Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uVUxJVbUK2uYmWqIAy-4i4yf9So.roa
File:                     uVUxJVbUK2uYmWqIAy-4i4yf9So.roa (raw, json)
Hash identifier:          KH6bGwSkgxpB7xGS4ywjVyh8d+pkQzQG2V0UASjEDFs=
Subject key identifier:   B9:55:31:25:56:D4:2B:6B:98:99:6A:88:03:2F:B8:8B:8C:9F:F5:2A
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019076FA9D0EEE312E138041264370ADBE57
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uVUxJVbUK2uYmWqIAy-4i4yf9So.roa
Signing time:             Wed 03 Jul 2024 05:04:13 +0000
ROA not before:           Wed 03 Jul 2024 05:04:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213323
IP address blocks:        79.110.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 06:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:76:fa:9d:0e:ee:31:2e:13:80:41:26:43:70:ad:be:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jul  3 05:04:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b955312556d42b6b98996a88032fb88b8c9ff52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:16:51:51:9e:23:d2:db:54:6b:da:9e:50:
                    85:09:52:46:f0:3c:ec:5e:b4:f1:dd:66:61:9b:dc:
                    fe:c2:f6:6c:69:5d:54:f2:8a:87:35:a7:70:36:07:
                    f5:71:33:0b:86:0f:81:a7:00:4f:93:59:25:69:00:
                    31:48:ef:44:05:6e:98:94:eb:ff:2c:21:d5:34:f7:
                    8a:f7:09:fa:6b:81:76:40:f6:bf:83:5a:ce:6d:0e:
                    3f:94:34:ca:fa:12:4e:53:97:15:27:c4:dd:4b:6c:
                    02:88:34:7d:dc:47:59:6c:fe:4f:19:47:0e:66:03:
                    6c:86:2a:d6:8d:44:32:a9:56:6d:2a:19:d1:28:c9:
                    be:35:fe:07:7c:8d:70:5f:20:74:59:79:fe:57:98:
                    d1:16:4d:e0:64:86:3f:0e:3d:81:93:c3:80:a0:87:
                    5a:5f:8e:8d:f2:e4:01:4f:d5:ec:f3:5d:fa:0f:a7:
                    61:b4:ad:b8:1b:34:1f:fb:e1:e7:e5:df:96:bc:70:
                    09:8c:42:af:73:68:08:bb:bf:87:fe:a9:f2:3b:84:
                    39:1b:4d:5e:98:8d:d3:de:1d:c9:7e:18:80:e0:bf:
                    0a:2a:73:55:09:fc:bf:a3:61:f1:c7:2e:f3:0f:92:
                    54:1e:d4:23:d2:09:45:82:be:a9:27:33:59:37:da:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:55:31:25:56:D4:2B:6B:98:99:6A:88:03:2F:B8:8B:8C:9F:F5:2A
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uVUxJVbUK2uYmWqIAy-4i4yf9So.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:94:be:0c:38:f7:89:3a:44:b9:34:33:04:92:c8:e4:ab:4a:
         d3:ed:da:2f:d3:b6:39:f1:c5:64:44:30:97:77:5f:8f:31:95:
         1f:69:b5:4b:d1:32:e2:91:49:e4:8e:59:45:91:fc:42:49:2d:
         68:b8:2c:a6:bc:20:25:6d:03:77:7d:f8:c0:17:ab:c1:24:3d:
         02:42:29:c1:c4:9b:e5:ef:d5:7d:c5:74:ca:15:70:ab:7a:e8:
         ec:5a:24:43:5b:67:83:c7:c5:78:63:81:01:3e:33:9f:92:5a:
         a6:48:ab:b8:0a:f8:0e:0a:c7:ee:9b:db:fd:40:87:95:8b:65:
         22:10:dd:b7:8c:d7:79:6b:5f:7c:2d:f4:69:7f:65:a6:c4:e6:
         2d:c3:a5:95:cb:9b:fb:a0:67:15:76:38:52:c7:b9:34:9c:19:
         4b:a8:8a:9e:ac:25:33:b8:c7:8a:a3:d1:67:1f:4e:a0:58:88:
         7b:81:ee:80:e3:b3:3d:6d:a7:35:91:80:47:a6:a7:80:c9:c6:
         eb:8d:57:e2:82:dc:5c:18:d8:d6:41:73:26:72:fc:a7:03:35:
         f9:5f:ed:6c:50:86:cd:39:79:dd:6d:f9:51:7a:08:a9:c7:4e:
         49:64:52:79:aa:5c:f1:a0:f3:c1:e0:55:5e:85:dc:d1:45:91:
         e1:57:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 08:36:45 2024 by rpki-client on console-fra.rpki-client.org