Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/G46_9AdSSDt3NU6C8h5niZAzLu4.roa
File:                     G46_9AdSSDt3NU6C8h5niZAzLu4.roa (raw, json)
Hash identifier:          NZCefoyg/umIhIRC1RUHvxiZUbASoEn/4aouba0unMU=
Subject key identifier:   1B:8E:BF:F4:07:52:48:3B:77:35:4E:82:F2:1E:67:89:90:33:2E:EE
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01856F14D31B67B5310F6804EF53F9AB2D2B
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/G46_9AdSSDt3NU6C8h5niZAzLu4.roa
Signing time:             Sun 01 Jan 2023 20:45:13 +0000
ROA not before:           Sun 01 Jan 2023 20:45:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41820
IP address blocks:        213.109.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 05 Jan 2023 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:d3:1b:67:b5:31:0f:68:04:ef:53:f9:ab:2d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Jan  1 20:45:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b8ebff40752483b77354e82f21e678990332eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:56:01:aa:d1:69:8e:24:42:88:6a:f4:bb:
                    65:f6:dd:75:ae:99:2c:6e:78:b4:65:b1:4c:09:c1:
                    a4:1c:d4:d3:25:4c:89:cb:3d:72:47:e7:40:5a:7f:
                    ef:ce:75:e6:fc:6e:b9:a3:dd:75:e6:9f:c9:92:1a:
                    d7:3b:07:d7:5c:af:35:53:11:be:4d:08:bc:17:5f:
                    7a:15:24:d3:01:fe:3b:38:46:45:c2:0d:e3:03:d9:
                    bc:4b:6e:93:69:c0:25:54:ea:16:57:4f:1e:43:e4:
                    7e:4e:4e:77:db:23:61:86:b6:4b:72:5a:1b:39:69:
                    01:99:09:ea:46:ee:ce:10:67:a1:a8:0a:e6:00:79:
                    05:19:d9:4b:27:2d:e1:d7:cf:53:81:4f:52:87:79:
                    39:2e:05:0b:e2:84:70:8c:ac:bb:8b:0e:76:99:6f:
                    99:30:d9:2b:7d:79:70:e8:57:a3:db:51:af:98:6a:
                    c8:6e:db:be:94:8b:92:7c:6c:b8:81:ba:66:34:3d:
                    16:1b:fb:02:2c:f7:a5:90:63:c5:46:f2:22:70:ea:
                    56:8b:f3:0f:4a:a9:65:98:bf:2f:84:7c:3a:eb:9b:
                    ac:31:34:d1:0d:72:ca:35:11:0e:4a:19:6e:31:b7:
                    71:c5:ef:56:67:86:a4:4c:59:a0:06:a2:51:dc:1b:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8E:BF:F4:07:52:48:3B:77:35:4E:82:F2:1E:67:89:90:33:2E:EE
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/G46_9AdSSDt3NU6C8h5niZAzLu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.109.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:bf:42:bf:3b:26:44:28:ad:7a:f8:ac:18:30:00:a5:d5:
         b4:31:23:bf:02:72:9e:fb:1a:9b:85:54:76:2b:40:b3:48:84:
         2f:10:dc:29:9e:64:0b:7d:12:c3:6c:02:95:e1:f6:67:b2:18:
         36:07:15:8c:10:66:ba:e4:5b:f9:0b:e2:f6:d7:a7:c2:a2:18:
         7b:19:ad:6f:7c:c2:7b:23:50:65:2a:9e:f6:75:e6:99:d8:b8:
         3f:ba:26:81:2d:2e:1c:5d:c4:75:21:27:a8:ab:4b:f4:ae:be:
         e7:ed:60:a4:d6:db:53:d8:94:51:5b:f5:b5:5b:c8:f2:f6:13:
         f9:3f:9f:ac:33:05:71:c9:42:e7:f6:27:ad:43:55:69:2b:35:
         ac:29:63:6e:cb:17:70:47:64:d3:7a:a9:28:98:05:7e:bd:00:
         e8:de:30:95:46:31:0c:1f:9d:f2:f2:46:0b:c0:ef:b7:f7:18:
         a3:e3:06:9f:c1:80:b9:ce:ed:a6:fa:2a:54:54:0c:a7:e0:a9:
         fe:ea:00:7b:12:c4:57:91:eb:fc:8d:b5:32:ca:a5:6a:1c:86:
         1e:87:48:03:62:6c:a0:4f:e0:a6:60:b3:8d:9d:02:c8:d7:6e:
         21:08:98:b4:48:c5:30:b5:94:00:9d:c7:d5:93:20:a5:0b:c6:
         62:0f:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:58 2024 by rpki-client on console-ams.rpki-client.org