Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa
File:                     rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa (raw, json)
Hash identifier:          6yAxePJGNnzO5mA7UWuqvHcNwRIyAYPaa9Av/eokCvo=
Subject key identifier:   AD:84:BB:F5:9E:F6:93:40:3E:33:3B:11:27:A0:72:12:FA:D6:41:50
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       0185E57C66F08911785918AFBD675FD7A36D
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa
Signing time:             Tue 24 Jan 2023 20:33:33 +0000
ROA not before:           Tue 24 Jan 2023 20:33:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        80.246.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Sep 2023 07:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e5:7c:66:f0:89:11:78:59:18:af:bd:67:5f:d7:a3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan 24 20:33:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad84bbf59ef693403e333b1127a07212fad64150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:af:bf:41:cd:52:30:ab:2a:11:d3:70:cf:
                    1f:70:51:97:09:45:67:7e:6d:be:57:bd:fe:50:9c:
                    52:8e:10:9c:80:3b:53:bb:a2:53:b2:5d:14:cc:75:
                    a2:83:8c:27:6f:a9:41:9c:8f:9d:c8:63:64:2f:05:
                    5b:ef:c7:4e:13:d4:01:dc:18:81:28:82:26:51:31:
                    eb:fc:cb:0b:53:2a:ce:04:d8:ed:29:34:55:cb:ab:
                    31:d6:a9:0c:2d:15:1f:93:ce:39:81:50:b3:1a:a9:
                    97:3f:6a:08:b3:32:29:4f:30:0c:ef:8a:95:f2:5e:
                    0c:4b:46:b0:1c:20:82:d4:2d:66:31:87:fa:91:96:
                    a1:b3:b7:33:6b:5d:e4:20:12:da:39:a0:fc:2e:7b:
                    b2:66:21:e4:db:bf:f3:25:fd:4c:9f:12:67:72:16:
                    3f:2d:be:34:20:0a:53:bd:85:d2:a1:c8:c8:72:e7:
                    57:80:26:d0:6d:55:5c:09:4f:12:e9:4c:86:ca:67:
                    17:e1:57:7b:b2:b9:b8:42:f9:72:50:9d:4c:f7:85:
                    47:42:8e:8a:33:ba:17:60:58:21:08:9a:cf:9f:f5:
                    e5:92:7a:d5:bb:6c:7b:28:0b:cb:19:19:3b:56:eb:
                    17:91:91:d3:c6:d9:ae:b2:d6:c8:19:f8:bd:14:bf:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:BB:F5:9E:F6:93:40:3E:33:3B:11:27:A0:72:12:FA:D6:41:50
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/rYS79Z72k0A-MzsRJ6ByEvrWQVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:05:92:e8:47:82:01:86:d4:a5:95:55:22:5b:80:30:27:75:
         e0:ee:b2:d9:28:1d:ce:c7:88:88:28:b2:0d:cb:dd:bc:78:82:
         43:a8:fa:1d:b4:13:60:f4:c2:88:40:37:a7:c3:dd:fc:79:5f:
         b9:87:ab:44:07:2c:7f:48:07:46:ca:4f:eb:87:7b:37:1e:9b:
         14:86:6b:95:33:6a:8e:65:0d:c8:44:7a:e4:e1:9f:db:e3:fd:
         00:67:16:d4:c4:a6:d6:d9:32:ca:96:e1:fe:c4:a8:e4:44:73:
         45:bb:41:0f:98:92:83:14:f3:1a:09:eb:98:fb:c7:b9:5e:4c:
         6c:9b:5e:01:68:f1:5b:dd:c6:fa:6f:75:8f:3f:ae:b1:98:f5:
         25:88:07:d6:3d:01:48:35:9a:4b:c1:22:14:7c:38:fc:bf:c8:
         16:01:f6:b1:4d:27:48:e6:65:f2:83:e6:af:f3:1e:7c:75:0a:
         d0:73:33:b4:9d:05:ab:df:18:70:cd:dc:28:28:7b:8d:07:2e:
         53:e2:de:95:48:d2:70:9a:97:f7:ca:9f:bc:f8:d9:01:d6:dc:
         9a:e8:e5:6a:66:4b:a8:c3:6a:34:c6:b9:dd:85:58:02:27:fe:
         b2:a5:f0:13:3e:d5:75:8e:86:ee:75:b3:10:52:83:0a:96:f1:
         ae:68:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org