Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/6DGQo9Dcg-k9knG94y8sPme3tKI.roa
File:                     6DGQo9Dcg-k9knG94y8sPme3tKI.roa (raw, json)
Hash identifier:          vu9tUMlrCT6lt64gz9TrWHtLnf0R0QoqZF9+PkAiles=
Subject key identifier:   E8:31:90:A3:D0:DC:83:E9:3D:92:71:BD:E3:2F:2C:3E:67:B7:B4:A2
Certificate issuer:       /CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
Certificate serial:       01856FA70B94DE01987967A23CDCC6B37717
Authority key identifier: 1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/6DGQo9Dcg-k9knG94y8sPme3tKI.roa
Signing time:             Sun 01 Jan 2023 23:24:56 +0000
ROA not before:           Sun 01 Jan 2023 23:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        80.71.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a7:0b:94:de:01:98:79:67:a2:3c:dc:c6:b3:77:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df38ecae04225ff347811b1d37fdb2a3f6e472b
        Validity
            Not Before: Jan  1 23:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e83190a3d0dc83e93d9271bde32f2c3e67b7b4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:8a:f1:26:fe:d7:a8:76:fe:ad:a6:53:a0:
                    c0:aa:09:f3:8d:4e:79:a4:08:57:cb:30:ec:a4:4c:
                    fb:e1:84:35:6f:82:79:a2:b0:dc:65:ac:28:1d:0d:
                    cc:ea:67:cb:e5:04:3c:6a:cb:3c:19:1f:37:1a:d3:
                    0b:a8:22:ec:56:b5:65:db:57:a3:49:ec:e0:2c:7d:
                    cd:6e:12:8d:b7:6f:cc:50:71:86:ad:a8:d0:ca:11:
                    a7:2d:2a:b9:58:dc:25:27:ca:0c:8a:9f:02:85:2f:
                    f6:8d:f0:c5:98:9d:36:a9:35:d8:78:28:f7:b4:48:
                    23:ff:13:a6:9e:25:85:fa:b4:39:5f:60:79:2d:3e:
                    56:4b:6b:7b:57:bf:27:fa:da:b2:b1:23:17:d7:09:
                    82:e5:76:b9:a8:1d:d5:76:94:66:09:3b:c0:09:01:
                    fa:44:9c:96:62:9f:91:27:8e:27:84:88:e8:e5:83:
                    f2:9b:99:de:67:28:3b:3c:99:f5:1e:84:9f:ea:10:
                    d7:6b:8a:d6:89:9f:1b:a6:59:a8:8e:f0:3f:eb:be:
                    8c:ef:38:03:52:40:eb:59:f8:84:eb:8b:50:25:b4:
                    67:8a:01:fa:51:77:7e:d8:d8:fd:9a:12:1c:f1:a0:
                    65:b1:6a:1f:e2:2b:2a:3c:1a:73:de:ca:af:6b:81:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:31:90:A3:D0:DC:83:E9:3D:92:71:BD:E3:2F:2C:3E:67:B7:B4:A2
            X509v3 Authority Key Identifier:
                keyid:1D:F3:8E:CA:E0:42:25:FF:34:78:11:B1:D3:7F:DB:2A:3F:6E:47:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfOOyuBCJf80eBGx03_bKj9uRys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/6DGQo9Dcg-k9knG94y8sPme3tKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5258bf-ea0d-42a4-828e-ea93c2cb239c/1/HfOOyuBCJf80eBGx03_bKj9uRys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:1c:e0:2f:69:aa:0c:dd:42:e3:66:f8:50:f6:1a:be:22:
         9a:da:07:14:4b:2a:b7:0b:e9:f9:76:2c:49:ac:5e:86:e2:c8:
         fa:23:5b:86:22:a0:1a:95:6c:7c:ce:69:2a:48:55:87:30:b9:
         a7:86:db:73:d5:a6:83:ac:b8:6c:5b:a7:64:ed:5f:ea:d8:03:
         a0:87:57:aa:3b:6f:93:43:dd:36:de:41:ce:84:4c:21:af:e1:
         5b:0f:7e:ad:7a:bf:25:d3:fa:d6:e2:30:eb:f8:6f:f8:a7:32:
         41:d3:c1:91:a5:ef:3c:a6:0a:f5:95:57:2b:27:78:c9:f9:53:
         60:52:db:01:9e:2f:4c:d5:3b:df:58:d8:c8:56:30:43:1f:2a:
         91:5d:0e:eb:61:ae:cc:2d:a8:e0:5a:cf:f9:64:0e:b1:18:9f:
         b1:79:10:99:0d:d9:d9:a3:5b:de:5e:e8:6b:09:0d:ff:5e:6c:
         a2:a3:8d:bc:4b:43:62:03:81:ac:88:e1:8d:72:60:5a:b7:a9:
         43:47:8b:21:b7:d1:b4:1e:39:ec:9d:86:99:2c:f6:84:cd:cd:
         b4:dc:51:aa:03:c6:70:4c:7d:21:bf:38:ff:72:29:dd:e1:0d:
         18:8d:d9:05:05:7a:57:a8:d9:fe:d6:3c:79:b6:ce:0f:1e:d8:
         1d:4c:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-fra.rpki-client.org