Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ozM8bynj6sbdRahfazAlKlRJb1w.roa
File:                     ozM8bynj6sbdRahfazAlKlRJb1w.roa (raw, json)
Hash identifier:          6wAcU+0rk6/9ETqEAq6cE381D5Q3ImVc0tOnyll96QY=
Subject key identifier:   A3:33:3C:6F:29:E3:EA:C6:DD:45:A8:5F:6B:30:25:2A:54:49:6F:5C
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       0187F6983EB956BF6FD46ACB34306A1B02CE
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ozM8bynj6sbdRahfazAlKlRJb1w.roa
Signing time:             Sun 07 May 2023 14:23:05 +0000
ROA not before:           Sun 07 May 2023 14:23:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211585
IP address blocks:        80.93.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 22 May 2023 10:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f6:98:3e:b9:56:bf:6f:d4:6a:cb:34:30:6a:1b:02:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: May  7 14:23:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3333c6f29e3eac6dd45a85f6b30252a54496f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:1f:48:3d:0c:80:07:d1:57:c3:45:e4:fb:
                    96:6e:3e:d2:b2:7e:3c:8c:36:55:c3:07:6d:bc:d0:
                    11:d7:a5:7f:54:d1:83:73:d1:d5:b7:ce:c2:69:03:
                    e9:f0:73:47:d3:89:e7:10:1b:e2:41:f4:53:96:4f:
                    70:a2:bc:b9:80:a9:f9:2f:78:d0:b5:ae:ff:72:0f:
                    37:15:61:b9:2a:1d:96:1e:c1:d3:d5:66:cc:eb:67:
                    63:5c:5a:09:36:b3:c0:7f:cb:5d:09:9d:77:32:0b:
                    10:74:da:c9:30:00:37:25:0d:95:2e:af:47:8b:e9:
                    21:54:61:34:50:50:90:3d:f7:fa:29:62:f6:7c:e3:
                    61:bd:b4:7f:90:ad:05:1d:61:ec:83:97:5d:c0:a6:
                    64:c6:c8:40:f3:ae:c9:1f:ca:7c:21:c2:43:83:ca:
                    46:df:67:e4:1b:50:bc:0b:22:dc:8c:10:1e:3e:db:
                    bf:b0:e2:2c:4b:18:8f:20:c5:78:4c:a6:b7:a6:ad:
                    ba:b9:a9:07:7e:83:ee:67:21:45:54:d4:79:17:e3:
                    8f:5e:42:e8:66:7b:21:ac:77:57:70:35:f8:0c:91:
                    10:8c:2a:58:9b:4e:0b:a8:b4:e0:d6:7a:bb:7e:1b:
                    12:f7:7e:55:33:31:5d:36:87:80:a3:54:48:d5:4c:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:33:3C:6F:29:E3:EA:C6:DD:45:A8:5F:6B:30:25:2A:54:49:6F:5C
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/ozM8bynj6sbdRahfazAlKlRJb1w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.93.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:ba:99:58:f2:72:85:a9:46:06:40:4d:80:dd:94:b4:bc:
         ac:da:8a:7c:44:e1:85:bc:1c:75:e1:a6:0e:a1:91:b6:ba:b3:
         c6:61:f5:2d:9d:e8:6d:26:bb:9c:2a:73:e0:17:06:a0:b6:c6:
         64:b4:4c:9f:ea:71:37:3d:04:1c:d0:0f:c8:95:2f:52:87:fd:
         e2:5c:81:1a:b5:6f:c9:f3:51:65:6b:18:04:00:2a:d0:92:ac:
         93:f5:e6:d5:4e:6e:4b:23:4a:27:4d:86:41:37:85:d8:4e:f6:
         23:3f:55:4c:a9:0f:b7:0c:c8:50:93:7b:21:7a:56:52:99:d4:
         8a:08:4b:d7:b6:35:a1:23:8b:d0:f8:39:8e:20:ea:cf:b3:9c:
         5a:7b:51:75:e1:0e:46:16:9c:be:fa:d1:54:8e:ca:f0:a1:8f:
         bc:15:9b:d6:4f:3f:54:0d:c7:97:c2:9a:10:97:29:4f:9c:92:
         5a:de:28:bc:89:a6:35:f9:26:6d:c6:66:80:47:4d:24:27:90:
         2e:0d:81:a2:9d:5c:01:dd:f2:b5:42:20:45:64:19:b4:19:02:
         47:80:be:7e:bb:76:1d:6a:54:38:96:7e:e3:c3:8e:b4:fe:0b:
         ee:4c:72:37:38:aa:5a:62:32:33:e8:d6:b2:b9:c5:5e:18:ce:
         20:74:e0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org