Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa
File:                     62H6Iw2zYbTVczL8nj_OIKMMqCU.roa (raw, json)
Hash identifier:          /zLSKxlZ6AH1sPyl8nkNoJL3fQWRJnxzfts0qJfM194=
Subject key identifier:   EB:61:FA:23:0D:B3:61:B4:D5:73:32:FC:9E:3F:CE:20:A3:0C:A8:25
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018A98199DAC491755E477B8866BD781843E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa
Signing time:             Fri 15 Sep 2023 09:08:50 +0000
ROA not before:           Fri 15 Sep 2023 09:08:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43956
IP address blocks:        80.233.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:19:9d:ac:49:17:55:e4:77:b8:86:6b:d7:81:84:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Sep 15 09:08:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb61fa230db361b4d57332fc9e3fce20a30ca825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:9b:54:cd:8a:cd:95:09:6c:b2:a1:0c:4c:
                    76:91:d8:ef:ca:07:be:72:62:22:42:19:46:e7:36:
                    b4:35:5a:76:7e:44:7a:af:6e:20:5b:d3:e9:43:dd:
                    9f:dc:fa:b5:45:57:c4:43:75:78:0c:54:a3:07:2c:
                    fc:4c:56:1c:b6:b6:7b:71:02:1b:68:ce:a0:fc:96:
                    64:92:e6:00:61:10:b0:47:29:08:e8:10:51:19:25:
                    eb:9a:74:74:c7:91:a5:ea:93:2f:8e:ab:12:5f:40:
                    c1:c1:c6:12:79:cb:f7:67:c9:79:ff:5c:67:79:1f:
                    ac:85:de:48:00:5f:a4:c0:dc:71:c2:42:2f:1c:31:
                    b4:28:49:d7:04:e6:7c:e3:cb:61:5c:25:2c:52:77:
                    8d:68:a4:e3:82:83:80:b8:32:f2:4f:38:de:5c:93:
                    87:71:40:23:13:66:8c:d5:5d:b9:6b:6c:28:31:2f:
                    cf:5f:9a:62:18:2f:a1:50:43:48:ce:7c:a9:2b:1f:
                    6a:b1:59:f5:3c:dd:70:26:e2:73:0d:62:d1:c6:37:
                    c6:e7:f1:0a:16:bf:94:cc:cf:52:90:ea:7d:31:76:
                    02:83:2b:9e:2a:06:5c:d5:c0:0d:48:23:e3:4d:12:
                    60:b7:09:06:77:c5:f5:83:ac:aa:0f:4e:22:bf:9f:
                    0c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:FA:23:0D:B3:61:B4:D5:73:32:FC:9E:3F:CE:20:A3:0C:A8:25
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/62H6Iw2zYbTVczL8nj_OIKMMqCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:2d:3f:8c:66:2a:a5:52:95:e1:64:bd:98:29:7c:21:ee:
         a6:72:7a:00:60:4b:55:24:0e:b7:e6:8e:6d:ac:36:ed:c3:f2:
         28:0c:47:78:24:06:da:f3:bd:1a:4d:e1:c0:35:15:ca:bb:bf:
         54:55:50:a0:a2:84:63:9b:a7:2f:4d:87:75:9a:bf:f7:ab:49:
         c5:1e:d0:f4:19:7d:38:0d:82:b0:29:bf:09:41:0f:97:6f:05:
         0d:cb:04:3b:76:0c:8c:73:e2:f0:5d:8d:14:2c:81:eb:b2:7a:
         b6:d1:f7:f1:84:a7:8d:dc:24:a2:62:1e:9d:40:a0:bd:ce:93:
         44:71:47:58:91:15:10:f3:6d:78:93:f5:32:9f:51:a6:64:e2:
         b1:32:11:41:e6:48:d7:67:0f:d0:b1:05:bc:75:ab:51:ff:92:
         37:01:04:9c:66:23:9a:c9:4b:69:bf:c7:af:82:52:28:30:74:
         08:f6:4d:90:fa:5d:22:2c:f8:cd:a9:ae:eb:83:1e:c4:48:a3:
         5a:2c:d2:75:24:b4:04:74:5e:3c:cb:6f:06:81:c0:54:78:3d:
         4c:12:f9:0c:58:f6:84:bc:6a:35:46:4d:46:cb:ef:e2:81:df:
         e2:33:d1:03:5e:92:12:3f:38:fb:2f:74:50:17:04:65:7d:30:
         15:a9:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org