Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa
File:                     3U98EK5dcuJOAUMbzNiuj1OZv1A.roa (raw, json)
Hash identifier:          ZjdUXxrfDSapn+9bNDIuCl+ZwpNgSJYiN8qD5v0GjVc=
Subject key identifier:   DD:4F:7C:10:AE:5D:72:E2:4E:01:43:1B:CC:D8:AE:8F:53:99:BF:50
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       018F4C4E15E499C4CF4917D2C7721C586D94
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa
Signing time:             Mon 06 May 2024 05:08:56 +0000
ROA not before:           Mon 06 May 2024 05:08:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400866
IP address blocks:        88.80.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 05:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4c:4e:15:e4:99:c4:cf:49:17:d2:c7:72:1c:58:6d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: May  6 05:08:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dd4f7c10ae5d72e24e01431bccd8ae8f5399bf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:2e:6c:da:60:f9:43:d4:cc:1d:cb:a1:fb:
                    f0:5b:c8:2b:38:09:da:88:39:d5:86:5d:e0:3a:29:
                    cb:28:d9:ef:5e:68:b0:46:91:2e:02:14:07:04:b8:
                    37:c0:76:c3:a9:58:d8:a3:52:ad:4f:61:18:79:3d:
                    bc:ee:19:8b:f9:80:d7:c7:af:22:5b:e0:4a:75:e1:
                    bb:70:db:2c:9a:87:83:e7:a4:88:0a:ac:a6:20:a8:
                    5e:5c:ee:42:df:e9:e2:35:7a:3d:b4:53:8b:ef:a7:
                    07:aa:82:51:a3:41:a6:ad:33:48:45:22:05:74:7a:
                    21:61:35:84:2f:7b:6c:71:37:f5:c3:6d:28:c7:22:
                    25:61:c4:71:cd:f8:d2:bc:cb:f0:ed:38:e2:c0:d1:
                    dc:1d:40:c8:2f:ed:ae:5e:13:af:8c:af:f6:7a:d9:
                    5b:e1:b7:54:46:89:bb:d6:69:af:af:5f:78:fd:00:
                    a3:ec:1a:83:0f:5e:0d:17:85:b5:a6:ef:8d:21:70:
                    b1:38:6d:0e:71:2e:ec:75:56:e4:09:14:9b:61:e0:
                    19:31:23:54:23:0a:ac:ec:e0:a5:7a:08:4c:dd:ce:
                    3a:1e:09:01:74:eb:47:c1:f1:03:8d:5f:e3:98:44:
                    ca:69:f9:4d:f1:e2:ae:81:a1:3a:85:c7:5b:d3:2c:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:7C:10:AE:5D:72:E2:4E:01:43:1B:CC:D8:AE:8F:53:99:BF:50
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/3U98EK5dcuJOAUMbzNiuj1OZv1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:07:af:10:ca:93:53:27:36:62:e8:7c:60:5e:4f:70:e3:
         e5:f8:d5:5c:18:82:d7:06:ac:54:cf:93:20:4f:90:ee:b3:27:
         19:5f:fb:3a:7c:67:b3:02:7a:f6:83:4c:e1:47:09:a6:98:93:
         83:a5:bc:e4:27:59:6d:22:1b:81:80:f7:51:b7:5b:05:96:95:
         1b:60:48:a9:64:77:d7:f6:7e:3c:ca:b8:bf:69:24:d7:eb:09:
         ab:38:15:3f:17:91:b5:35:ca:24:a1:b7:7f:4a:1a:b5:33:da:
         98:97:e4:46:37:07:d3:3a:e7:ca:e6:ea:11:88:32:c9:c4:4f:
         ce:de:7d:94:ff:d0:bb:54:ed:93:88:79:04:88:0f:d9:2e:db:
         de:0f:0d:b7:56:50:77:84:89:c1:6e:95:d3:5a:a9:a9:bd:de:
         f8:3f:0a:a0:4d:7c:77:4c:cb:c1:b7:9c:cc:ee:cc:dd:6c:d1:
         bc:7e:d9:bb:3d:d2:a9:56:15:32:c5:fd:52:80:32:1a:b3:9e:
         c1:ab:9f:76:83:b8:4f:60:f5:fc:69:27:68:43:68:bd:2b:84:
         c8:50:4b:70:b6:00:b3:8b:cb:82:b5:eb:31:fa:47:18:e6:ab:
         bb:d3:94:b9:df:fe:59:ec:fc:b4:1a:4e:c8:77:5d:ce:68:ec:
         01:94:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org