Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/xEmQCZH59LVo2JykZnT-YP_cjU8.roa
File:                     xEmQCZH59LVo2JykZnT-YP_cjU8.roa (raw, json)
Hash identifier:          wqUGhQKGUqL9er0htePwmgETBmgyb1uwdSPLMq4eLzk=
Subject key identifier:   C4:49:90:09:91:F9:F4:B5:68:D8:9C:A4:66:74:FE:60:FF:DC:8D:4F
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018A9816DED131D3EF77DF0ADF6A5FE4ADA0
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/xEmQCZH59LVo2JykZnT-YP_cjU8.roa
Signing time:             Fri 15 Sep 2023 09:05:50 +0000
ROA not before:           Fri 15 Sep 2023 09:05:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35182
IP address blocks:        80.233.245.0/24 maxlen: 24
                          80.233.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:16:de:d1:31:d3:ef:77:df:0a:df:6a:5f:e4:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Sep 15 09:05:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c449900991f9f4b568d89ca46674fe60ffdc8d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:2c:f4:51:fd:78:05:bc:bf:ac:e4:13:50:
                    04:e3:ab:b2:e9:b0:f3:fb:fc:4c:91:74:2d:b7:19:
                    dd:3d:10:78:c7:8e:bf:48:cd:9b:6e:2b:65:a4:ed:
                    63:df:b2:57:31:c0:a1:cb:f3:c4:2b:ef:5e:ff:01:
                    ba:a5:c4:4c:1c:cb:34:a5:f2:b2:15:b3:25:ed:77:
                    4c:61:cd:01:08:e2:a8:e8:46:ac:0c:18:c0:c0:b8:
                    92:06:65:21:fc:25:bb:97:83:bf:82:13:cc:f2:d7:
                    65:aa:79:20:84:ad:c0:44:b1:a7:16:70:68:90:65:
                    49:7c:81:16:f8:9a:5b:75:ac:d8:84:13:a9:60:b3:
                    7d:a3:f4:a0:ab:1b:61:77:c2:35:d9:e7:20:9d:7b:
                    36:d3:c9:81:ec:2a:a3:a9:45:7f:9b:ab:2f:d0:d2:
                    1c:65:16:b8:b1:0d:d8:0c:3b:62:3c:1b:5f:f1:b1:
                    dd:95:29:8f:79:71:24:7e:f3:fe:0e:5d:85:c0:5e:
                    98:94:ab:77:e5:bc:ee:a5:7e:de:fb:43:51:25:ab:
                    0b:0c:5b:5b:ff:a9:ef:77:0c:51:10:49:7b:1a:87:
                    6c:e0:44:8b:cb:e8:0e:86:fd:2c:0e:fc:f1:5c:16:
                    26:2a:cc:d1:52:2c:e0:e8:7f:12:ce:28:18:38:64:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:49:90:09:91:F9:F4:B5:68:D8:9C:A4:66:74:FE:60:FF:DC:8D:4F
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/xEmQCZH59LVo2JykZnT-YP_cjU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.245.0/24
                  80.233.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:7e:da:7e:99:b8:38:d2:14:c8:04:04:45:ee:63:46:fe:
         52:5d:37:84:4d:3f:45:ba:9f:95:b7:8e:fc:dd:2e:2c:c6:c6:
         43:83:01:c3:d7:2a:93:a2:74:f3:74:65:c2:ce:c0:00:b0:49:
         3d:6d:a0:56:51:d1:33:64:5f:c7:ae:49:75:6f:ff:90:d3:c7:
         70:1e:40:bb:29:6c:a8:29:bd:4c:85:c3:ff:9e:c0:de:6c:2b:
         29:5b:e2:b9:40:67:5a:36:9a:18:0c:dc:c7:33:72:ff:de:d6:
         5d:95:98:15:82:05:a7:24:1c:c0:22:da:cc:90:af:1a:43:63:
         34:6d:d9:6c:e7:c7:f5:b6:a3:26:04:00:71:f4:9e:1c:38:b9:
         46:2b:a8:61:b8:4b:1f:6d:82:56:49:d6:30:37:b8:9c:67:e7:
         90:4d:6b:e7:c7:be:cb:09:3f:ff:69:17:72:b5:56:57:0f:24:
         1d:07:02:c7:e2:e9:1a:65:4a:e3:18:e9:f4:4f:e6:75:b3:2f:
         10:d1:67:c1:4e:90:fc:c8:7e:12:4a:7e:dd:af:43:37:fe:70:
         5f:89:fe:f9:c7:0b:a9:de:8b:7b:7f:f0:04:6d:8e:01:8b:dd:
         80:2a:7b:93:2a:27:d9:4b:5e:95:12:24:5a:c8:2d:d7:7e:79:
         02:f1:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 10:05:59 2023 by rpki-client on console-ams.rpki-client.org