Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wkdniJKBQJm_5Ghgsbt0GxRTQ6g.roa
File:                     wkdniJKBQJm_5Ghgsbt0GxRTQ6g.roa (raw, json)
Hash identifier:          lzqceU5CKxXQxnoGQQU2ACpeg767bUq7RHi477ztbuw=
Subject key identifier:   C2:47:67:88:92:81:40:99:BF:E4:68:60:B1:BB:74:1B:14:53:43:A8
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D8203C52DBBB8A5582B7DDF8CAA3CEB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wkdniJKBQJm_5Ghgsbt0GxRTQ6g.roa
Signing time:             Sun 01 Jan 2023 13:25:15 +0000
ROA not before:           Sun 01 Jan 2023 13:25:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201950
IP address blocks:        79.110.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 06:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:82:03:c5:2d:bb:b8:a5:58:2b:7d:df:8c:aa:3c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c247678892814099bfe46860b1bb741b145343a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:8b:51:a4:3e:c2:9d:48:ed:6a:65:d8:cf:
                    e7:2f:38:a0:83:81:71:ce:b9:d8:86:58:ec:0e:36:
                    76:ba:8c:ea:17:65:13:32:2a:b9:2d:cd:4a:9c:eb:
                    70:d5:4c:63:d1:70:65:15:40:ca:b6:57:84:f7:ed:
                    be:54:ae:62:72:d7:ec:5c:a9:73:6b:6c:2b:f2:7f:
                    5c:a4:ae:8d:e5:cb:6a:f6:07:cf:0f:f4:ae:97:1f:
                    31:4a:8f:8b:dd:fa:51:8d:7c:95:15:25:80:88:4d:
                    6c:35:21:bc:09:42:d1:72:7c:25:06:35:04:45:ea:
                    7c:fe:ab:14:c7:ca:af:3c:5f:21:d8:4b:21:18:6e:
                    ea:18:fe:6f:39:1b:d3:80:3a:f4:b6:6f:93:d3:11:
                    48:90:7c:ee:a4:11:dc:f5:72:e4:76:8b:ab:e6:f5:
                    e1:af:6c:a5:77:8e:f5:3e:81:1f:d5:53:88:d6:3b:
                    f3:a8:af:f6:c0:05:9e:ef:93:2d:ee:30:2f:ec:27:
                    3e:db:5c:f4:b7:47:b0:0d:cd:b2:47:dc:39:c6:56:
                    1f:ab:55:2f:a1:24:6f:82:5a:66:c2:5a:00:62:fe:
                    1b:da:3b:62:17:39:7b:2e:06:fa:ac:41:d5:6c:24:
                    e6:44:51:eb:5e:8f:51:15:b6:3f:87:5f:9d:64:03:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:47:67:88:92:81:40:99:BF:E4:68:60:B1:BB:74:1B:14:53:43:A8
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wkdniJKBQJm_5Ghgsbt0GxRTQ6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:42:b1:b5:e5:d9:2b:e6:81:ff:fa:be:fa:ed:a9:6d:56:
         ef:10:d5:ab:43:77:23:62:8d:4d:13:7d:4b:da:4e:9b:52:5e:
         33:82:21:86:b4:bc:cb:a8:e2:8f:66:f6:46:53:7b:3f:88:57:
         02:56:2c:4a:fd:f4:43:a0:a0:7a:89:1b:b7:14:8c:ad:60:e8:
         92:c0:85:4b:4e:de:06:16:db:b0:34:78:f1:91:b8:0e:4a:72:
         20:33:fd:10:22:e8:a9:22:84:75:75:25:9e:72:cc:45:e2:fb:
         5c:58:fe:fe:91:59:8a:29:d8:60:d6:db:10:af:81:15:dc:e9:
         37:19:d7:e7:5a:40:9f:5b:9c:83:f8:f1:86:14:94:29:71:4f:
         66:7b:9a:9e:a1:ce:be:2e:90:7f:04:d2:c6:61:c6:26:0e:65:
         8c:26:cb:2b:8f:36:d9:f5:7a:d1:42:7d:9e:bb:4b:64:1c:f3:
         53:21:1f:b4:bd:35:e4:49:3b:60:ea:33:16:df:1e:1b:94:53:
         b3:46:d6:4b:ca:82:0b:79:4b:aa:2b:18:b4:07:5b:2a:41:e6:
         52:0c:79:d7:7e:59:92:b3:52:ba:60:66:c7:5a:81:2a:1c:e6:
         e0:b6:6f:10:28:bd:79:6e:fc:2d:43:1c:c7:86:e0:ae:61:70:
         c1:99:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:46 2024 by rpki-client on console-ams.rpki-client.org