Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/5PDuS-Zz28pdmSMaUdygV83c5lU.roa
File:                     5PDuS-Zz28pdmSMaUdygV83c5lU.roa (raw, json)
Hash identifier:          yoMhgDTZWhSOYsU7KhIj6VV3Q16w/MBxQ+SgzVagv4E=
Subject key identifier:   E4:F0:EE:4B:E6:73:DB:CA:5D:99:23:1A:51:DC:A0:57:CD:DC:E6:55
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       0185724C68E9EB08B11C4053BDEF44FCF379
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/5PDuS-Zz28pdmSMaUdygV83c5lU.roa
Signing time:             Mon 02 Jan 2023 11:44:48 +0000
ROA not before:           Mon 02 Jan 2023 11:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58299
IP address blocks:        185.62.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:4c:68:e9:eb:08:b1:1c:40:53:bd:ef:44:fc:f3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Jan  2 11:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4f0ee4be673dbca5d99231a51dca057cddce655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:27:54:67:ba:f5:28:b1:e8:94:9a:50:6d:
                    3e:6b:d2:52:67:58:bb:59:7e:c7:b0:18:ec:ec:9e:
                    b0:98:a7:a3:34:3e:a8:33:4e:40:bb:e3:1b:5e:49:
                    ce:60:b6:eb:17:87:d6:67:30:da:b3:ad:1a:9f:c8:
                    9a:31:d0:76:3a:54:7d:69:9e:bb:49:0c:b4:f0:57:
                    64:76:04:6a:ec:7b:7a:60:e1:5a:29:25:ba:c2:39:
                    a9:e5:29:a7:cd:e7:3d:5b:28:d5:a4:93:fb:a9:98:
                    fe:07:5b:51:cb:24:1f:d3:73:88:f9:a6:99:3d:6b:
                    cb:a5:56:16:b5:b7:8b:d0:e6:15:a9:1e:e1:9f:e6:
                    ef:e7:23:c8:20:64:09:cc:94:ce:6e:4d:dd:b3:14:
                    be:80:36:b0:26:be:46:47:46:a4:15:fb:10:50:ce:
                    b7:b6:13:1b:50:da:c5:cc:24:57:7e:ee:31:c9:6a:
                    81:c4:56:5b:4f:84:a2:74:c5:55:9d:33:05:2c:87:
                    a0:9d:25:18:3e:5e:88:59:1d:bf:b3:72:80:66:51:
                    cd:f1:86:05:9c:a8:6d:44:bf:48:17:1b:d5:c3:52:
                    d2:a2:ce:f4:76:52:1c:57:37:75:14:74:56:d2:36:
                    f7:f1:2d:20:89:a4:6e:59:22:66:5e:8e:ef:e3:21:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:EE:4B:E6:73:DB:CA:5D:99:23:1A:51:DC:A0:57:CD:DC:E6:55
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/5PDuS-Zz28pdmSMaUdygV83c5lU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f7:e0:cd:95:be:2a:1e:96:eb:ac:97:1e:d5:33:18:51:99:
         26:ef:5e:e4:25:eb:38:db:54:fa:10:bc:99:e8:97:13:8b:c2:
         a4:a3:64:2a:ac:f3:b3:ae:ba:69:5a:70:f5:80:6b:a9:52:f7:
         7c:ca:3a:07:46:2a:3a:5a:a3:43:2a:5b:0b:23:1e:69:16:27:
         62:8c:b5:40:62:78:58:06:4b:19:fe:60:39:b9:46:7b:c8:f5:
         7c:44:d9:f4:e0:49:a1:37:72:a4:0d:e0:c0:40:74:1f:39:55:
         5b:8f:9d:d4:b0:c6:d1:9b:ea:21:50:5e:c9:81:84:d9:cf:0b:
         c1:1f:46:f2:59:d1:4c:72:cf:20:84:40:7e:74:31:b4:df:b7:
         80:11:2c:bf:27:17:08:3f:73:6c:b4:89:df:fc:62:c0:82:72:
         5f:d2:72:b7:15:cb:d4:68:50:eb:13:f8:0f:53:a6:ef:ac:d5:
         9d:32:8d:35:49:56:39:fc:a2:82:17:00:19:58:63:79:59:e7:
         a6:d3:d4:8a:d8:bc:0c:1a:99:a4:e5:8e:31:2a:6e:4c:78:2c:
         eb:c0:b0:4a:71:5e:e0:f0:42:92:12:e0:3f:7e:e4:9b:69:1d:
         d6:d7:03:e7:a9:0e:62:2b:47:ae:9a:69:98:18:b7:00:ff:4a:
         6c:50:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org