0b:87:b8:27:22:31:f2:16:99:e1:d5:6e:67:f8:90:
         83:68:ef:45:27:f8:88:6f:92:52:34:18:0c:78:33:bc:ba:63:
         9b:09:66:1f:e5:1f:cc:54:b3:23:84:3d:86:c0:55:7f:1c:32:
         01:db:cc:17:f3:30:c8:e3:d7:58:b8:2f:5e:20:5a:b4:11:ce:
         cd:3d:15:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:06:31 2024 by rpki-client on console-fra.rpki-client.org