Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/L9pue_HN4gt1Rdi8YVT1edt0Wwk.roa
File:                     L9pue_HN4gt1Rdi8YVT1edt0Wwk.roa (raw, json)
Hash identifier:          pLVYjPNeSD+RJ117F77Fu8xdjN48kWxuSshK76/MrjQ=
Subject key identifier:   2F:DA:6E:7B:F1:CD:E2:0B:75:45:D8:BC:61:54:F5:79:DB:74:5B:09
Certificate issuer:       /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial:       018FBA8756098977C3DFCF933D19CD718D32
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/L9pue_HN4gt1Rdi8YVT1edt0Wwk.roa
Signing time:             Mon 27 May 2024 14:49:42 +0000
ROA not before:           Mon 27 May 2024 14:49:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        80.75.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 May 2024 03:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ba:87:56:09:89:77:c3:df:cf:93:3d:19:cd:71:8d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
        Validity
            Not Before: May 27 14:49:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2fda6e7bf1cde20b7545d8bc6154f579db745b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:74:c8:08:61:a0:55:49:af:4f:aa:c4:73:
                    f0:55:31:85:11:39:fe:bf:ea:7a:80:91:98:ec:34:
                    af:fa:54:e7:0a:ce:ea:7f:82:13:ff:32:d1:eb:af:
                    60:35:32:fe:ad:07:a9:6e:2b:43:f0:7f:e7:70:2a:
                    8d:cc:d3:57:2f:3f:d4:e3:0b:fe:5b:1d:51:46:22:
                    2c:98:9f:8c:57:69:bb:69:80:2b:ab:eb:20:df:ff:
                    c8:71:43:27:d0:f6:e4:9c:72:b2:c8:3e:a0:5f:34:
                    7a:f1:77:3e:5e:5f:98:34:38:f6:54:e1:1f:95:1d:
                    d2:c7:d5:52:53:a7:d7:63:63:27:82:b1:6b:2a:44:
                    6a:34:3e:90:5c:25:0c:98:06:bf:38:25:4f:42:eb:
                    44:90:6d:01:b0:83:a6:c6:21:f3:3d:08:b2:ea:2d:
                    cc:ba:04:d0:ed:43:be:46:99:b8:a1:01:f0:c2:ab:
                    24:b8:02:57:c7:69:d9:fe:7c:50:a8:e3:5f:b6:7e:
                    49:bc:db:10:62:eb:a3:c9:70:ed:29:95:3b:fd:33:
                    c3:4d:ff:2e:5b:f6:d8:39:35:fd:fa:dd:20:87:45:
                    e3:f1:af:b6:9e:3e:a4:e7:a7:33:3f:1a:04:b5:c3:
                    0d:f7:9c:d9:12:cc:fe:70:50:a8:77:71:f5:95:29:
                    b7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:6E:7B:F1:CD:E2:0B:75:45:D8:BC:61:54:F5:79:DB:74:5B:09
            X509v3 Authority Key Identifier:
                keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/L9pue_HN4gt1Rdi8YVT1edt0Wwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:82:b7:2a:29:9f:5b:cd:9a:39:99:9e:65:fa:04:6d:56:
         64:7f:d3:23:6e:d1:cb:7d:4f:92:03:12:6f:1a:e8:39:b1:cd:
         2e:2d:98:7e:65:4a:03:d9:46:ce:73:ea:88:23:cf:6a:e6:ce:
         9b:84:e5:af:03:be:1a:4a:aa:5d:10:09:23:31:9a:0d:f6:99:
         90:d6:99:fb:cd:bc:9f:17:4a:28:6b:4f:a4:3f:53:bc:13:54:
         76:d1:73:34:55:ff:f3:0d:93:ea:45:84:51:43:5d:df:9d:24:
         22:61:bd:6a:b0:10:1f:4d:25:65:15:f1:d9:96:2e:35:de:23:
         ea:82:21:bc:d9:95:c4:bc:1b:0d:fb:91:c2:17:cf:50:24:d0:
         35:cc:12:07:c1:c6:70:53:95:06:cd:99:71:86:fe:58:c3:cb:
         b0:53:8e:d7:41:f2:2c:3c:05:e6:37:e5:88:1e:81:38:70:6e:
         ed:be:79:b8:74:0c:38:71:22:79:46:4c:29:fd:05:df:1d:92:
         46:06:f4:63:9a:2e:ab:74:d2:25:93:49:49:d0:c7:8f:29:25:
         70:88:61:24:34:01:48:28:36:e0:5d:fd:9b:3b:67:99:b2:31:
         d7:0f:05:2d:26:ae:c1:89:a8:ed:2d:c6:84:d3:c4:36:c6:9b:
         d1:ec:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org