Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/XnVX9K3JVPX_IWtNOz4NGIDpnJA.roa
File:                     XnVX9K3JVPX_IWtNOz4NGIDpnJA.roa (raw, json)
Hash identifier:          PJTRjLV+tJeSrRYH5QnYbwspdYaY6DKMMBi8925aKrw=
Subject key identifier:   5E:75:57:F4:AD:C9:54:F5:FF:21:6B:4D:3B:3E:0D:18:80:E9:9C:90
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01856CF8798242871040F31975F1AFC01E10
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/XnVX9K3JVPX_IWtNOz4NGIDpnJA.roa
Signing time:             Sun 01 Jan 2023 10:55:01 +0000
ROA not before:           Sun 01 Jan 2023 10:55:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200639
IP address blocks:        5.183.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 May 2023 08:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:f8:79:82:42:87:10:40:f3:19:75:f1:af:c0:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan  1 10:55:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5e7557f4adc954f5ff216b4d3b3e0d1880e99c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:10:c7:66:37:bf:25:c3:de:ef:8c:4c:a0:
                    51:4b:84:57:9b:2a:7e:0f:c3:f7:5d:26:bd:21:9d:
                    7e:b1:16:12:50:89:31:4f:e8:ad:df:39:66:33:92:
                    34:10:79:ae:10:da:73:f5:5c:f4:02:22:c8:5c:45:
                    8f:4a:3c:52:73:e9:69:14:ec:25:7c:09:ee:5c:81:
                    5c:ac:7a:cb:ec:9c:f6:1b:ea:76:cc:89:40:c3:87:
                    68:d0:ed:03:2a:bc:2e:36:ad:71:f9:d0:e7:c8:d7:
                    d1:b7:46:bf:4c:62:f1:14:d2:ee:41:6b:b6:b9:4e:
                    da:4c:c4:83:b6:05:3f:32:df:3a:08:a1:96:92:2d:
                    23:ee:45:53:5a:79:ab:98:c8:78:3b:de:34:3d:ce:
                    43:e3:6a:d6:84:bf:70:bb:c6:cc:4d:7b:6e:74:30:
                    42:c7:ad:0a:13:b6:16:76:de:2a:4f:e6:38:29:c7:
                    de:23:32:53:b9:45:09:66:f7:4d:cf:03:cc:40:a5:
                    b2:2c:04:53:93:38:cd:cc:cf:3e:a7:90:0a:7e:c4:
                    62:49:87:67:c2:65:79:69:4d:3a:7b:29:07:f5:64:
                    d3:ab:1b:fd:c8:b0:fd:c4:d6:d1:af:cb:21:14:70:
                    55:1b:20:c9:60:21:c0:26:b2:8a:8d:65:b7:41:ec:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:75:57:F4:AD:C9:54:F5:FF:21:6B:4D:3B:3E:0D:18:80:E9:9C:90
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/XnVX9K3JVPX_IWtNOz4NGIDpnJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:47:a7:fd:82:7f:4c:1b:25:2a:fe:b3:1f:31:14:36:25:80:
         a4:24:1d:f9:35:f5:48:df:37:2e:4c:9a:f8:b5:0d:83:7a:a4:
         d4:bf:8e:1c:5e:23:d0:a8:e0:c6:1a:b0:33:57:db:d5:9f:3f:
         ee:c3:b7:c6:44:ae:12:10:ee:74:e3:84:6e:3e:bf:5d:7f:70:
         2c:37:22:54:ea:14:69:23:b4:2e:d1:e4:fc:1d:d9:af:7d:ec:
         53:43:c7:c1:a7:d1:85:79:35:68:45:3c:a1:7a:08:bc:dd:de:
         c4:a9:16:74:0d:3c:9e:bd:03:4e:6d:78:d0:50:d1:2d:86:b0:
         3c:30:5d:c0:55:ec:77:e6:00:20:59:e5:b7:86:30:fc:e6:82:
         ff:99:e1:36:5c:18:b4:b4:50:59:de:55:54:ff:38:45:92:97:
         99:31:ef:cd:69:9d:87:9d:52:af:e4:64:d2:0b:9c:98:ec:f7:
         e5:ac:98:c5:e0:3f:cf:59:89:8a:35:52:d8:23:19:68:08:a1:
         1e:20:c3:db:c0:72:b2:90:cc:c4:97:62:56:ca:47:6e:42:50:
         b3:14:7e:8e:c3:5c:f3:77:27:1e:d0:78:ed:4a:5b:8a:64:db:
         8f:23:83:94:93:36:96:34:6d:55:d0:13:96:6b:8f:2e:fe:9c:
         5f:fe:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:35 2024 by rpki-client on console-ams.rpki-client.org