Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/EEnJGRuG51fvbw1me_HFpMo-gE8.roa
File:                     EEnJGRuG51fvbw1me_HFpMo-gE8.roa (raw, json)
Hash identifier:          lHEt0k9DV7dVonNeEUFsagNomwRhy361atgW11t7frU=
Subject key identifier:   10:49:C9:19:1B:86:E7:57:EF:6F:0D:66:7B:F1:C5:A4:CA:3E:80:4F
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       018F48019E9CC8E16E41228F216290CE118B
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/EEnJGRuG51fvbw1me_HFpMo-gE8.roa
Signing time:             Sun 05 May 2024 09:06:56 +0000
ROA not before:           Sun 05 May 2024 09:06:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     52164
IP address blocks:        80.244.6.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 02 Jan 2025 05:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:48:01:9e:9c:c8:e1:6e:41:22:8f:21:62:90:ce:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: May  5 09:06:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1049c9191b86e757ef6f0d667bf1c5a4ca3e804f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:f4:40:e9:2a:c4:d2:8d:93:9a:53:f8:77:
                    db:d7:9f:a4:79:72:3e:80:57:dc:61:26:f1:af:ec:
                    52:17:0d:1d:74:43:5b:cb:f3:5f:c3:39:e1:a0:c1:
                    35:be:52:58:0f:b3:07:99:64:6b:b3:2a:a1:3f:4e:
                    f1:d6:d8:ce:2e:39:2f:de:4c:57:e7:28:5c:e0:89:
                    8a:59:56:cc:56:a3:6b:2a:93:fe:46:6f:b9:7e:81:
                    2e:a4:f3:d9:7e:24:2d:af:54:45:81:b4:3a:4b:97:
                    6f:44:27:f7:75:0f:ac:9c:d5:8d:a3:a2:fe:c8:c9:
                    1d:1c:d3:38:63:3f:f5:b2:1c:fd:15:02:5e:f6:92:
                    56:d5:e8:8b:45:12:3d:8a:3d:5e:e5:56:3b:22:a0:
                    bb:d7:20:fd:22:24:c5:56:b7:d6:5f:96:54:9c:f9:
                    82:16:ba:07:7c:62:d3:c0:80:b8:7b:66:69:ef:d1:
                    31:8b:8c:8b:f9:f7:d4:06:6f:38:a6:b2:f6:85:bf:
                    24:5c:57:81:aa:a6:bf:88:bc:98:76:7f:64:84:08:
                    75:8e:ef:33:9b:17:e8:a9:fb:44:34:84:40:4f:fe:
                    a7:d0:f1:e0:5e:05:14:30:1f:e5:04:35:ad:e8:df:
                    5e:b1:40:24:b9:ca:36:76:a7:f0:24:45:26:54:bd:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:C9:19:1B:86:E7:57:EF:6F:0D:66:7B:F1:C5:A4:CA:3E:80:4F
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/EEnJGRuG51fvbw1me_HFpMo-gE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:c9:60:d3:88:84:b3:8d:8d:74:32:64:9a:15:86:a6:6c:
         1a:7d:f1:85:8a:96:a5:ed:76:ab:19:15:93:b0:d4:53:1a:f1:
         14:11:47:bb:0e:94:f4:24:0c:a7:f9:c6:c4:f1:0a:e6:14:ab:
         f3:a8:13:c3:0b:50:3b:e6:1c:ca:70:4f:71:7e:4a:41:69:d9:
         1a:0d:b4:ff:75:fd:38:0c:19:d9:12:39:70:e8:c0:b8:e1:76:
         ac:4b:bd:fc:6d:12:63:36:a4:7c:7f:63:be:9e:e4:35:e5:b0:
         32:89:1d:c7:c8:89:5a:27:7a:60:ee:65:9f:6f:8d:4a:b9:ae:
         17:b4:fa:f2:dc:c1:79:b1:83:b1:b2:08:fa:e2:60:1c:8f:fb:
         a1:1c:52:8d:f2:04:60:34:c2:50:cf:5c:f1:ce:c5:e9:c2:a3:
         ed:e7:cd:93:35:5e:fa:44:26:a8:19:76:ce:a1:32:e3:21:4f:
         2b:69:d8:72:65:50:e7:cd:db:bc:93:3e:77:a7:96:08:b7:3f:
         ce:d5:e5:62:b9:44:f1:88:e0:5d:36:d8:e2:a5:7b:50:05:f5:
         85:05:54:6c:21:0e:ff:2b:3f:66:f0:42:ec:d8:05:b7:80:f6:
         28:b1:be:00:07:2f:33:8a:c8:bd:4c:2f:b3:7b:04:1f:b6:af:
         90:1e:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:16:08 2025 by rpki-client