Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/euq0TDqOWilr2818n3RfY9oKK0s.roa
File:                     euq0TDqOWilr2818n3RfY9oKK0s.roa (raw, json)
Hash identifier:          c2hZP/r/sMG5TbKdf8anhGuuJ9GaS68Y3Yp0lG0EEW4=
Subject key identifier:   7A:EA:B4:4C:3A:8E:5A:29:6B:DB:CD:7C:9F:74:5F:63:DA:0A:2B:4B
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01889EBF8792567D612C39F46F17C1BC1940
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/euq0TDqOWilr2818n3RfY9oKK0s.roa
Signing time:             Fri 09 Jun 2023 06:02:12 +0000
ROA not before:           Fri 09 Jun 2023 06:02:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207459
IP address blocks:        79.175.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9e:bf:87:92:56:7d:61:2c:39:f4:6f:17:c1:bc:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jun  9 06:02:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7aeab44c3a8e5a296bdbcd7c9f745f63da0a2b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:0b:23:ec:40:9b:d3:21:be:5b:7b:9f:f4:
                    41:d3:1e:ce:5c:4b:68:c2:a4:92:89:97:ee:71:f6:
                    df:a0:e7:29:56:84:d9:88:67:7b:9b:f4:8e:0b:2f:
                    3d:ff:46:c6:7e:21:d1:0f:94:43:cd:e9:d5:af:98:
                    c6:6a:ed:62:2a:20:94:6d:2f:e1:4e:fe:dc:7f:e8:
                    97:6f:6c:d5:72:c7:5c:d8:72:55:32:67:64:eb:a1:
                    2b:68:04:4f:ed:7e:a0:0e:0a:e8:ab:b9:4b:4a:8f:
                    74:af:bc:ef:49:79:97:49:18:10:35:09:c7:56:b5:
                    24:52:19:11:d4:81:a2:3e:a3:7d:0e:45:86:91:7f:
                    4c:5b:eb:91:8d:d2:2b:4f:f1:6f:04:ac:cd:3f:f0:
                    24:77:cb:b8:b8:b3:18:8c:8d:05:17:8e:ac:1f:cf:
                    51:5b:be:38:25:c8:e2:aa:c5:81:68:e9:4f:b4:fa:
                    45:a2:e9:ae:e0:be:bc:e5:2c:89:5c:03:41:c9:84:
                    9b:87:6a:45:f1:5b:0d:76:18:f3:9e:74:b7:62:08:
                    f1:89:2f:ce:0f:87:66:f0:0a:c1:d8:ec:25:11:8a:
                    6e:68:7b:4f:ac:25:53:7d:1b:23:10:5a:f0:3e:47:
                    56:3d:a7:b6:10:75:5b:e1:ed:d7:64:8e:fb:57:4b:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:B4:4C:3A:8E:5A:29:6B:DB:CD:7C:9F:74:5F:63:DA:0A:2B:4B
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/euq0TDqOWilr2818n3RfY9oKK0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.175.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:f4:0a:da:52:42:a6:d9:4f:98:7c:cc:ba:c4:20:57:42:
         83:4b:35:86:98:89:12:fa:25:0e:83:7a:72:ec:be:37:e8:8c:
         0d:3e:d0:c1:0c:30:52:73:d5:14:08:3a:2d:78:cf:b5:d9:0c:
         b6:37:8c:b6:28:7f:9f:7b:2e:c2:c2:f1:e0:52:d7:88:f4:81:
         c2:ff:b9:5f:ff:e6:6b:90:09:8e:65:76:51:00:e5:51:e2:e1:
         45:13:20:9a:b3:5d:f7:f5:c8:7c:da:3b:a4:62:34:79:1c:ed:
         23:f7:dd:56:ba:12:97:7b:51:3b:ff:3e:d7:3d:85:0e:9c:3b:
         61:c0:82:28:46:81:d3:6f:af:0c:41:d5:d5:df:33:52:29:8b:
         2c:03:bc:9c:ac:c0:73:46:8c:26:01:21:cd:84:28:a6:9d:d5:
         89:60:0c:ac:46:7f:64:a7:3e:b5:db:7c:6e:79:61:cf:f0:e8:
         59:80:7d:80:32:04:b2:66:78:b6:7e:71:7c:b9:6c:fd:a8:d5:
         23:d3:b6:bb:47:57:4f:2d:dd:67:3d:df:1f:3c:c1:22:c6:35:
         46:e4:d1:f7:be:8b:5b:39:a9:69:d5:6b:ab:88:36:62:b9:5d:
         db:5d:b2:b9:4f:78:a2:34:78:4e:a5:f4:57:57:13:29:e9:62:
         d1:1a:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org