Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L-yYX7-2VZpTtYHWDr-NRb9NBzA.roa
File:                     L-yYX7-2VZpTtYHWDr-NRb9NBzA.roa (raw, json)
Hash identifier:          O6GONNUHrCBcNWul+AKFdtjgQpYmu0Jf5pMi5T3nG/I=
Subject key identifier:   2F:EC:98:5F:BF:B6:55:9A:53:B5:81:D6:0E:BF:8D:45:BF:4D:07:30
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D81E2369830FC1423545401B92F40F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L-yYX7-2VZpTtYHWDr-NRb9NBzA.roa
Signing time:             Sun 01 Jan 2023 13:25:06 +0000
ROA not before:           Sun 01 Jan 2023 13:25:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35077
IP address blocks:        79.110.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 06:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:e2:36:98:30:fc:14:23:54:54:01:b9:2f:40:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2fec985fbfb6559a53b581d60ebf8d45bf4d0730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:37:1a:fa:17:14:a5:d5:ce:bc:87:fc:10:
                    51:ba:86:ff:2a:56:58:41:8c:ec:06:96:eb:cd:f7:
                    93:2f:cc:b9:3e:ca:d5:ec:0f:eb:ab:f9:2d:98:6c:
                    bc:8c:d7:76:98:b2:51:ca:da:2d:1b:0f:3f:c3:65:
                    84:3c:46:43:bd:2e:44:47:94:70:3f:51:75:35:57:
                    82:58:fd:66:00:1b:bd:85:45:96:8d:30:f5:51:37:
                    9f:2f:d0:17:48:53:82:ef:d6:09:8a:05:4a:f1:93:
                    dc:93:af:dc:07:10:14:2f:87:8f:4d:38:ab:88:a4:
                    0b:13:c8:e8:db:98:fa:3e:19:7b:3e:54:cd:5e:5a:
                    56:30:fe:82:8a:c5:ed:3d:63:36:ae:f6:e9:2e:dd:
                    f1:f6:19:4e:96:25:49:5d:20:30:f0:e6:16:e7:8e:
                    4c:be:e1:f1:d6:e6:f6:de:85:ae:e6:1b:4e:ba:64:
                    e1:48:ac:99:f5:6b:9f:0c:b9:2e:b4:a2:b0:8d:39:
                    23:9a:dd:bc:f2:2b:94:79:ac:2f:3d:5b:78:78:d8:
                    21:3b:8f:ff:d7:86:22:19:8d:2b:04:2a:76:93:7e:
                    bb:49:ea:4a:3f:d2:e6:62:6b:54:7c:82:f4:0c:84:
                    e2:2a:b3:df:03:87:c8:70:86:a3:0d:58:e6:44:61:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:98:5F:BF:B6:55:9A:53:B5:81:D6:0E:BF:8D:45:BF:4D:07:30
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L-yYX7-2VZpTtYHWDr-NRb9NBzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d9:09:7c:9e:cd:43:ef:ae:1e:7f:e1:25:af:58:53:60:17:
         55:e2:b9:2e:18:39:9a:0a:57:f8:cb:1d:e3:9c:c3:b3:0b:e1:
         89:b6:87:3b:72:f3:fc:52:fb:96:69:c5:92:3f:f1:29:09:68:
         27:52:e5:00:29:f6:4e:d6:ef:44:36:8a:6a:16:17:71:e4:e5:
         b3:25:d6:4c:72:8a:14:db:33:ae:2e:e6:6c:09:40:3f:7c:c2:
         60:b4:87:a7:dc:a6:a7:f1:87:0d:ca:b9:92:14:07:fd:13:79:
         35:0f:09:d7:29:bf:a2:e2:88:20:2d:3c:ca:8c:b8:80:17:c1:
         e3:1c:b6:ed:b6:d0:ff:2d:08:af:82:34:cf:81:03:93:ab:ae:
         4e:2e:25:d9:16:26:bf:d8:41:66:52:71:35:8e:37:d3:be:74:
         c1:a5:41:c6:df:c3:d0:1e:fd:76:fc:f4:88:ab:db:28:ca:7f:
         77:64:e7:3b:ee:ae:79:8c:68:5a:fb:79:6a:67:d5:03:27:19:
         f0:7f:29:8d:1d:a7:3a:45:fc:f4:ee:a5:3a:4a:cf:a8:34:b1:
         3d:97:a0:79:83:0f:09:76:4f:c3:84:2e:05:76:e7:3f:7f:35:
         24:db:b1:5b:50:cf:e0:55:7f:91:df:77:45:bc:2e:6f:d7:31:
         f9:6f:21:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgeI2mDD8FCNUVAG5L0DyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmVjOTg1ZmJmYjY1NTlhNTNiNTgxZDYwZWJmOGQ0NWJmNGQwNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmks3GvoXFKXVzryH/BBRuob/KlZY
QYzsBpbrzfeTL8y5PsrV7A/rq/ktmGy8jNd2mLJRytotGw8/w2WEPEZDvS5ER5Rw
P1F1NVeCWP1mABu9hUWWjTD1UTefL9AXSFOC79YJigVK8ZPck6/cBxAUL4ePTTir
iKQLE8jo25j6Phl7PlTNXlpWMP6CisXtPWM2rvbpLt3x9hlOliVJXSAw8OYW545M
vuHx1ub23oWu5htOumThSKyZ9WufDLkutKKwjTkjmt288iuUeawvPVt4eNghO4//
14YiGY0rBCp2k367SepKP9LmYmtUfIL0DITiKrPfA4fIcIajDVjmRGG3eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/smF+/tlWaU7WB1g6/jUW/TQcwMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTC15WVg3LTJWWnBUdFlIV0RyLU5SYjlOQnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT24yMA0G
CSqGSIb3DQEBCwUAA4IBAQBL2Ql8ns1D764ef+Elr1hTYBdV4rkuGDmaClf4yx3j
nMOzC+GJtoc7cvP8UvuWacWSP/EpCWgnUuUAKfZO1u9ENopqFhdx5OWzJdZMcooU
2zOuLuZsCUA/fMJgtIen3Kan8YcNyrmSFAf9E3k1DwnXKb+i4oggLTzKjLiAF8Hj
HLbtttD/LQivgjTPgQOTq65OLiXZFia/2EFmUnE1jjfTvnTBpUHG38PQHv12/PSI
q9soyn93ZOc77q55jGha+3lqZ9UDJxnwfymNHac6Rfz07qU6Ss+oNLE9l6B5gw8J
dk/DhC4Fduc/fzUk27FbUM/gVX+R33dFvC5v1zH5byFI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org