Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j43FUJo4WrL7EXN6394KZ1Y6coE.roa
File:                     j43FUJo4WrL7EXN6394KZ1Y6coE.roa (raw, json)
Hash identifier:          ESrSxSxWZwn0aOuvR3AoKaOyAYlXTQMs1RUaY+CEMyk=
Subject key identifier:   8F:8D:C5:50:9A:38:5A:B2:FB:11:73:7A:DF:DE:0A:67:56:3A:72:81
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018E08D484BADFB449C2F11C1C1ECA1E5F62
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j43FUJo4WrL7EXN6394KZ1Y6coE.roa
Signing time:             Mon 04 Mar 2024 09:38:49 +0000
ROA not before:           Mon 04 Mar 2024 09:38:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60922
IP address blocks:        185.161.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Mar 2024 15:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:08:d4:84:ba:df:b4:49:c2:f1:1c:1c:1e:ca:1e:5f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Mar  4 09:38:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8f8dc5509a385ab2fb11737adfde0a67563a7281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:a5:46:4d:40:9d:93:0a:e1:c5:75:e7:f1:
                    45:5c:19:a0:4e:1f:d2:ef:73:84:7b:00:69:9d:3b:
                    26:82:1c:1e:5b:ad:f7:38:f3:3b:2d:e6:02:84:ab:
                    97:30:19:d3:9e:4e:93:4b:29:1b:0c:30:cc:da:26:
                    d7:64:6b:ef:32:69:bc:4a:49:68:36:e3:10:c9:86:
                    de:50:94:c9:14:2f:df:41:8d:c2:fe:66:89:1d:6e:
                    a1:61:e6:64:db:12:ba:e8:4f:a6:1d:b8:9c:c5:ab:
                    6d:18:88:7d:2c:04:43:17:3a:35:7d:cf:e7:53:95:
                    97:94:14:b1:fc:4f:ac:8c:05:cb:c6:31:bc:66:b2:
                    d3:13:c4:a0:24:87:0c:0d:81:e6:c2:a7:7d:3d:dc:
                    7b:ae:fa:83:43:23:6f:93:e7:6e:b1:4e:24:51:2f:
                    3b:3d:6f:b8:28:8a:72:eb:62:83:5b:44:cf:0b:f6:
                    1b:f2:bd:35:a6:83:0c:23:82:3b:77:60:8b:d1:01:
                    04:ea:af:a4:e3:30:ba:c2:80:7c:f9:72:fb:2d:81:
                    6a:05:ff:b9:b3:76:ca:05:46:d8:45:49:fe:68:17:
                    e6:23:fb:78:13:29:ad:84:05:cc:5c:05:29:16:65:
                    41:59:e4:70:f5:3d:d6:24:7b:aa:02:5b:9f:28:b5:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:C5:50:9A:38:5A:B2:FB:11:73:7A:DF:DE:0A:67:56:3A:72:81
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/j43FUJo4WrL7EXN6394KZ1Y6coE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:3d:7b:e0:9e:e4:fe:ec:ff:bf:5e:e1:40:81:73:a6:64:
         d0:29:f9:e4:9a:50:6a:d0:7a:ba:0a:b9:c2:2b:56:c4:d5:44:
         b9:12:6d:a4:f4:3c:13:33:53:73:c8:84:f0:c8:c3:c9:17:6f:
         9c:2b:ba:44:87:2b:b9:10:3f:5b:28:48:1d:b0:35:a5:99:85:
         ab:48:dc:d9:80:0b:0a:6a:e1:de:1e:80:b0:c3:ca:d2:02:9e:
         50:7e:42:03:0e:30:dd:52:62:69:9c:aa:6b:23:bc:59:fc:f3:
         bd:32:6c:82:83:56:a7:79:91:73:78:c1:31:de:04:2c:8d:06:
         0d:16:fb:fa:b0:84:eb:14:a1:d6:f3:30:85:1f:6c:6e:41:7e:
         c0:96:34:a6:8a:a4:10:8f:da:c3:51:a9:aa:ba:eb:e5:32:7f:
         5d:f1:dc:f8:c8:df:16:c8:67:fc:2e:a3:58:83:0d:66:9a:a2:
         2b:9d:53:25:0a:e6:2f:8b:02:82:a0:b7:4c:0d:70:73:92:42:
         79:1f:3c:85:02:9a:3a:1c:0b:12:0d:77:23:73:6b:e5:a8:7f:
         16:cc:0c:75:e4:71:44:ec:f8:91:29:b9:65:e2:a7:df:32:3f:
         2e:3f:2c:b2:b7:73:4f:b3:f2:bb:d1:d8:ec:b1:ff:09:28:6a:
         53:71:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 19:35:31 2024 by rpki-client on console-fra.rpki-client.org