Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/n--Eaduj9A0ZZUoTZJXW3epzKSk.roa
File:                     n--Eaduj9A0ZZUoTZJXW3epzKSk.roa (raw, json)
Hash identifier:          qY/Q/YX8AQNds69FtCNDMIzHxhvWv6XdgpzjZCDvps8=
Subject key identifier:   9F:EF:84:69:DB:A3:F4:0D:19:65:4A:13:64:95:D6:DD:EA:73:29:29
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       01856FE7105E07E565427D44283D9DE548F0
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/n--Eaduj9A0ZZUoTZJXW3epzKSk.roa
Signing time:             Mon 02 Jan 2023 00:34:52 +0000
ROA not before:           Mon 02 Jan 2023 00:34:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204641
IP address blocks:        88.80.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:e7:10:5e:07:e5:65:42:7d:44:28:3d:9d:e5:48:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Jan  2 00:34:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fef8469dba3f40d19654a136495d6ddea732929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:e5:50:ba:5d:c8:8e:82:da:50:93:f6:83:
                    0c:c7:18:bf:0b:7e:34:eb:45:b9:af:a1:34:2a:5b:
                    7a:49:ee:33:1c:6a:cd:c9:c0:62:43:da:fd:0a:51:
                    bd:1c:ef:ba:0e:d9:86:c0:a7:38:2a:9a:4f:70:0c:
                    5b:e3:af:06:5c:b2:9c:bb:58:8a:55:66:b2:65:26:
                    f8:6f:da:a9:47:5e:94:de:e9:f4:4d:94:ff:37:b1:
                    40:78:6d:38:e6:9b:2a:50:05:56:5a:72:5d:9c:90:
                    19:60:68:9d:84:21:4a:7b:48:82:09:25:d4:66:fd:
                    73:8c:20:4f:85:66:de:48:d3:db:51:55:1e:fb:ef:
                    85:4e:a7:24:56:69:82:d8:71:87:89:e5:0f:7c:ab:
                    40:f1:e3:a4:c0:64:96:8a:d1:c7:8a:01:94:48:04:
                    80:68:dc:3e:df:d9:80:00:2f:ec:53:22:50:4f:26:
                    34:79:77:40:0f:05:91:a4:1f:81:d8:0a:9d:8a:df:
                    1f:c6:d3:dd:05:c2:97:b3:4c:89:b8:1f:6d:a5:b4:
                    f7:2e:14:88:1d:21:5e:1a:31:9e:b7:a3:7e:68:85:
                    70:53:a1:0a:fa:0a:1e:be:d5:46:48:6a:50:99:bd:
                    4e:9f:bf:52:a5:ae:fb:1b:d2:4b:e4:65:b4:5f:3f:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:84:69:DB:A3:F4:0D:19:65:4A:13:64:95:D6:DD:EA:73:29:29
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/n--Eaduj9A0ZZUoTZJXW3epzKSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.80.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:90:6a:5a:86:b1:81:bb:80:b6:70:c8:c9:57:1c:ef:1a:
         1c:a9:6d:44:6e:88:af:53:35:17:18:b8:22:41:11:6e:cf:eb:
         c6:71:20:12:51:ff:75:74:f8:c7:6e:30:ff:f2:93:2b:75:3e:
         0f:05:6e:a9:3c:eb:60:17:cd:67:54:2a:4d:2e:f4:0c:cd:4d:
         aa:b7:3a:5d:07:eb:41:02:c3:bd:cf:57:a4:ba:1a:80:32:59:
         91:59:92:e4:9b:de:d3:57:6f:8a:d6:09:c3:cd:a2:3b:65:87:
         94:48:c2:d7:79:50:a0:88:56:30:b2:15:26:0c:f5:7f:56:16:
         1f:81:89:0e:23:ed:c9:6a:db:f9:99:26:0e:a7:e8:55:19:39:
         4a:ee:8d:2f:f4:68:0c:f6:76:a7:bf:b6:72:e5:34:1b:56:95:
         c2:43:1e:54:eb:93:ef:cd:5b:21:a8:07:fd:1d:22:5d:de:ff:
         4e:b0:32:2c:67:50:03:ad:19:af:49:57:cb:87:88:0f:91:64:
         f0:68:0d:df:e0:9a:04:6e:81:56:da:5c:2d:26:6f:7b:35:73:
         96:55:d9:a3:85:0a:b9:23:55:f4:43:3b:a5:af:7a:79:48:91:
         67:cf:d2:c7:1b:43:d1:14:65:c4:16:50:75:03:8d:3b:6a:ff:
         c9:65:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:23 2024 by rpki-client on console-fra.rpki-client.org