Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ved2kEGfLx_H46ViAdNFebRpN6Y.roa
File:                     Ved2kEGfLx_H46ViAdNFebRpN6Y.roa (raw, json)
Hash identifier:          1MXvMA38iTAapNp9r9eDsxWPvIViUgnkwXgowmJx4IM=
Subject key identifier:   55:E7:76:90:41:9F:2F:1F:C7:E3:A5:62:01:D3:45:79:B4:69:37:A6
Certificate issuer:       /CN=ecba774ba82fb0427f766e783e770f4bd96416f9
Certificate serial:       018CC56E305F15D6534C5EFA4F56A3F71985
Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ved2kEGfLx_H46ViAdNFebRpN6Y.roa
Signing time:             Mon 01 Jan 2024 14:29:41 +0000
ROA not before:           Mon 01 Jan 2024 14:29:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51007
IP address blocks:        80.84.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 10:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:30:5f:15:d6:53:4c:5e:fa:4f:56:a3:f7:19:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9
        Validity
            Not Before: Jan  1 14:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=55e77690419f2f1fc7e3a56201d34579b46937a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c3:db:6d:2b:f5:d0:40:fd:74:55:5c:06:57:
                    7b:f0:43:39:47:de:5d:20:e0:ff:12:51:57:20:ee:
                    0e:44:06:43:98:3b:fb:f7:e4:99:c1:42:a1:a4:25:
                    a3:a8:42:6c:b6:20:cf:4e:1f:ba:54:e4:fe:a6:e9:
                    1a:6e:66:0f:98:20:ae:8f:4e:f6:84:aa:f9:00:e4:
                    d8:0d:90:51:0b:1c:92:a7:c2:e2:92:b7:b8:9d:c7:
                    ee:2e:0a:51:80:49:05:bc:7c:4f:4b:a8:ee:0f:64:
                    9d:d4:d9:39:7e:9e:e6:08:1f:ea:3e:60:bf:31:d7:
                    2a:74:62:2d:fb:53:6d:b0:88:78:83:cf:0f:99:4f:
                    36:32:d4:82:eb:57:cd:3d:8c:9c:8e:e4:fd:1c:c8:
                    ca:46:01:e8:a0:86:ef:86:e3:f8:77:cd:5b:ec:96:
                    8f:28:6f:a8:b7:6f:2a:c6:9a:d1:6a:96:35:99:d3:
                    b8:a8:32:a1:e3:4c:12:67:82:39:48:21:0b:9f:3c:
                    1d:c6:89:e4:c0:b5:ad:b4:81:91:55:e4:80:3e:28:
                    68:e3:f9:b5:e1:9a:e5:94:e2:60:15:54:88:6c:e9:
                    dd:1b:1a:00:5b:1d:33:fc:4b:db:5d:a9:19:cb:c0:
                    32:c7:cb:d9:ee:83:9d:5b:9f:aa:bd:88:9b:17:fd:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:76:90:41:9F:2F:1F:C7:E3:A5:62:01:D3:45:79:B4:69:37:A6
            X509v3 Authority Key Identifier:
                keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/Ved2kEGfLx_H46ViAdNFebRpN6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.84.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:3c:62:84:e5:d6:5d:ee:cf:2a:d5:e0:bf:1f:a5:f6:e2:
         40:d6:27:c8:4d:63:5d:10:eb:d2:23:e5:c7:1a:c9:46:ad:a9:
         5e:71:94:02:6a:f0:07:fe:ff:0d:74:6b:7e:e0:99:25:d4:24:
         c3:71:b4:f0:50:7e:9b:c0:f5:20:b0:17:b3:d8:d2:98:e1:7f:
         5d:60:78:d3:54:56:40:9c:3e:fa:cc:9a:99:93:da:2b:fa:02:
         f9:4c:af:8a:fa:54:90:8a:ea:c2:df:4e:a6:d0:13:0f:46:e1:
         17:73:12:64:61:90:b3:ab:2c:56:b9:00:e6:a2:ed:b9:56:2d:
         de:3b:f1:aa:0d:18:d6:d4:e3:ef:f1:73:51:a3:76:54:ac:e7:
         d3:99:d6:76:53:43:21:da:0b:a2:a1:a4:ab:bb:e8:39:14:13:
         d7:fa:ac:d9:00:66:bd:78:18:cd:c0:c0:c7:64:2a:2a:81:ea:
         ed:95:f3:61:c3:f8:04:ba:e7:d2:ef:7a:d3:87:66:fd:c3:ee:
         54:a2:6f:ba:a6:55:77:0d:61:69:ef:ed:e0:69:d9:5d:c1:64:
         f0:45:e5:45:24:c5:44:ab:8d:0d:78:2f:33:07:c2:f0:e4:f3:
         1a:0f:a3:d3:47:30:d6:cf:a1:14:eb:da:fa:b2:98:44:51:db:
         fd:34:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:37 2024 by rpki-client on console-ams.rpki-client.org