Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/g0hTQI0Ouejn8Q3iWL4ZPVliFek.roa
File:                     g0hTQI0Ouejn8Q3iWL4ZPVliFek.roa (raw, json)
Hash identifier:          MuAr9JNgQBr2p6KpYh4UfdevOyhxUALZMgIdMwXMUZY=
Subject key identifier:   83:48:53:40:8D:0E:B9:E8:E7:F1:0D:E2:58:BE:19:3D:59:62:15:E9
Certificate issuer:       /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial:       01919061EDB4568BA30BFAA8B3EB4633EC6B
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/g0hTQI0Ouejn8Q3iWL4ZPVliFek.roa
Signing time:             Mon 26 Aug 2024 20:30:22 +0000
ROA not before:           Mon 26 Aug 2024 20:30:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212177
IP address blocks:        80.75.219.0/24 maxlen: 24
                          2a03:f980::/29 maxlen: 29
Validation:               Failed, certificate revoked on Mon 07 Oct 2024 16:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:90:61:ed:b4:56:8b:a3:0b:fa:a8:b3:eb:46:33:ec:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
        Validity
            Not Before: Aug 26 20:30:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=834853408d0eb9e8e7f10de258be193d596215e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:80:5a:1f:29:9a:67:89:ff:82:9d:b9:f8:ad:
                    62:4d:31:1e:4c:bb:c2:0c:ab:15:a5:88:f4:f5:1c:
                    50:50:f9:50:01:94:21:b8:f9:3a:97:91:9f:41:9b:
                    9f:e6:cc:29:a6:86:0a:b0:06:58:85:8c:6e:de:c3:
                    34:7f:14:02:dc:91:98:ff:40:ae:58:20:2c:f8:b0:
                    c0:ac:f1:b8:36:b3:94:e2:e2:36:9d:85:df:eb:d4:
                    11:18:bd:28:fc:ff:0c:f4:a9:13:73:aa:55:9d:b1:
                    c6:3a:4b:1d:7d:25:d2:51:39:8a:6e:bc:fa:b0:92:
                    b2:83:b9:15:44:4f:c9:2f:33:b6:f0:5c:97:d5:30:
                    6c:41:0d:44:b9:a7:e3:b8:dd:ee:4b:55:26:71:ac:
                    14:26:01:d1:3a:db:5e:fb:e5:4d:c5:93:8a:c4:91:
                    b5:14:fc:37:26:b3:35:d0:5b:b8:47:f1:75:f2:2d:
                    72:a4:82:fc:ea:cc:4e:48:02:b7:ca:be:86:61:81:
                    9c:40:25:02:11:5c:e4:97:90:2a:6b:2b:41:ad:ee:
                    a0:ec:34:c7:ac:8c:02:b8:60:87:01:69:b8:d4:67:
                    db:05:95:08:2e:6d:d5:cc:b6:38:a8:a0:df:ad:d3:
                    f0:a5:ee:7f:42:2e:1e:13:a5:2f:5a:eb:8d:c6:ce:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:53:40:8D:0E:B9:E8:E7:F1:0D:E2:58:BE:19:3D:59:62:15:E9
            X509v3 Authority Key Identifier:
                keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/g0hTQI0Ouejn8Q3iWL4ZPVliFek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.219.0/24
                IPv6:
                  2a03:f980::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:24:26:e3:8c:30:12:e6:36:0c:c4:3b:aa:bd:fa:1a:21:
         e9:c5:c4:23:18:50:77:3c:25:77:d4:e1:a1:44:0e:4e:af:c2:
         10:83:43:44:cc:d6:5a:79:d0:b7:00:6d:a1:3e:65:37:e0:6f:
         58:11:08:4e:46:4a:d2:8d:ea:88:30:18:54:8f:23:2a:2e:c2:
         31:01:b5:c4:bc:cd:ad:b0:f4:14:18:a9:e3:6f:7a:7d:f4:9e:
         2d:18:ac:bf:e9:5f:02:3e:78:df:15:78:7b:f5:97:ef:2c:04:
         2e:1d:65:80:f7:65:88:c2:7a:92:73:12:a6:88:2f:64:ec:5d:
         5d:97:70:46:72:68:c4:72:37:bb:50:5b:19:70:72:67:e3:fa:
         ca:e4:da:33:4a:bd:57:28:6c:56:00:46:33:3e:ef:e2:5a:2e:
         38:82:bd:e4:9a:0d:e3:17:7a:c8:6a:63:8c:76:c4:2e:29:64:
         9b:3d:96:a0:13:9f:38:91:4e:80:94:65:01:e6:8d:33:db:69:
         38:aa:b6:b2:17:cd:ed:24:98:b3:b1:47:9a:48:dc:42:79:36:
         b8:56:41:06:49:95:32:85:b8:04:d7:7f:08:ff:5c:b1:34:22:
         02:33:ae:48:50:83:84:f8:2f:6f:7b:95:2e:6f:b3:a9:18:dd:
         a3:bd:ad:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZGQYe20VoujC/qos+tGM+xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3
NGJhMjgwHhcNMjQwODI2MjAzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQ4NTM0MDhkMGViOWU4ZTdmMTBkZTI1OGJlMTkzZDU5NjIxNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4BaHymaZ4n/gp25+K1iTTEeTLvC
DKsVpYj09RxQUPlQAZQhuPk6l5GfQZuf5swppoYKsAZYhYxu3sM0fxQC3JGY/0Cu
WCAs+LDArPG4NrOU4uI2nYXf69QRGL0o/P8M9KkTc6pVnbHGOksdfSXSUTmKbrz6
sJKyg7kVRE/JLzO28FyX1TBsQQ1EuafjuN3uS1UmcawUJgHROtte++VNxZOKxJG1
FPw3JrM10Fu4R/F18i1ypIL86sxOSAK3yr6GYYGcQCUCEVzkl5AqaytBre6g7DTH
rIwCuGCHAWm41GfbBZUILm3VzLY4qKDfrdPwpe5/Qi4eE6UvWuuNxs4H4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFINIU0CNDrno5/EN4li+GT1ZYhXpMB8GA1UdIwQY
MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt
YjIxNzhlZjJmODJmLzEvZzBoVFFJME91ZWpuOFEzaVdMNFpQVmxpRmVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm
LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUEvbMA0E
AgACMAcDBQMqA/mAMA0GCSqGSIb3DQEBCwUAA4IBAQBYHiQm44wwEuY2DMQ7qr36
GiHpxcQjGFB3PCV31OGhRA5Or8IQg0NEzNZaedC3AG2hPmU34G9YEQhORkrSjeqI
MBhUjyMqLsIxAbXEvM2tsPQUGKnjb3p99J4tGKy/6V8CPnjfFXh79ZfvLAQuHWWA
92WIwnqScxKmiC9k7F1dl3BGcmjEcje7UFsZcHJn4/rK5NozSr1XKGxWAEYzPu/i
Wi44gr3kmg3jF3rIamOMdsQuKWSbPZagE584kU6AlGUB5o0z22k4qrayF83tJJiz
sUeaSNxCeTa4VkEGSZUyhbgE138I/1yxNCICM65IUIOE+C9ve5Uub7OpGN2jva1I
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:51 2025 by rpki-client