Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/EBY3pHTMigy36D4uR8lX9g5J9uc.roa
File:                     EBY3pHTMigy36D4uR8lX9g5J9uc.roa (raw, json)
Hash identifier:          PCjFHTmGLyundwb1q344ITkKHdFykSP2hV4oOQsTXHY=
Subject key identifier:   10:16:37:A4:74:CC:8A:0C:B7:E8:3E:2E:47:C9:57:F6:0E:49:F6:E7
Certificate issuer:       /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial:       018A431B69DFD1A3F69133955D42F52CB6D0
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/EBY3pHTMigy36D4uR8lX9g5J9uc.roa
Signing time:             Tue 29 Aug 2023 21:03:04 +0000
ROA not before:           Tue 29 Aug 2023 21:03:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43437
IP address blocks:        79.171.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 08 Sep 2023 07:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:43:1b:69:df:d1:a3:f6:91:33:95:5d:42:f5:2c:b6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
        Validity
            Not Before: Aug 29 21:03:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=101637a474cc8a0cb7e83e2e47c957f60e49f6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:fc:39:8e:6c:e0:37:5b:a7:73:f5:ea:ce:
                    d5:e5:58:03:74:47:d1:52:6e:d4:2b:07:a4:21:c9:
                    4f:61:03:cd:38:c1:cc:88:94:4e:5f:28:a6:b4:80:
                    ad:b7:43:4e:73:45:51:19:23:87:b7:91:5d:9b:b9:
                    cd:7f:c6:9a:48:2d:72:93:5f:e0:64:46:80:76:9a:
                    f5:81:cf:c0:7f:7a:f9:54:34:70:45:34:95:89:33:
                    c9:89:a8:12:a0:9f:30:2a:db:2e:44:f6:fc:6d:40:
                    d0:ba:bf:b6:41:a5:d4:eb:75:a1:60:a9:b6:f7:49:
                    66:36:ae:05:21:8a:43:e4:40:97:1d:14:39:53:06:
                    61:37:fe:5e:35:a3:5a:40:a9:cf:10:39:c2:05:2f:
                    75:8e:2e:f9:1a:ec:db:41:7c:a6:0b:1d:cc:d2:09:
                    0c:1f:e1:dc:be:6b:aa:ab:fa:bd:c0:15:b6:12:98:
                    fc:09:12:bc:93:35:54:36:13:7d:9b:47:af:04:e8:
                    54:78:93:54:9a:37:3f:32:b9:1c:9d:36:d6:47:87:
                    51:ba:c9:8d:49:67:a3:01:ab:a2:3a:27:0b:e4:44:
                    6b:b2:d6:7b:a9:a6:de:dc:27:c1:75:81:a2:99:29:
                    fc:d2:e5:e1:78:14:46:6d:88:82:fe:79:77:b3:b6:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:16:37:A4:74:CC:8A:0C:B7:E8:3E:2E:47:C9:57:F6:0E:49:F6:E7
            X509v3 Authority Key Identifier:
                keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/EBY3pHTMigy36D4uR8lX9g5J9uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.171.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:23:dd:c4:bb:90:09:96:56:63:2e:b3:d5:8d:a7:98:2f:6c:
         40:d2:64:8c:44:12:c7:81:18:c5:f8:ff:cb:4e:92:e4:5c:9c:
         56:ae:f7:ea:9d:bd:36:33:d8:26:bf:b9:3b:f5:9b:64:f4:ea:
         89:cc:c9:ae:58:7a:f6:b0:7f:b1:53:be:78:0f:c6:05:b0:1d:
         97:b8:49:2b:76:51:77:97:f1:75:76:97:fa:06:77:77:fd:a4:
         ef:7a:13:4f:89:26:f5:8e:31:0f:d7:b6:fa:66:e6:2f:98:1c:
         e7:a1:fe:c7:21:27:b7:17:67:62:5d:cf:1a:e4:0a:37:73:fa:
         8c:0f:b6:5d:0a:15:00:26:9b:f0:54:c1:58:31:b5:78:87:f9:
         c6:e7:0f:f9:50:41:e2:b3:dd:6e:dc:4a:cd:92:ee:22:7b:22:
         25:38:c5:d4:c9:85:09:cc:08:b6:d0:79:14:06:42:09:c3:4c:
         9b:a0:a8:3b:0d:54:56:e6:f6:dd:96:2a:8c:27:65:26:62:e9:
         d4:00:97:80:d4:62:34:b9:42:ef:28:08:0a:2c:08:44:6c:c4:
         42:18:7b:25:88:0e:97:0e:70:bd:53:8a:f7:2e:f9:a6:7d:70:
         6f:bb:32:29:f7:6c:3b:7f:a5:13:c4:63:8b:93:1a:e8:5b:6d:
         73:5e:4c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpDG2nf0aP2kTOVXUL1LLbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YjY3YmE1NzlmNDhhNDIwN2FjNDA5YWJmNGYwMTE5NDA0
NmVhM2EwHhcNMjMwODI5MjEwMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE2MzdhNDc0Y2M4YTBjYjdlODNlMmU0N2M5NTdmNjBlNDlmNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VX8OY5s4Ddbp3P16s7V5VgDdEfR
Um7UKwekIclPYQPNOMHMiJROXyimtICtt0NOc0VRGSOHt5Fdm7nNf8aaSC1yk1/g
ZEaAdpr1gc/Af3r5VDRwRTSViTPJiagSoJ8wKtsuRPb8bUDQur+2QaXU63WhYKm2
90lmNq4FIYpD5ECXHRQ5UwZhN/5eNaNaQKnPEDnCBS91ji75GuzbQXymCx3M0gkM
H+Hcvmuqq/q9wBW2Epj8CRK8kzVUNhN9m0evBOhUeJNUmjc/MrkcnTbWR4dRusmN
SWejAauiOicL5ERrstZ7qabe3CfBdYGimSn80uXheBRGbYiC/nl3s7a7fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAWN6R0zIoMt+g+LkfJV/YOSfbnMB8GA1UdIwQY
MBaAFLe2e6V59IpCB6xAmr9PARlARuo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYt
Yjc3NDMyMGQ5OTdmLzEvRUJZM3BIVE1pZ3kzNkQ0dVI4bFg5ZzVKOXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85NjNkNzUtNGNmZi00YjE0LTgzZGYtYjc3NDMyMGQ5OTdm
LzEvdDdaN3BYbjBpa0lIckVDYXYwOEJHVUJHNmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDT6vAMA0G
CSqGSIb3DQEBCwUAA4IBAQCWI93Eu5AJllZjLrPVjaeYL2xA0mSMRBLHgRjF+P/L
TpLkXJxWrvfqnb02M9gmv7k79Ztk9OqJzMmuWHr2sH+xU754D8YFsB2XuEkrdlF3
l/F1dpf6Bnd3/aTvehNPiSb1jjEP17b6ZuYvmBznof7HISe3F2diXc8a5Ao3c/qM
D7ZdChUAJpvwVMFYMbV4h/nG5w/5UEHis91u3ErNku4ieyIlOMXUyYUJzAi20HkU
BkIJw0yboKg7DVRW5vbdliqMJ2UmYunUAJeA1GI0uULvKAgKLAhEbMRCGHsliA6X
DnC9U4r3LvmmfXBvuzIp92w7f6UTxGOLkxroW21zXkyK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:31 2024 by rpki-client on console-ams.rpki-client.org