Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa
File:                     VWYIhixbwybElxrwi3BewdlBUNo.roa (raw, json)
Hash identifier:          NOs5wI/id+U/nK4ySiRFK3+SHX2HIHagJS9C7onFKPg=
Subject key identifier:   55:66:08:86:2C:5B:C3:26:C4:97:1A:F0:8B:70:5E:C1:D9:41:50:DA
Certificate issuer:       /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial:       01856F5DCDEC7F4F6C8EC4994E54271C7D76
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa
Signing time:             Sun 01 Jan 2023 22:04:56 +0000
ROA not before:           Sun 01 Jan 2023 22:04:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61022
IP address blocks:        80.121.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:5d:cd:ec:7f:4f:6c:8e:c4:99:4e:54:27:1c:7d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
        Validity
            Not Before: Jan  1 22:04:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=556608862c5bc326c4971af08b705ec1d94150da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:23:07:44:6e:8a:9e:c5:4b:88:a1:f7:55:
                    2b:a3:13:58:28:49:be:59:cd:81:b3:86:1e:c5:3d:
                    7a:bd:3a:2e:04:4b:00:53:bd:92:a3:44:c2:3c:cc:
                    58:20:09:34:ac:7a:ae:d4:e1:a5:97:41:d5:ad:54:
                    07:b6:78:3f:48:d4:f1:f2:17:39:fc:66:99:dc:91:
                    d2:bb:f3:1c:20:2b:66:28:75:48:c0:ca:69:78:5b:
                    85:1c:ec:02:66:48:9b:6e:0c:98:be:9e:17:55:d8:
                    91:4d:0e:1a:f7:27:e6:63:15:58:98:df:d4:85:31:
                    54:d9:f4:7c:91:2d:14:ff:ae:c3:ca:96:11:0c:9a:
                    0d:03:c2:70:23:70:c4:e6:71:e4:25:0f:b4:ce:fc:
                    ac:b2:17:da:ce:ee:27:c2:fc:9e:6d:0e:ff:cc:33:
                    84:7a:bc:0a:ae:1e:2d:6a:86:41:9e:e9:03:36:ef:
                    e7:cb:76:b2:04:bb:9c:f1:96:d2:0a:a1:09:9a:20:
                    4c:c7:8e:6f:af:59:5b:4b:69:2a:4f:e8:b9:c5:1e:
                    7c:da:09:21:44:67:ab:13:ab:43:ed:62:78:13:f6:
                    7a:87:fe:b9:80:02:c9:25:a6:60:0c:82:4f:17:1e:
                    1b:7b:f9:19:12:db:da:29:f0:2b:27:84:1e:70:a2:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:08:86:2C:5B:C3:26:C4:97:1A:F0:8B:70:5E:C1:D9:41:50:DA
            X509v3 Authority Key Identifier:
                keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/VWYIhixbwybElxrwi3BewdlBUNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.121.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:35:f8:f1:88:17:00:6e:ee:88:58:13:02:0b:e6:42:06:96:
         f4:d6:aa:ae:ad:c9:fe:a3:84:46:3c:30:dd:91:06:eb:08:3a:
         ed:e4:18:2e:1d:7e:01:fc:b6:ef:67:a2:3c:6c:29:50:7d:cd:
         4c:0b:0f:7c:63:15:77:a1:85:cb:22:e4:ab:0d:d2:7f:83:c6:
         47:25:ad:5a:84:99:0a:0d:d5:93:49:0d:14:fd:6e:46:e0:c7:
         79:8f:5b:bc:d4:9e:d6:8f:e1:bd:11:b2:76:2e:e2:08:c2:5b:
         ee:72:01:f6:4b:5a:ab:72:9c:da:d2:ec:39:99:d2:41:70:16:
         34:18:32:7c:3f:e7:68:86:36:8b:7d:c1:cb:09:6d:05:88:74:
         e5:a4:9c:2e:a5:06:ed:d5:73:e7:00:14:bc:4e:b6:02:4a:0b:
         71:a5:52:21:16:5a:d1:4c:a0:bb:14:56:9c:a8:51:56:36:01:
         a7:de:2f:ee:f3:b9:c4:cb:cc:7c:66:fe:8a:f6:69:44:aa:0e:
         b9:10:68:cf:47:41:fe:05:e0:a6:75:95:38:ef:39:74:c3:f8:
         b4:c5:32:1e:e0:be:60:b9:d0:d5:84:37:ac:3d:d2:19:05:56:
         1b:c9:0a:64:1f:28:b3:5d:e5:31:4d:c5:ae:f3:e7:2b:da:b6:
         55:f5:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org