Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ep2iTvnaKlx0TR6MQHrzos2STAw.roa
File:                     ep2iTvnaKlx0TR6MQHrzos2STAw.roa (raw, json)
Hash identifier:          a02TuyHiFf6f4LeX6Pj/h1pdNxw4YraugLG5NgYOJGE=
Subject key identifier:   7A:9D:A2:4E:F9:DA:2A:5C:74:4D:1E:8C:40:7A:F3:A2:CD:92:4C:0C
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0190B50EA57AF3850525DA20000A6143D223
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ep2iTvnaKlx0TR6MQHrzos2STAw.roa
Signing time:             Mon 15 Jul 2024 06:22:34 +0000
ROA not before:           Mon 15 Jul 2024 06:22:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215355
IP address blocks:        88.80.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Aug 2024 12:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b5:0e:a5:7a:f3:85:05:25:da:20:00:0a:61:43:d2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jul 15 06:22:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7a9da24ef9da2a5c744d1e8c407af3a2cd924c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:fc:31:17:bc:a3:45:24:17:73:f0:3a:d7:
                    76:79:03:67:6f:71:bc:7f:f3:06:37:d1:d3:27:24:
                    f2:9a:0e:9a:e4:fa:67:fa:85:12:f4:9f:35:cb:69:
                    37:ff:e7:21:d1:2b:33:11:b8:0f:3d:dd:3a:d4:27:
                    2c:4b:50:80:f0:0e:0e:1a:2f:c3:c5:44:05:57:f2:
                    d9:c0:41:c0:b7:fd:c2:32:bb:ed:c3:84:34:af:cd:
                    99:2d:20:47:1b:56:2d:fa:37:93:7a:bd:1b:af:1b:
                    3d:24:c4:81:8e:b2:1b:91:c3:96:e1:19:c9:76:de:
                    1b:65:2a:0e:e3:f8:07:69:bc:e2:df:90:08:d3:07:
                    b7:c5:d7:3e:9b:93:85:4e:da:ab:e3:cd:50:35:b6:
                    c1:97:08:25:3c:1e:91:1c:9e:0f:57:5f:fa:99:b1:
                    d0:60:bc:1e:9d:67:62:56:e0:20:0e:68:a6:62:5d:
                    b0:bc:0b:1c:22:e2:41:2e:06:18:61:1e:10:d7:a4:
                    dd:6a:b2:86:3b:fb:ca:2f:34:9d:df:1d:9a:08:96:
                    41:ce:f8:f9:94:e1:2b:52:cd:69:ea:68:91:83:82:
                    fc:33:f7:e6:7b:e0:99:38:d6:d0:54:e0:b9:c0:52:
                    63:99:a6:89:a0:cc:68:71:95:62:f6:4c:52:6a:76:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:A2:4E:F9:DA:2A:5C:74:4D:1E:8C:40:7A:F3:A2:CD:92:4C:0C
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ep2iTvnaKlx0TR6MQHrzos2STAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:5f:87:13:6f:76:e9:75:d3:44:06:3a:ed:1b:cb:98:b2:
         1b:2d:39:9f:0a:89:8f:7b:70:c7:a8:55:4d:8e:bd:f6:35:f9:
         f4:8c:fd:49:93:09:75:09:cf:7f:ea:83:9e:ac:4b:fd:98:5e:
         b5:c8:bd:54:11:f4:6f:64:d2:0f:d7:62:12:9c:ea:02:ab:48:
         11:db:46:a3:82:94:38:5c:c5:e9:c9:79:da:84:9d:58:18:79:
         58:31:0f:b5:1a:2e:ca:5c:f5:a1:80:b3:00:0b:6d:f2:06:35:
         f8:80:44:04:cb:79:c7:9c:ab:c0:2a:48:c9:1a:88:16:09:1a:
         47:dd:75:78:41:6f:a9:c9:d4:30:61:3d:bb:41:18:b5:ed:8d:
         5b:e3:47:a2:88:71:3b:b2:27:a8:7a:8e:b2:03:31:03:64:67:
         68:d7:8d:b8:33:b3:0a:7f:80:31:f8:e0:b2:1f:8c:50:51:b7:
         ac:39:56:29:9c:3a:f1:fd:21:82:b8:18:b1:82:be:49:7d:5d:
         77:ca:e4:96:25:d5:da:df:2a:c6:ef:d7:3e:ab:df:f2:89:b2:
         b7:84:89:0a:09:4d:a4:d9:49:2c:37:74:76:a3:01:80:91:ce:
         a1:86:45:1d:42:08:af:a0:a1:99:19:4f:43:0a:c9:ac:22:7a:
         02:4f:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org