Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6zmJtPnkI1kw1ai3hd_59OnTQHk.roa
File:                     6zmJtPnkI1kw1ai3hd_59OnTQHk.roa (raw, json)
Hash identifier:          HEzGUDIdPXtIiv9JpncDSsptl977uB8weIWEZfwTzYE=
Subject key identifier:   EB:39:89:B4:F9:E4:23:59:30:D5:A8:B7:85:DF:F9:F4:E9:D3:40:79
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0190B13933B3C7196489549BD94EFE544652
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6zmJtPnkI1kw1ai3hd_59OnTQHk.roa
Signing time:             Sun 14 Jul 2024 12:30:34 +0000
ROA not before:           Sun 14 Jul 2024 12:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214661
IP address blocks:        88.80.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 12:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b1:39:33:b3:c7:19:64:89:54:9b:d9:4e:fe:54:46:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jul 14 12:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eb3989b4f9e4235930d5a8b785dff9f4e9d34079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:f0:86:c4:0c:ab:ff:fd:99:98:b4:b6:19:
                    f1:03:30:6c:3f:3e:32:bf:b2:28:0b:4e:20:a7:f6:
                    43:d6:96:74:fb:86:e9:70:3c:4d:bc:63:96:99:77:
                    77:d2:5d:ef:4e:21:8d:0a:1a:8b:c6:95:f8:db:83:
                    08:bd:50:c8:d0:7f:7d:2a:44:a6:c7:3e:58:20:c8:
                    26:fa:b0:09:01:0d:4c:d4:24:1a:32:b6:7e:09:55:
                    0c:1a:d6:23:40:55:f6:20:39:bf:f8:99:b9:b7:a3:
                    ef:99:bc:3d:8b:62:40:45:62:d5:41:87:36:7c:ae:
                    31:3c:86:85:c4:24:f1:26:c6:94:28:27:70:57:57:
                    6a:35:b0:15:2f:b9:2e:c8:c3:a9:a6:55:30:e9:d3:
                    6d:2e:0e:7e:12:1a:cd:fd:8c:a0:bf:e7:51:e5:18:
                    73:f9:1a:63:e1:44:40:66:b7:be:b2:c1:64:33:e9:
                    17:ae:5b:7c:6c:aa:8e:99:a5:d4:f6:fe:81:c8:5c:
                    0d:b3:10:92:a9:33:3f:53:fd:ff:29:4f:6c:09:40:
                    af:ad:72:2c:bf:79:97:81:0a:33:84:fe:4e:f7:a7:
                    43:08:e0:96:57:09:0a:c1:a8:5b:b1:87:b2:a8:47:
                    4f:9a:4d:f3:89:17:0d:df:05:56:05:43:c8:72:89:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:89:B4:F9:E4:23:59:30:D5:A8:B7:85:DF:F9:F4:E9:D3:40:79
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/6zmJtPnkI1kw1ai3hd_59OnTQHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:14:6e:83:26:98:54:20:7f:c4:05:7c:e7:66:7a:88:1c:e3:
         47:aa:f1:4f:7b:ce:be:78:44:29:ae:ca:ba:28:9d:72:30:9d:
         00:bf:1f:16:91:6c:40:d0:ba:20:0b:47:0e:39:09:17:08:6e:
         27:77:4e:2c:94:f1:23:0d:be:c4:c9:7f:d0:99:83:a9:e1:d5:
         7a:28:fd:94:6e:64:1b:ba:67:f4:68:b3:bd:48:43:e1:48:86:
         1e:a2:ed:12:26:5a:7e:88:68:55:9f:11:be:be:24:6f:6e:15:
         a6:79:f6:07:5b:bf:b2:b3:0a:f1:83:bf:1a:43:5b:7f:7a:cb:
         18:50:4e:6d:4b:db:4f:c1:27:b2:ca:69:44:41:03:1d:41:60:
         58:bf:18:98:19:fd:50:a6:a6:0a:ca:ff:b5:69:22:99:be:b4:
         f3:93:67:a1:06:d8:1c:1a:a8:1e:93:2c:83:0e:0c:c0:ac:84:
         cd:87:b7:8c:bf:ec:27:2a:86:0d:fe:30:ef:92:10:50:dd:e1:
         9e:db:cb:0c:62:b3:6b:fd:df:d2:25:21:09:ef:e6:e1:56:57:
         d2:5f:c8:9b:d5:de:5c:9c:e9:b3:4e:a3:e5:9a:12:cb:33:2f:
         b6:f0:b9:78:a7:e1:98:93:7b:41:2a:19:c7:ba:e7:24:d2:cd:
         16:9c:21:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCxOTOzxxlkiVSb2U7+VEZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNzE0MTIzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjM5ODliNGY5ZTQyMzU5MzBkNWE4Yjc4NWRmZjlmNGU5ZDM0MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSHwhsQMq//9mZi0thnxAzBsPz4y
v7IoC04gp/ZD1pZ0+4bpcDxNvGOWmXd30l3vTiGNChqLxpX424MIvVDI0H99KkSm
xz5YIMgm+rAJAQ1M1CQaMrZ+CVUMGtYjQFX2IDm/+Jm5t6Pvmbw9i2JARWLVQYc2
fK4xPIaFxCTxJsaUKCdwV1dqNbAVL7kuyMOpplUw6dNtLg5+EhrN/Yygv+dR5Rhz
+Rpj4URAZre+ssFkM+kXrlt8bKqOmaXU9v6ByFwNsxCSqTM/U/3/KU9sCUCvrXIs
v3mXgQozhP5O96dDCOCWVwkKwahbsYeyqEdPmk3ziRcN3wVWBUPIcolMnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOs5ibT55CNZMNWot4Xf+fTp00B5MB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvNnptSnRQbmtJMWt3MWFpM2hkXzU5T25UUUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCHMA0G
CSqGSIb3DQEBCwUAA4IBAQCBFG6DJphUIH/EBXznZnqIHONHqvFPe86+eEQprsq6
KJ1yMJ0Avx8WkWxA0LogC0cOOQkXCG4nd04slPEjDb7EyX/QmYOp4dV6KP2UbmQb
umf0aLO9SEPhSIYeou0SJlp+iGhVnxG+viRvbhWmefYHW7+yswrxg78aQ1t/essY
UE5tS9tPwSeyymlEQQMdQWBYvxiYGf1QpqYKyv+1aSKZvrTzk2ehBtgcGqgekyyD
DgzArITNh7eMv+wnKoYN/jDvkhBQ3eGe28sMYrNr/d/SJSEJ7+bhVlfSX8ib1d5c
nOmzTqPlmhLLMy+28Ll4p+GYk3tBKhnHuuck0s0WnCGZ
-----END CERTIFICATE-----
Generated at Thu Aug 15 17:31:36 2024 by rpki-client on console-ams.rpki-client.org