Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dnjntisVL3GbbRyrmE51IMbBI3c.roa
File:                     dnjntisVL3GbbRyrmE51IMbBI3c.roa (raw, json)
Hash identifier:          WZVfL2fMse6Tvo+XtOB4fa7vYuAQF+eYAzmCNt9ztWA=
Subject key identifier:   76:78:E7:B6:2B:15:2F:71:9B:6D:1C:AB:98:4E:75:20:C6:C1:23:77
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018D1805D571E61A3DDAD1E8008B3AC054B2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dnjntisVL3GbbRyrmE51IMbBI3c.roa
Signing time:             Wed 17 Jan 2024 15:24:11 +0000
ROA not before:           Wed 17 Jan 2024 15:24:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215766
IP address blocks:        79.110.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 09:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:18:05:d5:71:e6:1a:3d:da:d1:e8:00:8b:3a:c0:54:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 17 15:24:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7678e7b62b152f719b6d1cab984e7520c6c12377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:02:ce:b9:f0:56:7b:86:80:a2:b5:07:e2:
                    f8:c9:d8:bd:d1:fe:1d:b4:25:50:f5:aa:d7:6f:a6:
                    49:d0:b5:7b:45:52:de:d1:86:de:86:cd:ee:e4:56:
                    f0:0a:1d:07:88:92:ba:47:02:9a:c3:87:23:1b:1e:
                    46:c1:b1:fe:a4:b5:61:d1:00:88:7e:1f:c5:a0:b2:
                    2b:f4:08:83:e9:29:80:3f:79:c4:b4:c1:fa:1f:54:
                    b0:e0:38:47:f4:65:a4:08:37:d2:57:a1:ba:88:ab:
                    87:f9:39:23:1c:66:23:2f:36:ee:b2:0c:f0:de:68:
                    97:53:07:13:42:ff:68:40:9f:ba:be:0e:e2:8e:34:
                    d9:6b:82:ce:c9:06:8a:e3:1d:6b:ea:b6:60:73:37:
                    12:7c:f3:ba:c2:47:02:59:1e:59:24:19:1a:2f:f9:
                    66:db:27:75:20:fa:b9:11:d2:36:b7:d7:0a:ae:ce:
                    4c:35:45:9e:f8:f3:b5:e5:81:14:c2:68:41:eb:74:
                    27:29:8c:14:06:f7:bf:7a:1a:26:5c:01:8a:10:58:
                    ad:4a:f0:93:b6:e7:13:09:0b:c6:26:71:11:66:d6:
                    53:dd:75:5e:4a:17:7b:a3:67:1a:57:fd:59:6e:45:
                    2e:37:60:94:97:9f:bb:0a:0c:24:42:fa:48:eb:08:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:E7:B6:2B:15:2F:71:9B:6D:1C:AB:98:4E:75:20:C6:C1:23:77
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dnjntisVL3GbbRyrmE51IMbBI3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:89:6b:fa:a5:0d:1e:e8:eb:a8:92:10:53:35:5c:31:99:90:
         23:75:1f:d3:87:22:6b:63:7f:ea:f7:bc:6b:bc:1b:70:91:dc:
         11:48:77:ad:7e:51:9c:88:e9:65:ac:49:cf:4a:52:a9:b8:87:
         e2:73:85:b8:d7:9e:2b:db:31:bf:56:2a:99:79:01:5e:71:1b:
         ea:a1:9b:d3:c1:b9:60:e6:db:9f:bf:3f:b3:f5:25:92:3d:ea:
         54:57:c0:e7:8a:fb:65:af:df:66:e4:a5:55:ee:1d:f2:ab:3a:
         68:43:97:47:75:9b:f3:58:2d:2c:46:f6:85:58:ef:fd:0e:66:
         f5:7c:4f:61:bd:82:19:e8:29:a5:a1:ef:97:a6:4b:92:b7:ba:
         8d:73:14:58:59:33:f1:61:74:c2:a2:a7:ed:70:95:ae:9c:a5:
         9b:df:89:de:86:26:dc:43:b7:40:8d:0d:dc:e8:f4:e8:13:77:
         01:5f:ea:06:29:fe:97:d6:dd:ab:b6:dd:22:46:b4:ad:3f:63:
         1b:00:26:56:5f:d5:bd:49:60:6a:cc:1a:17:bc:76:e4:31:4a:
         13:93:20:e4:be:76:cc:75:88:0a:16:57:73:fe:28:f3:a7:27:
         13:d9:52:f5:cd:d2:d9:51:cb:e0:2b:18:0d:6d:85:7d:1a:0d:
         65:db:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 13:22:56 2024 by rpki-client on console-ams.rpki-client.org