Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/B_oB79RaXukwCElmONdLS1CZZdc.roa
File:                     B_oB79RaXukwCElmONdLS1CZZdc.roa (raw, json)
Hash identifier:          nlLTiSx0QNLfQ7g2usZnXdGE7CsS7UylmlwD1fxVt8A=
Subject key identifier:   07:FA:01:EF:D4:5A:5E:E9:30:08:49:66:38:D7:4B:4B:50:99:65:D7
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       01856C4145249CB04FCB39236163CD2C6366
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/B_oB79RaXukwCElmONdLS1CZZdc.roa
Signing time:             Sun 01 Jan 2023 07:34:54 +0000
ROA not before:           Sun 01 Jan 2023 07:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        185.79.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 20:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:41:45:24:9c:b0:4f:cb:39:23:61:63:cd:2c:63:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Jan  1 07:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=07fa01efd45a5ee93008496638d74b4b509965d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bc:d8:8e:42:78:30:75:11:b5:32:8a:f2:ad:
                    25:5c:72:93:bc:45:44:fe:5a:a7:44:47:71:1f:b6:
                    ca:6c:36:9a:61:48:43:58:4f:8d:a9:28:89:39:bd:
                    d7:4f:9c:8d:a6:5f:1f:5d:79:a3:db:bc:f4:5b:12:
                    5d:23:6c:91:a4:5e:7a:66:99:2e:dc:48:f4:fa:64:
                    38:5c:47:cb:08:57:38:b9:c1:42:8a:13:e1:90:95:
                    f2:ce:62:1a:9e:07:46:cf:9a:4b:e0:18:64:68:b3:
                    c5:4e:fe:b3:c2:78:fc:3c:cc:7e:64:eb:e4:8b:e2:
                    32:92:89:bd:79:00:da:82:0f:65:1f:87:15:a3:43:
                    8d:f7:e7:99:96:bf:0f:81:e4:34:97:d5:de:14:a7:
                    73:69:aa:15:a7:c5:97:4b:98:64:41:da:97:d2:a7:
                    39:cb:26:ec:60:93:67:78:c0:92:21:bd:06:8a:b2:
                    50:c1:bd:33:73:99:64:c4:a3:8b:f4:7f:6f:e4:b5:
                    a0:b3:a5:50:8a:39:92:21:04:75:6e:20:5e:86:01:
                    c1:29:a4:69:75:78:eb:da:8d:dd:07:dc:e1:1e:c1:
                    db:16:89:02:a0:2c:5d:d0:21:96:97:d5:f1:79:76:
                    67:59:d2:32:b4:24:fc:a7:ea:c3:f4:4f:d9:99:d6:
                    dd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:01:EF:D4:5A:5E:E9:30:08:49:66:38:D7:4B:4B:50:99:65:D7
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/B_oB79RaXukwCElmONdLS1CZZdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2c:95:1b:25:60:77:33:3c:d1:44:81:ce:64:0b:1e:f3:31:
         45:07:76:28:4f:79:4b:00:37:e8:aa:05:f1:b4:7b:27:01:c0:
         d4:a6:a1:a2:59:65:c1:70:c0:e7:05:9e:67:44:3c:56:75:05:
         ba:66:55:ec:48:5b:c3:ee:30:47:d5:cd:b6:f0:1c:c2:fe:86:
         cf:08:58:e5:2e:3a:be:1b:39:e4:ab:ec:1e:e1:25:14:79:15:
         37:72:09:51:30:1e:c2:11:58:6d:fa:d4:77:dd:16:c0:e1:f8:
         1e:00:a3:3f:0a:83:ef:d3:59:d0:7f:76:c4:c0:60:24:e0:5d:
         28:bf:0b:cd:71:1a:86:1a:c6:83:8a:e6:08:97:af:d6:30:4e:
         97:51:3a:a8:e7:86:18:0b:50:b0:bd:39:20:a1:2b:49:da:4b:
         3e:41:f0:68:9e:a4:ce:02:45:f0:30:b9:32:eb:e9:bc:51:a5:
         4e:2a:24:f8:f6:7a:06:bc:6f:54:c1:5c:a4:04:40:41:f0:ad:
         77:d8:3a:9f:3d:2b:5c:ac:be:11:e1:63:6c:8a:15:d4:dc:4d:
         a4:ab:87:db:79:41:d1:9a:87:63:1f:f3:1f:dc:1d:4f:41:d9:
         11:d6:97:5c:59:b9:db:7a:21:90:be:95:5a:2f:d9:5c:f1:d0:
         61:57:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:52 2024 by rpki-client on console-ams.rpki-client.org