Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/7CjvSePBhnhW27zcM5yJdyJecPs.roa
File:                     7CjvSePBhnhW27zcM5yJdyJecPs.roa (raw, json)
Hash identifier:          zIDeQB5uovGhFzS9e94G21I/9YdSHK1R8nS5F0khzZQ=
Subject key identifier:   EC:28:EF:49:E3:C1:86:78:56:DB:BC:DC:33:9C:89:77:22:5E:70:FB
Certificate issuer:       /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial:       01886B999F8BE2412A4349B562560376124C
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/7CjvSePBhnhW27zcM5yJdyJecPs.roa
Signing time:             Tue 30 May 2023 07:40:09 +0000
ROA not before:           Tue 30 May 2023 07:40:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21177
IP address blocks:        80.84.80.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6b:99:9f:8b:e2:41:2a:43:49:b5:62:56:03:76:12:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
        Validity
            Not Before: May 30 07:40:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec28ef49e3c1867856dbbcdc339c8977225e70fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:27:43:fe:6c:ec:11:27:7a:ac:13:ed:fa:35:
                    7c:f2:7b:54:fe:8c:30:cc:0c:01:53:d1:2b:32:ee:
                    b8:ce:a1:62:af:f1:a8:b9:5a:05:f8:62:64:a9:c3:
                    94:f1:d7:e4:1c:cb:10:b2:c2:d7:9c:ee:c4:7c:aa:
                    a3:64:49:f2:2f:f4:f7:ba:a3:ce:ca:7a:3b:c2:a0:
                    0f:e7:f5:e6:4e:1a:90:6b:e0:49:52:f8:02:5e:a7:
                    01:3d:53:10:8e:04:5f:61:ba:8d:e4:55:4d:ec:a6:
                    d5:81:ad:8a:2a:5d:35:7c:24:05:c2:5b:1f:4d:97:
                    9b:17:14:b1:03:9d:6c:f8:3c:ec:20:ec:3f:01:e6:
                    08:fc:fd:e8:4f:91:f2:70:11:06:52:9f:44:32:1e:
                    a4:56:99:fc:6c:8e:fa:44:79:d3:33:6d:dc:e9:e8:
                    97:90:61:49:ef:93:cf:0f:bc:33:7e:b9:99:cb:7f:
                    ba:c4:66:2a:e9:a1:d8:d4:98:39:c0:6a:71:f7:0f:
                    20:b0:d3:d8:92:42:eb:89:ec:be:2c:c8:a6:2c:ec:
                    ff:b4:14:22:09:53:5a:70:99:ea:bc:4c:da:7f:26:
                    b3:ac:20:7e:bc:07:da:fb:88:d0:d5:f2:27:29:25:
                    eb:bc:98:69:90:79:cb:3c:f1:6f:e7:4e:6f:1d:38:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:EF:49:E3:C1:86:78:56:DB:BC:DC:33:9C:89:77:22:5E:70:FB
            X509v3 Authority Key Identifier:
                keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/7CjvSePBhnhW27zcM5yJdyJecPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.84.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:f7:c7:d9:38:81:15:7b:68:5f:88:5c:d1:67:2e:6b:df:
         9a:f9:15:fa:14:20:d6:90:b9:61:95:63:30:9a:07:9a:8d:b0:
         a7:73:f0:7a:f8:a7:27:ec:3d:88:d8:b0:27:5e:08:ff:7a:69:
         f4:f0:eb:9a:f2:dd:f2:d7:94:da:31:a2:06:ba:90:bb:ce:cb:
         51:a1:fa:d5:5b:30:2b:c4:c4:49:ff:02:5e:04:71:b7:2a:4a:
         03:b8:02:33:ba:05:ef:ec:b5:94:5b:79:ca:e6:8a:44:59:4b:
         7d:e5:5a:3c:ae:c2:26:fa:2c:3f:2c:d6:eb:f3:fb:2c:71:85:
         c3:8d:c2:be:36:9c:1f:fe:9e:b4:f0:8c:c7:8d:b5:9c:9e:97:
         a4:da:ea:43:99:96:f8:dd:7e:2b:92:9e:01:94:9b:7b:cd:99:
         03:83:81:53:4e:e9:7b:84:68:bc:61:fa:07:6c:f3:bd:f2:f4:
         b7:93:89:aa:af:a2:68:e2:50:74:9c:e9:a4:0a:b6:4d:20:76:
         ec:a5:63:29:2e:10:29:c3:10:7b:78:1c:e7:b1:29:37:1c:9d:
         f2:0b:60:de:c9:06:ae:07:8c:3c:c3:d8:15:b0:fa:58:5e:b4:
         bb:d7:1c:32:1a:88:9c:ea:80:5c:34:20:6e:35:c1:8f:ea:86:
         17:49:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:44 2024 by rpki-client on console-fra.rpki-client.org