Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa
File:                     zL3_4FNbZ2aCxy9rplylMDH5VEo.roa (raw, json)
Hash identifier:          rLyaU0N8kfTZyCD1YVa8Vr7Mn9LJ6zrEcxca7CvP4Ss=
Subject key identifier:   CC:BD:FF:E0:53:5B:67:66:82:C7:2F:6B:A6:5C:A5:30:31:F9:54:4A
Certificate issuer:       /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial:       018CC8DF951DFAE1E87ABB7C920ACA640100
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa
Signing time:             Tue 02 Jan 2024 06:32:24 +0000
ROA not before:           Tue 02 Jan 2024 06:32:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61317
IP address blocks:        88.80.134.0/23 maxlen: 24
                          88.80.137.0/24 maxlen: 24
                          88.80.139.0/24 maxlen: 24
                          88.80.138.0/24 maxlen: 24
                          77.246.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Jan 2024 05:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:95:1d:fa:e1:e8:7a:bb:7c:92:0a:ca:64:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
        Validity
            Not Before: Jan  2 06:32:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ccbdffe0535b676682c72f6ba65ca53031f9544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:d6:50:53:52:ce:09:bb:1b:7d:cc:f1:23:
                    81:0f:98:b5:d7:83:b2:5d:95:a7:1b:00:93:58:98:
                    21:68:b6:c3:7a:a2:cf:13:11:7e:6d:ab:26:03:8e:
                    a7:bc:a8:53:da:28:c1:05:c8:74:76:14:da:d1:01:
                    59:3f:70:28:79:74:c6:98:15:22:b5:84:56:33:ad:
                    90:ce:15:6e:c6:d0:05:5a:e4:d3:49:c1:e5:97:66:
                    d5:60:9d:85:d2:e7:93:f5:62:20:cb:9a:d2:19:5e:
                    5a:5c:1d:8a:2d:34:12:c7:89:81:9f:f6:ee:e1:e9:
                    76:11:eb:aa:05:7a:27:9f:8b:c8:00:01:09:74:79:
                    33:07:b3:31:90:b1:40:37:f0:26:cb:03:7e:c6:81:
                    18:24:73:24:92:24:6d:a4:87:39:36:39:34:6f:95:
                    64:67:7b:c3:1f:9a:38:0a:33:00:27:03:7e:0a:55:
                    62:90:7a:06:a3:93:63:43:2f:47:ab:97:3e:eb:8d:
                    ff:d2:94:18:54:84:d6:95:fb:a3:11:45:26:83:f4:
                    97:fd:98:29:a7:cb:52:37:62:62:81:1f:c7:b7:cc:
                    45:8f:ec:22:96:c6:fd:80:13:f0:ab:62:18:4b:54:
                    88:1a:f2:8c:04:25:10:ce:3b:e9:70:56:c0:72:74:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BD:FF:E0:53:5B:67:66:82:C7:2F:6B:A6:5C:A5:30:31:F9:54:4A
            X509v3 Authority Key Identifier:
                keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/zL3_4FNbZ2aCxy9rplylMDH5VEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.246.222.0/24
                  88.80.134.0/23
                  88.80.137.0-88.80.139.255

    Signature Algorithm: sha256WithRSAEncryption
         42:33:52:bf:75:87:f4:67:e3:3f:d9:1d:a7:7c:9f:fa:c1:2a:
         63:09:28:2d:ef:3a:b4:48:91:2c:a9:d9:4e:6c:a8:95:4c:0e:
         b2:91:ea:5e:65:97:d2:0d:60:bb:f4:e9:77:da:39:f9:1b:ec:
         1b:ee:be:7c:71:0a:86:5a:cf:f8:ba:5b:da:12:0a:90:66:ed:
         78:e8:35:e8:83:5d:69:bb:6b:7f:69:5e:a9:f6:9d:65:20:57:
         11:e8:5f:21:44:2e:18:4e:ed:c7:27:69:a9:0f:7f:25:df:3c:
         0f:18:72:6b:05:d9:60:7f:8d:22:c3:6b:f4:86:e1:f0:3e:78:
         14:f0:9a:e7:9a:a2:a3:dc:f6:d7:f0:fe:64:a3:67:c4:58:d6:
         46:27:ea:40:1c:4c:21:1f:12:0c:0c:ab:c1:4c:fc:30:5c:56:
         17:d6:19:21:04:78:63:58:51:dd:20:01:2c:d9:4e:4a:13:4d:
         48:bd:74:8d:67:20:71:c4:71:f5:05:b1:94:b2:87:7e:c7:1b:
         07:73:4d:95:9d:80:45:8b:7e:ce:4e:ad:72:22:d9:19:f5:1b:
         7a:3f:c3:23:57:ba:56:c6:f5:b3:67:69:8c:31:4a:91:22:fa:
         46:9f:16:fd:d6:07:4a:d3:ab:b2:58:a9:da:41:3d:cf:d3:f6:
         56:28:36:ff
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzI35Ud+uHoert8kgrKZAEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwMTAyMDYzMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2JkZmZlMDUzNWI2NzY2ODJjNzJmNmJhNjVjYTUzMDMxZjk1NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/WUFNSzgm7G33M8SOBD5i114Oy
XZWnGwCTWJghaLbDeqLPExF+basmA46nvKhT2ijBBch0dhTa0QFZP3AoeXTGmBUi
tYRWM62QzhVuxtAFWuTTScHll2bVYJ2F0ueT9WIgy5rSGV5aXB2KLTQSx4mBn/bu
4el2EeuqBXonn4vIAAEJdHkzB7MxkLFAN/AmywN+xoEYJHMkkiRtpIc5Njk0b5Vk
Z3vDH5o4CjMAJwN+ClVikHoGo5NjQy9Hq5c+643/0pQYVITWlfujEUUmg/SX/Zgp
p8tSN2JigR/Ht8xFj+wilsb9gBPwq2IYS1SIGvKMBCUQzjvpcFbAcnTt9QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFMy9/+BTW2dmgscva6ZcpTAx+VRKMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvekwzXzRGTmJaMmFDeHk5cnBseWxNREg1VkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQATfbeAwQB
WFCGMAwDBABYUIkDBAJYUIgwDQYJKoZIhvcNAQELBQADggEBAEIzUr91h/Rn4z/Z
Had8n/rBKmMJKC3vOrRIkSyp2U5sqJVMDrKR6l5ll9INYLv06XfaOfkb7Bvuvnxx
CoZaz/i6W9oSCpBm7XjoNeiDXWm7a39pXqn2nWUgVxHoXyFELhhO7ccnaakPfyXf
PA8YcmsF2WB/jSLDa/SG4fA+eBTwmueaoqPc9tfw/mSjZ8RY1kYn6kAcTCEfEgwM
q8FM/DBcVhfWGSEEeGNYUd0gASzZTkoTTUi9dI1nIHHEcfUFsZSyh37HGwdzTZWd
gEWLfs5OrXIi2Rn1G3o/wyNXulbG9bNnaYwxSpEi+kafFv3WB0rTq7JYqdpBPc/T
9lYoNv8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org