Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/jSne-gwdIOS-J0e9W5u4QsHGAQ8.roa
File:                     jSne-gwdIOS-J0e9W5u4QsHGAQ8.roa (raw, json)
Hash identifier:          cSzVKm0JA6b+tshDHg86WHg16rS4K3ruNJ+vnD/ufCc=
Subject key identifier:   8D:29:DE:FA:0C:1D:20:E4:BE:27:47:BD:5B:9B:B8:42:C1:C6:01:0F
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01883070BBBDA2378FB847BB0C0457CB485C
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/jSne-gwdIOS-J0e9W5u4QsHGAQ8.roa
Signing time:             Thu 18 May 2023 19:57:54 +0000
ROA not before:           Thu 18 May 2023 19:57:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     397563
IP address blocks:        80.246.233.0/24 maxlen: 24
                          80.246.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Jun 2023 07:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:30:70:bb:bd:a2:37:8f:b8:47:bb:0c:04:57:cb:48:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: May 18 19:57:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d29defa0c1d20e4be2747bd5b9bb842c1c6010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:09:02:8b:04:15:79:1c:2b:4f:38:9d:91:
                    dd:ac:b3:07:ed:f8:6a:ea:74:2e:5b:fa:ea:07:d2:
                    29:10:95:ba:c2:56:a2:51:9f:65:85:56:c3:5f:ad:
                    62:35:00:18:92:c5:3e:aa:cf:ef:94:db:f6:a8:51:
                    8b:b0:2d:bd:3a:55:ec:a9:94:9c:f3:ad:c4:40:3b:
                    78:66:8e:19:81:50:e7:e1:97:93:eb:de:a3:0a:6e:
                    37:01:d8:17:f1:55:f6:db:ab:1e:98:a7:fe:0c:5a:
                    5d:9e:a2:23:73:76:33:27:44:ed:56:7d:d0:75:9b:
                    41:12:1b:95:bd:16:62:7f:fb:54:99:e5:77:91:01:
                    4f:05:55:5e:76:5d:07:e1:da:4a:e4:30:e2:d9:54:
                    d6:09:05:9e:48:0a:3e:20:08:a2:4e:76:5a:0f:69:
                    f5:41:ac:23:4c:77:0e:75:9e:45:7c:69:4f:0e:32:
                    e4:6f:e8:9a:9f:d6:d6:b5:e4:5d:c7:fd:1f:9f:32:
                    7a:61:59:2f:bb:e3:2d:13:d7:39:a4:16:28:5c:e7:
                    3b:94:6f:21:29:43:21:0b:e8:00:10:6f:54:ac:01:
                    a5:6f:d6:b9:78:0a:03:ff:1a:d7:f5:a7:ac:41:09:
                    83:c5:ae:91:7e:6e:1c:8f:1d:29:a2:79:96:53:4a:
                    23:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:29:DE:FA:0C:1D:20:E4:BE:27:47:BD:5B:9B:B8:42:C1:C6:01:0F
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/jSne-gwdIOS-J0e9W5u4QsHGAQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.233.0-80.246.234.255

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:51:0d:59:19:4a:60:76:a4:64:02:6b:3d:73:ed:a0:e8:
         a5:f3:15:9b:20:45:32:68:e8:87:0b:9c:6a:ef:57:52:fa:38:
         2c:e6:21:74:cf:51:8a:55:1b:f4:0e:c2:91:3a:d0:2b:8d:5f:
         95:5e:b7:06:8a:84:9c:78:0a:74:38:2f:d1:ad:34:81:1d:73:
         cd:93:1b:19:b9:cf:17:59:9f:06:c5:aa:6a:a5:3d:b6:c7:85:
         33:da:68:4d:1f:23:2d:0b:95:c5:b1:1e:34:2d:0c:f5:aa:79:
         a0:ab:be:0c:0c:af:a1:cc:d3:62:02:9d:89:a6:d0:09:71:4f:
         c0:09:e9:26:0e:9a:f4:03:72:ce:30:6a:32:04:c7:15:fa:1f:
         65:63:78:ee:aa:eb:8b:d8:12:ea:c3:42:88:83:f7:c1:2f:78:
         11:a5:ec:db:9c:34:0a:69:89:b7:9f:08:8d:7d:7a:3e:15:06:
         ce:f8:bb:bd:49:51:02:0c:b7:fc:08:59:31:12:21:a2:85:a9:
         db:a7:d0:76:28:ab:c6:77:32:46:f5:b3:3a:ba:b8:a8:df:43:
         1f:83:e1:9b:a7:de:97:d9:29:83:c5:f9:80:fb:f4:57:35:3a:
         03:8d:3c:1d:18:91:ce:17:0c:05:4f:95:bc:3f:e4:fe:2d:59:
         c9:47:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org