Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/F4vTz1xOLyjDfLR44ZGb2ueaW4Y.roa
File:                     F4vTz1xOLyjDfLR44ZGb2ueaW4Y.roa (raw, json)
Hash identifier:          IBGNh/MwbL3Y/r/OrUlO2Pv5rbnqVd3bwDXcta2rrUo=
Subject key identifier:   17:8B:D3:CF:5C:4E:2F:28:C3:7C:B4:78:E1:91:9B:DA:E7:9A:5B:86
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       0186CCE175B43D2BC363C673F0A787F07BF3
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/F4vTz1xOLyjDfLR44ZGb2ueaW4Y.roa
Signing time:             Fri 10 Mar 2023 18:56:13 +0000
ROA not before:           Fri 10 Mar 2023 18:56:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209007
IP address blocks:        79.110.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cc:e1:75:b4:3d:2b:c3:63:c6:73:f0:a7:87:f0:7b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: Mar 10 18:56:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=178bd3cf5c4e2f28c37cb478e1919bdae79a5b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:c9:85:9f:0e:53:94:1c:3a:47:2f:77:2a:
                    3e:da:b3:b9:cf:8a:94:44:e2:2b:cf:3f:52:24:bf:
                    5e:f9:28:15:1e:27:87:a7:db:2e:04:2c:33:30:8a:
                    13:ba:f9:90:f7:40:a2:88:ed:ca:ad:84:ca:dd:ff:
                    e1:d9:0c:b9:7f:32:1d:ff:c7:c9:cc:a4:d4:ec:76:
                    81:db:6a:12:9c:ca:a1:ad:54:f0:46:cf:ae:c2:c0:
                    f3:f4:20:40:36:40:26:38:06:bb:cc:22:15:12:26:
                    41:d3:c6:19:39:1a:32:32:58:94:c1:a3:85:cd:33:
                    f8:d2:67:f0:02:db:4e:70:eb:b9:47:2c:93:72:5e:
                    5c:80:45:7f:89:26:20:10:67:d3:08:20:0c:1d:0e:
                    85:f5:27:6b:b8:db:13:0f:07:36:14:3c:c2:61:fc:
                    e3:de:34:7e:4e:d5:03:79:2b:56:2b:86:0b:74:fb:
                    6c:5a:6a:01:6a:be:79:fe:cc:bd:41:dd:0a:10:2d:
                    8d:9f:bb:21:e1:be:51:18:f5:a4:a6:3c:df:ef:b1:
                    06:66:ee:86:5e:47:e6:c4:02:09:eb:07:af:a3:3e:
                    37:35:1c:dd:6d:6b:b1:9b:4b:f5:53:6b:f0:fb:ed:
                    94:bd:3e:41:56:b4:61:2a:7d:11:2e:a5:cb:29:96:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8B:D3:CF:5C:4E:2F:28:C3:7C:B4:78:E1:91:9B:DA:E7:9A:5B:86
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/F4vTz1xOLyjDfLR44ZGb2ueaW4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:cd:8a:51:09:f5:3f:67:d7:30:05:f6:ad:14:5e:1a:4d:
         ce:5c:34:28:7f:35:27:d3:e6:35:92:8e:36:3f:ad:af:d6:c8:
         f7:58:97:6c:fa:b4:61:54:03:33:bb:8c:cd:c2:df:0a:99:f2:
         a0:39:8e:5e:9a:e4:82:ce:14:04:a4:2d:b9:92:68:74:fd:8c:
         d4:ea:c4:be:f7:0f:a0:6e:b2:c1:9d:7f:9a:a4:6e:69:47:c5:
         8a:41:e4:49:37:68:cf:27:e5:de:84:3d:99:b8:2e:bb:8b:f4:
         bf:2b:9b:f1:a3:af:66:92:83:ad:17:ff:db:61:bd:be:21:2e:
         23:14:10:72:1f:45:34:22:eb:3f:5c:b5:a5:a9:2f:e9:41:bc:
         2d:08:52:b5:ab:8c:78:1c:f2:3b:e0:63:70:ec:58:10:18:5c:
         eb:dc:a9:28:13:47:35:ee:35:1e:aa:91:cd:8d:6d:c4:c4:4e:
         37:ef:44:c2:5d:7a:13:51:fd:11:3e:7e:ca:20:20:b8:fa:82:
         66:48:27:d4:ba:d8:d6:e0:4f:1b:f5:72:d6:15:80:70:88:59:
         fc:3f:0a:39:1f:96:33:d4:ab:46:76:98:f5:7e:c4:12:6e:99:
         e9:90:12:a3:e9:63:27:ae:6d:10:32:66:1c:7e:9d:59:db:b6:
         26:9f:d6:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbM4XW0PSvDY8Zz8KeH8HvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjc4ZjE0ZjhiMjI4OGQ0OTU1N2NhNmZiMWJkZjQ3OTM5
MjdkY2UwHhcNMjMwMzEwMTg1NjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhiZDNjZjVjNGUyZjI4YzM3Y2I0NzhlMTkxOWJkYWU3OWE1Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKDJhZ8OU5QcOkcvdyo+2rO5z4qU
ROIrzz9SJL9e+SgVHieHp9suBCwzMIoTuvmQ90CiiO3KrYTK3f/h2Qy5fzId/8fJ
zKTU7HaB22oSnMqhrVTwRs+uwsDz9CBANkAmOAa7zCIVEiZB08YZORoyMliUwaOF
zTP40mfwAttOcOu5RyyTcl5cgEV/iSYgEGfTCCAMHQ6F9SdruNsTDwc2FDzCYfzj
3jR+TtUDeStWK4YLdPtsWmoBar55/sy9Qd0KEC2Nn7sh4b5RGPWkpjzf77EGZu6G
XkfmxAIJ6wevoz43NRzdbWuxm0v1U2vw++2UvT5BVrRhKn0RLqXLKZZUZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeL089cTi8ow3y0eOGRm9rnmluGMB8GA1UdIwQY
MBaAFCtnjxT4siiNSVV8pvsb30eTkn3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEt
ZjFjYzg3M2MyZTI3LzEvRjR2VHoxeE9MeWpEZkxSNDRaR2IydWVhVzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iYmE5ZWQtZGEyMS00OTE5LWE4MzEtZjFjYzg3M2MyZTI3
LzEvSzJlUEZQaXlLSTFKVlh5bS14dmZSNU9TZmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27pMA0G
CSqGSIb3DQEBCwUAA4IBAQArhc2KUQn1P2fXMAX2rRReGk3OXDQofzUn0+Y1ko42
P62v1sj3WJds+rRhVAMzu4zNwt8KmfKgOY5emuSCzhQEpC25kmh0/YzU6sS+9w+g
brLBnX+apG5pR8WKQeRJN2jPJ+XehD2ZuC67i/S/K5vxo69mkoOtF//bYb2+IS4j
FBByH0U0Ius/XLWlqS/pQbwtCFK1q4x4HPI74GNw7FgQGFzr3KkoE0c17jUeqpHN
jW3ExE4370TCXXoTUf0RPn7KICC4+oJmSCfUutjW4E8b9XLWFYBwiFn8Pwo5H5Yz
1KtGdpj1fsQSbpnpkBKj6WMnrm0QMmYcfp1Z27Ymn9YC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:28 2024 by rpki-client on console-fra.rpki-client.org