Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/juS9oyKz9KWTxyl5i87mmVp7W0k.roa
File:                     juS9oyKz9KWTxyl5i87mmVp7W0k.roa (raw, json)
Hash identifier:          Kk8YH3IW7WVYsvGRcgAf1Sg3jjI/W9GMRuPCLK8+3LM=
Subject key identifier:   8E:E4:BD:A3:22:B3:F4:A5:93:C7:29:79:8B:CE:E6:99:5A:7B:5B:49
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       0190A87D7D57D343498F0411575FAA29524A
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/juS9oyKz9KWTxyl5i87mmVp7W0k.roa
Signing time:             Fri 12 Jul 2024 19:48:34 +0000
ROA not before:           Fri 12 Jul 2024 19:48:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        88.80.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 Jul 2024 12:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a8:7d:7d:57:d3:43:49:8f:04:11:57:5f:aa:29:52:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jul 12 19:48:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ee4bda322b3f4a593c729798bcee6995a7b5b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:0f:9d:f3:d6:a9:0c:f9:d9:87:c0:91:8d:
                    4f:7f:08:19:94:5b:78:08:89:91:58:29:a5:60:6f:
                    74:e1:d8:f7:3c:f8:f5:71:03:de:f9:8b:c8:9f:64:
                    55:d1:e1:8a:c9:1b:8c:3d:25:7c:4a:32:04:b4:cc:
                    82:61:f2:db:7b:86:3f:b5:af:94:02:ed:76:4f:d3:
                    fd:93:0d:f8:5f:c3:b0:b5:fa:17:f3:b9:69:9a:ff:
                    ff:62:03:8a:3e:43:f2:a3:d9:40:3b:08:f2:7e:40:
                    d4:da:8f:c3:22:c6:d1:21:83:f2:2d:d9:09:54:4e:
                    cd:12:3e:c9:15:5f:be:b4:49:90:60:69:0b:13:df:
                    14:52:ea:b3:cc:12:e5:b9:07:52:71:21:ec:80:f8:
                    42:39:bf:63:ca:eb:db:03:ab:eb:24:c7:d4:ec:6d:
                    53:ea:46:25:94:10:b3:d0:55:d4:86:e9:46:fc:5e:
                    56:9e:c5:d7:3a:6a:d4:ff:e6:02:e2:43:ae:04:b3:
                    0c:8f:32:94:15:66:d3:c0:c1:ae:9d:d6:26:5c:80:
                    d8:63:63:f4:ad:f8:46:fc:11:90:be:2f:ce:3d:b1:
                    57:e2:bb:38:c3:60:31:5f:cb:48:62:e0:12:cb:c3:
                    e6:4d:10:d8:fc:fc:38:a2:27:be:7e:36:b3:d7:66:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:BD:A3:22:B3:F4:A5:93:C7:29:79:8B:CE:E6:99:5A:7B:5B:49
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/juS9oyKz9KWTxyl5i87mmVp7W0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:1b:5c:8c:6b:07:92:8b:55:66:ee:ca:42:cd:98:76:25:
         ec:93:c0:98:a9:02:fe:0d:73:63:a5:c5:ed:72:eb:f0:d7:52:
         d5:c9:87:82:4b:e4:20:1a:7b:0f:16:e4:92:89:8f:54:5e:8e:
         c5:d4:f0:b0:b8:6a:79:e0:d8:4d:e3:53:37:1f:03:35:29:9f:
         21:70:5e:8c:9e:a6:87:cb:3b:c0:0c:3a:06:58:ee:1f:17:6a:
         3d:94:28:8f:a9:fa:e1:88:b6:93:f8:0e:89:4b:e6:98:13:2d:
         24:45:b4:93:da:47:ea:45:ef:fa:e3:4d:1e:f5:2d:44:2c:f1:
         83:4e:29:8f:a6:34:38:c9:36:43:7c:88:59:42:1f:b6:c6:7e:
         c3:02:b2:08:11:07:df:e7:2c:c6:c7:51:30:53:fd:bd:1a:d8:
         5c:b9:e4:0e:ee:2f:95:d0:60:00:9f:11:e1:35:01:bf:4b:2b:
         c6:7e:97:ad:b1:39:97:73:a4:35:f9:51:56:24:af:7f:69:4e:
         f8:dd:1d:f9:a8:9f:8b:f5:46:6e:fd:b0:28:a5:3d:47:93:23:
         45:43:44:85:d3:39:87:70:82:a0:52:4d:b3:34:98:cb:56:88:
         a2:13:09:f4:eb:b3:28:f7:be:dc:39:14:da:3f:72:37:f3:e9:
         ab:57:94:32
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 14 14:26:35 2024 by rpki-client on console-ams.rpki-client.org