Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4BzAjGwsDy4H7f_1tcWicFBCtGM.roa
File:                     4BzAjGwsDy4H7f_1tcWicFBCtGM.roa (raw, json)
Hash identifier:          p6MXUFPFF/FMPXrZFNWEe43zsSOVyEH1URcBzH/b4/4=
Subject key identifier:   E0:1C:C0:8C:6C:2C:0F:2E:07:ED:FF:F5:B5:C5:A2:70:50:42:B4:63
Certificate issuer:       /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial:       018CC7277962C07968B274B592183F921152
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4BzAjGwsDy4H7f_1tcWicFBCtGM.roa
Signing time:             Mon 01 Jan 2024 22:31:42 +0000
ROA not before:           Mon 01 Jan 2024 22:31:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198444
IP address blocks:        80.250.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 10 Feb 2024 14:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:79:62:c0:79:68:b2:74:b5:92:18:3f:92:11:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
        Validity
            Not Before: Jan  1 22:31:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e01cc08c6c2c0f2e07edfff5b5c5a2705042b463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:e5:05:70:89:9f:74:13:77:0c:ff:8e:f7:
                    a6:b2:46:60:78:43:5b:b6:a1:43:f7:a5:17:7d:3a:
                    6d:c3:67:1e:fd:41:6c:0f:0f:75:db:db:f6:ac:51:
                    34:9f:ef:1e:92:b4:55:1b:18:35:18:ad:fb:ce:bc:
                    94:30:27:69:fb:69:a5:23:20:75:b2:c3:26:f3:71:
                    fd:79:4b:0d:c8:8b:11:ac:ec:a7:de:1f:17:7d:cd:
                    9e:5b:58:8b:e1:bd:3b:34:49:26:4d:56:95:74:03:
                    64:33:e5:1f:44:dc:39:99:53:70:e9:95:5d:0e:3f:
                    07:cb:2e:6d:48:a1:ff:5f:83:e0:49:73:99:c4:6c:
                    e0:ec:4a:91:8b:c2:d9:eb:b2:ed:52:12:f3:11:dd:
                    2b:9a:24:23:8e:6e:56:8b:c3:6d:57:a9:02:73:32:
                    dc:97:cf:72:b5:32:77:f9:a3:52:8b:5b:42:3f:14:
                    e2:8e:92:b6:ca:a1:68:f5:67:87:c1:c1:0b:97:4f:
                    57:9c:4c:ba:c7:5b:a0:a5:cb:5e:d8:14:5e:9c:f8:
                    a0:4d:53:c2:5e:27:8e:8e:c6:11:d0:a6:d4:41:a0:
                    b7:35:55:d3:76:d3:93:04:08:12:27:50:b5:61:7f:
                    1f:35:c4:de:54:73:fb:10:1a:f6:08:6e:0a:a6:ed:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1C:C0:8C:6C:2C:0F:2E:07:ED:FF:F5:B5:C5:A2:70:50:42:B4:63
            X509v3 Authority Key Identifier:
                keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4BzAjGwsDy4H7f_1tcWicFBCtGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.250.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a2:71:9d:5a:fb:51:6b:a0:5b:d3:30:3f:bd:98:75:2c:e7:
         c0:e5:09:72:97:bf:3b:6d:90:13:18:30:62:26:cf:66:95:77:
         dc:81:a3:e5:50:25:be:46:6b:ea:6f:06:d2:8a:76:0e:b1:04:
         98:93:c1:9c:3d:0b:4e:a6:dc:ec:bb:0e:55:51:2f:d1:90:cb:
         aa:50:ba:2c:f6:2f:87:99:85:96:24:1e:a7:1f:62:58:aa:72:
         02:55:98:0c:99:11:ac:9d:53:d8:75:64:01:1a:ef:3b:32:0c:
         b0:3c:01:78:c6:2e:1e:51:e1:e5:62:a5:e1:97:91:31:e4:4c:
         c9:d9:0c:a5:69:be:d6:43:b4:42:49:84:fd:d4:e4:d8:98:18:
         33:64:3b:12:ad:7d:b8:22:4d:77:59:a1:c1:30:56:5a:66:a9:
         24:e1:13:21:32:8a:8f:9e:30:19:cd:ff:a6:31:ca:39:1c:dc:
         bb:0b:7d:25:e2:cf:c2:43:3b:f4:78:a2:7d:97:6f:ea:64:79:
         99:99:4b:eb:af:dc:18:7c:f3:31:8a:5c:07:83:31:3a:80:97:
         47:0a:72:3e:c8:c8:c3:eb:4c:61:29:46:3a:7d:c9:5e:24:3f:
         cf:dd:db:ed:ad:90:80:73:f1:49:a9:bf:44:75:98:f2:45:05:
         ff:18:e4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org