Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VCerOt_2pWORbaiXiY2sc9k_Zu8.roa
File:                     VCerOt_2pWORbaiXiY2sc9k_Zu8.roa (raw, json)
Hash identifier:          UK9t/lv7NXqzHh5raWGbi/n5jFMpwg20Ipyaotx3K28=
Subject key identifier:   54:27:AB:3A:DF:F6:A5:63:91:6D:A8:97:89:8D:AC:73:D9:3F:66:EF
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0191561591C320446C39FA5D50D5939838C9
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VCerOt_2pWORbaiXiY2sc9k_Zu8.roa
Signing time:             Thu 15 Aug 2024 12:48:59 +0000
ROA not before:           Thu 15 Aug 2024 12:48:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        88.80.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 19:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:56:15:91:c3:20:44:6c:39:fa:5d:50:d5:93:98:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Aug 15 12:48:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5427ab3adff6a563916da897898dac73d93f66ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:99:9d:e0:da:cc:d9:ee:63:7e:73:01:de:
                    07:f4:61:ff:6b:e0:e6:52:fd:2a:f2:5d:0f:c2:b7:
                    36:13:c5:9e:1e:f1:55:4e:93:8b:9d:08:a5:40:70:
                    53:27:9a:e3:3d:94:36:6f:d5:5a:be:93:3f:e8:7f:
                    39:c8:94:f6:50:c4:be:64:d0:4c:93:c3:8b:5f:49:
                    ad:62:0b:4d:66:07:a9:eb:90:8f:cc:78:c2:4a:f8:
                    14:9a:6e:6b:e0:f7:94:99:44:fe:4b:83:39:4b:6f:
                    92:17:7b:c8:6b:2e:09:2a:e6:8e:48:9b:49:1a:3f:
                    6b:60:57:c0:6c:6c:81:32:5d:80:26:10:58:95:1f:
                    6c:c4:5b:1f:ed:03:37:05:da:70:f2:10:96:73:d6:
                    99:b8:a1:27:0c:2e:0c:8c:0c:86:8e:b0:bb:52:68:
                    7b:84:d6:0d:6e:ae:f9:af:dd:7c:67:42:55:ee:e5:
                    bf:a1:bd:4f:ef:96:04:38:53:cf:19:aa:eb:e4:ab:
                    3c:42:17:f2:d7:f6:77:2d:bd:04:b3:5e:15:80:d3:
                    88:6b:19:13:76:e4:6e:cb:77:1c:f1:ed:77:55:16:
                    0d:17:63:fd:72:6e:a3:4b:05:94:7b:60:ae:cf:a2:
                    b5:85:f9:b0:d0:f3:23:37:58:82:17:37:7b:88:0d:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:27:AB:3A:DF:F6:A5:63:91:6D:A8:97:89:8D:AC:73:D9:3F:66:EF
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VCerOt_2pWORbaiXiY2sc9k_Zu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:23:41:5c:d0:a7:c5:e3:ef:73:b7:1b:1c:86:41:8d:24:
         98:0e:aa:a7:7b:f5:ef:38:9a:a4:2d:26:80:3a:1c:a1:bd:e3:
         09:26:71:a0:59:82:8e:ef:a2:2b:19:a7:7a:65:c9:cf:21:cc:
         49:b8:fa:0c:84:c4:7e:c1:72:3e:fa:87:28:d5:74:33:54:e0:
         c9:50:90:96:2f:85:57:7e:d8:7f:83:2b:32:51:86:21:11:28:
         76:14:10:c7:4c:46:a6:c1:df:49:bb:32:44:85:ff:40:46:2f:
         65:56:c2:65:45:19:ac:ec:02:3f:a9:0a:04:82:e1:31:7b:72:
         e5:52:47:53:fa:ba:ae:64:6f:89:a6:bb:77:09:b2:9f:22:08:
         ae:ca:39:ff:2d:40:ed:45:22:0a:46:f7:6f:3a:76:71:d3:30:
         24:f3:e2:eb:5a:4f:7a:f4:52:9f:ed:a8:b4:52:ea:70:36:88:
         89:a4:3a:70:38:0d:51:65:56:71:ae:a8:be:03:e7:27:8a:d3:
         a0:b5:0d:ca:1a:bc:80:48:58:aa:1a:86:67:da:bf:2b:7a:e3:
         97:f9:d8:6c:7f:18:bf:6b:bf:d1:0d:f5:ba:1b:4f:ca:68:62:
         a3:96:43:11:83:19:29:bd:77:ab:9c:f3:5f:8a:fe:1d:a9:b9:
         97:eb:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:42:48 2024 by rpki-client on console-ams.rpki-client.org