Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa
File:                     gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa (raw, json)
Hash identifier:          yGwn+Rgam3BNjJC1ZFu03Tsc8Ruc94qaAtY3oke1KJc=
Subject key identifier:   81:3C:53:3F:20:32:B8:41:7A:14:CF:51:C7:8A:9C:1C:01:BD:58:6A
Certificate issuer:       /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial:       018CEE10655AFBF7CB89F40343A4EFFD6B26
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa
Signing time:             Tue 09 Jan 2024 11:51:40 +0000
ROA not before:           Tue 09 Jan 2024 11:51:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58224
IP address blocks:        80.75.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 17 Feb 2024 13:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:10:65:5a:fb:f7:cb:89:f4:03:43:a4:ef:fd:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
        Validity
            Not Before: Jan  9 11:51:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=813c533f2032b8417a14cf51c78a9c1c01bd586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:f3:e8:5f:d8:ee:c4:a2:a3:39:7a:58:a3:
                    8b:e5:7c:75:b3:0a:c6:bd:2b:0b:1a:d1:43:7b:b2:
                    fb:f5:5a:0d:1d:3a:c9:ab:cb:11:90:4e:d3:97:31:
                    b6:29:78:be:1c:e4:c3:93:e8:a8:ed:ac:72:63:da:
                    2c:ff:eb:c1:38:e5:14:c5:04:3c:17:8a:3b:00:53:
                    6b:8c:4d:e8:04:10:05:36:bb:2b:09:43:be:cc:07:
                    16:a5:10:6b:21:96:6b:32:ea:04:f0:a3:4c:22:fd:
                    5b:3d:9d:1f:02:30:5a:cb:c2:a5:a7:fd:e2:4b:bf:
                    cf:9f:21:6a:b2:c4:97:e0:84:e7:e6:06:ad:c2:fc:
                    72:cc:d4:46:8b:05:6b:13:f1:dc:c6:18:04:08:cc:
                    e2:ea:ea:71:d1:dc:62:59:a1:7b:a7:3d:99:6b:1a:
                    cd:85:29:4f:6b:e7:ad:f7:6f:f9:72:af:5c:da:9b:
                    d7:18:b0:45:a5:c7:d3:d5:50:32:f4:0f:d2:3f:e5:
                    42:00:e4:21:d1:33:28:47:87:18:44:cf:87:fc:6c:
                    4b:11:ef:a8:50:4d:48:26:35:4f:ef:13:16:44:6a:
                    0c:cf:74:11:9d:99:d2:95:fa:19:ab:63:6e:c7:c5:
                    fe:5c:06:03:41:7b:76:82:d6:97:84:f3:5f:c3:41:
                    15:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:53:3F:20:32:B8:41:7A:14:CF:51:C7:8A:9C:1C:01:BD:58:6A
            X509v3 Authority Key Identifier:
                keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/gTxTPyAyuEF6FM9Rx4qcHAG9WGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:e5:72:28:ae:a0:a7:bb:89:1b:ba:c3:a5:73:e9:36:59:
         f2:b3:04:51:13:fe:32:3a:0b:dd:3c:09:4f:86:81:55:03:60:
         4e:4e:de:a9:ca:4f:c8:58:9c:4e:48:79:c0:b2:c5:3f:4c:26:
         06:fb:40:93:7e:1d:fe:02:07:5c:62:45:1c:91:55:0a:5f:a3:
         51:e7:07:d1:52:d4:5a:80:ec:43:77:f9:a8:5a:ee:9a:87:18:
         ee:7a:20:e9:af:6d:5b:c9:8a:59:c5:ab:49:f8:19:4b:dd:8b:
         9f:51:ef:13:0d:c2:79:49:41:af:40:07:72:b2:05:98:97:05:
         5d:59:03:d0:18:ad:eb:a2:0c:02:44:56:c3:d4:7b:20:6d:fb:
         17:9d:f6:3e:6d:01:35:3b:b0:de:89:0b:74:ef:e8:78:5b:3a:
         f0:18:0c:e5:eb:51:64:39:db:db:ed:1f:78:ef:3d:87:79:c1:
         a9:d5:41:74:13:3e:a6:6d:ce:31:b2:88:c2:77:2c:2d:64:f2:
         95:3c:ac:4c:4e:1e:3a:99:34:01:1f:7a:57:e9:59:9a:c4:1c:
         dd:b4:eb:ca:95:6d:4a:9b:22:07:99:36:1e:dd:d5:cc:cd:d2:
         3e:87:0d:1f:f5:6c:1e:97:69:94:ec:96:e9:9c:8b:b9:c2:95:
         23:06:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 15:08:27 2024 by rpki-client on console-ams.rpki-client.org