Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa
File:                     G030FFv_q-88XNtlCCvArCsiIo8.roa (raw, json)
Hash identifier:          4M92n4LcIsgG++TDeEglS2o4k9AHgBSqngGNay/wP50=
Subject key identifier:   1B:4D:F4:14:5B:FF:AB:EF:3C:5C:DB:65:08:2B:C0:AC:2B:22:22:8F
Certificate issuer:       /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial:       0188636860C185A4819DD16E46C2FCC3FBEC
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa
Signing time:             Sun 28 May 2023 17:29:24 +0000
ROA not before:           Sun 28 May 2023 17:29:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199308
IP address blocks:        80.245.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:63:68:60:c1:85:a4:81:9d:d1:6e:46:c2:fc:c3:fb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
        Validity
            Not Before: May 28 17:29:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b4df4145bffabef3c5cdb65082bc0ac2b22228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:2a:c1:60:1e:36:5a:44:0f:3c:90:07:f6:
                    c9:8b:1f:36:ed:93:50:da:ae:28:0c:cf:39:cc:aa:
                    c7:b6:01:d2:97:aa:6a:4e:72:f4:9d:33:f6:82:fa:
                    48:e4:24:da:c9:3f:cd:e9:78:1f:bc:15:1d:28:8b:
                    d6:76:a2:7a:00:9b:a5:c8:48:79:a3:38:27:38:06:
                    1d:0c:0f:12:71:9e:be:3b:4a:d2:5b:a6:a2:e7:8b:
                    0c:04:82:54:fc:7b:d3:89:bc:0d:75:f5:05:b3:fb:
                    2c:83:3c:3b:d6:98:17:f4:67:07:12:69:a9:f2:fd:
                    a6:a0:e9:af:32:ed:45:67:0f:e0:1c:00:d9:ac:9d:
                    62:83:4a:04:53:89:b1:7e:24:39:bd:af:99:4e:06:
                    28:df:df:6b:f1:a4:e8:49:94:6c:ef:c6:41:a8:ff:
                    23:63:56:af:bf:24:8c:4c:ce:75:a5:ab:0b:39:b7:
                    5a:6b:b3:8f:1e:f1:d1:42:e8:b2:2b:77:65:7b:1f:
                    34:01:0e:e9:60:d1:2c:84:da:56:85:51:f4:83:6a:
                    3d:ae:06:8e:89:0b:e2:5c:d0:25:8d:54:b9:4d:3a:
                    34:c6:01:51:29:be:60:ee:1a:ff:52:d3:75:9c:36:
                    2a:0a:5c:31:bf:ac:cf:b4:f9:99:7a:07:db:42:f1:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:F4:14:5B:FF:AB:EF:3C:5C:DB:65:08:2B:C0:AC:2B:22:22:8F
            X509v3 Authority Key Identifier:
                keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/G030FFv_q-88XNtlCCvArCsiIo8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:7c:8e:06:48:02:43:79:eb:59:7e:78:15:50:30:a0:39:
         42:b9:f3:9a:62:31:a8:9a:e7:5f:31:45:c8:30:e0:d7:93:4e:
         4a:ae:41:48:45:1d:94:f2:7a:62:7e:4d:a8:23:ed:7d:99:34:
         b3:8d:4d:5d:ed:a1:0f:bd:83:32:43:d6:b1:59:72:a1:4e:c2:
         66:17:87:0f:f2:1d:2e:21:6d:82:de:c0:b9:8a:be:ad:5e:ca:
         43:e6:f8:29:eb:e2:a6:41:da:84:d4:52:0d:6b:24:c1:61:60:
         29:8c:f0:22:8b:64:a8:73:5d:57:44:74:4f:43:fb:b8:e0:87:
         83:86:0c:68:aa:fc:c8:5f:0c:3c:51:4c:8e:a3:ba:df:7a:b8:
         61:17:3b:f0:35:c2:dd:13:5b:4d:aa:93:05:5b:60:1f:89:01:
         2b:d9:5d:e6:57:ea:1e:44:9b:d6:4e:41:de:31:df:fe:ac:87:
         d7:6e:77:bc:44:31:54:4a:de:04:7d:b3:b6:2f:6d:76:5c:a9:
         6a:59:c1:25:68:97:06:4b:0d:ba:9a:93:8f:b1:0d:d0:ce:09:
         9e:42:01:a1:da:7f:78:9b:ff:70:eb:08:0c:a5:39:f8:64:fd:
         61:2a:bd:14:9a:a3:91:f3:68:9f:c3:c7:6c:8f:9f:f7:5a:db:
         9c:a0:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org