Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/FCq9SeY--Lf0VjpFnO2VgS6GTT4.roa
File:                     FCq9SeY--Lf0VjpFnO2VgS6GTT4.roa (raw, json)
Hash identifier:          4Z6SO0JPerhin0tjxV0ZGS/YYNaDV6DV2H0uOr3Z/L0=
Subject key identifier:   14:2A:BD:49:E6:3E:F8:B7:F4:56:3A:45:9C:ED:95:81:2E:86:4D:3E
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       0185A01FD66B2A35AF5812BD1E65F6023F91
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/FCq9SeY--Lf0VjpFnO2VgS6GTT4.roa
Signing time:             Wed 11 Jan 2023 09:18:39 +0000
ROA not before:           Wed 11 Jan 2023 09:18:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212228
IP address blocks:        80.77.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:1f:d6:6b:2a:35:af:58:12:bd:1e:65:f6:02:3f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan 11 09:18:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=142abd49e63ef8b7f4563a459ced95812e864d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:a0:7f:68:34:2c:96:94:64:1b:70:20:ce:
                    ca:7e:ba:cf:18:c4:1d:d2:b3:4b:2a:d4:01:64:74:
                    8a:d1:06:05:a9:7a:9a:02:0c:ad:41:ad:71:f6:ea:
                    72:ce:ea:d5:bc:e5:42:d1:7c:01:41:c9:9c:37:ce:
                    a2:80:6f:5c:00:66:1a:7b:03:35:8d:2d:f2:1b:be:
                    d6:fa:ed:5f:aa:d6:98:40:03:4d:8b:64:25:69:55:
                    fd:89:30:46:16:a5:70:35:03:e6:bc:b0:c2:3d:16:
                    f1:48:80:13:c3:99:6e:5b:1c:86:57:59:bc:c2:4c:
                    2a:c6:46:f9:86:85:a5:bc:f6:db:0f:a6:2d:91:f9:
                    70:d3:cb:52:7c:06:c5:ae:9f:1e:6f:43:51:cc:47:
                    14:9b:2b:17:87:47:19:01:98:c0:20:69:90:03:31:
                    21:97:1c:18:d7:61:96:39:e2:29:13:4f:29:33:63:
                    e1:ae:bb:a7:58:a3:b6:72:ee:6a:37:df:b7:a3:47:
                    c6:dd:f0:8e:34:92:87:c7:68:4c:79:2a:02:b4:10:
                    bb:ef:cb:14:11:00:8f:dd:31:ff:57:1d:4d:17:30:
                    d7:33:bc:28:15:78:70:9a:e7:8c:a9:fb:2a:96:3d:
                    5b:ce:cd:7d:6a:3f:a9:c7:a0:27:45:3f:f9:6b:d1:
                    6e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:BD:49:E6:3E:F8:B7:F4:56:3A:45:9C:ED:95:81:2E:86:4D:3E
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/FCq9SeY--Lf0VjpFnO2VgS6GTT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.77.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:60:92:57:77:eb:b0:63:da:37:db:41:58:a1:7d:3a:5e:9e:
         60:2c:95:57:d4:e5:4a:34:2e:14:f9:e4:30:a3:49:20:7c:ae:
         41:ea:41:be:97:b3:df:8b:18:02:d0:37:6c:c2:e0:eb:9d:8a:
         8c:cf:f2:92:3b:b9:7c:69:6a:69:15:11:e1:f1:c4:3e:8c:a6:
         c1:5f:5e:ed:30:73:36:b0:fb:48:fa:66:ca:c2:01:c1:cb:59:
         55:73:45:42:45:54:80:1c:1f:cc:92:9f:d2:93:f8:6d:3f:5c:
         29:07:54:52:4c:66:b2:8d:6a:e1:87:9a:60:ce:83:b6:2f:e9:
         73:08:16:6d:f4:d1:7a:1a:47:25:b9:86:b9:6c:bc:90:68:79:
         ab:fc:c9:d9:06:61:c5:6e:d3:f7:b4:ef:6e:21:a3:7e:47:a9:
         b3:b5:08:7f:3b:15:1d:57:af:26:fe:5a:21:b0:6a:92:30:e4:
         e4:e9:27:d8:37:9d:35:2a:5e:d2:42:fa:89:85:12:e0:7e:aa:
         05:bf:81:2f:a4:ed:fa:df:97:32:51:24:5a:b3:1a:83:7e:75:
         6f:98:58:54:72:22:2a:73:d9:ef:53:45:e9:c7:43:ed:fa:53:
         ad:42:01:b6:a9:a3:54:6b:90:b3:a9:2a:c6:9c:ed:24:08:a1:
         1e:d0:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org