Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/lsaMOkZgUfNUZFGADr5ze6rSXis.roa
File:                     lsaMOkZgUfNUZFGADr5ze6rSXis.roa (raw, json)
Hash identifier:          B4AAcaFCLPMHhooG53RnujOhFQU2R2El/uy7IWwTLDM=
Subject key identifier:   96:C6:8C:3A:46:60:51:F3:54:64:51:80:0E:BE:73:7B:AA:D2:5E:2B
Certificate issuer:       /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
Certificate serial:       0187B86333A06C0D861BCC6D2B1348995F80
Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/lsaMOkZgUfNUZFGADr5ze6rSXis.roa
Signing time:             Tue 25 Apr 2023 12:28:41 +0000
ROA not before:           Tue 25 Apr 2023 12:28:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42910
IP address blocks:        185.179.24.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b8:63:33:a0:6c:0d:86:1b:cc:6d:2b:13:48:99:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb
        Validity
            Not Before: Apr 25 12:28:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96c68c3a466051f3546451800ebe737baad25e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:9a:68:2c:97:4f:33:27:62:98:40:68:b2:
                    85:d1:a5:07:73:6f:b4:ed:d4:74:39:8f:59:8e:b1:
                    c1:47:5f:24:ce:76:62:1e:6c:2a:b4:35:11:46:af:
                    c7:0c:b5:8f:4a:20:a6:48:0b:ee:34:00:71:24:76:
                    54:46:ba:17:12:f7:92:06:8a:31:0d:3c:5f:07:5f:
                    6e:5e:45:54:e9:e8:ce:7e:ed:63:40:44:22:82:7b:
                    da:f1:f1:0d:fb:6c:7c:46:1f:8c:07:4b:84:84:d4:
                    88:13:a7:9d:00:c4:69:e4:c1:44:cb:89:81:9e:f4:
                    41:ec:54:77:04:3e:9c:a7:9a:1d:ea:04:9c:19:b7:
                    09:67:81:60:36:72:2b:fe:11:74:7d:e5:ff:82:f3:
                    e3:4b:c2:20:da:a1:6b:aa:7d:bf:6e:90:5b:8f:d8:
                    3c:84:4f:be:07:4f:ab:2a:f2:71:91:fb:ce:de:71:
                    83:a6:a5:8a:2f:7d:74:f4:ef:13:22:cf:aa:9b:41:
                    7d:3c:90:d2:14:22:89:ac:2b:7a:6c:a1:63:f3:a2:
                    d6:7a:e5:3e:46:15:fe:1c:65:90:84:d2:b2:c0:be:
                    de:42:b3:90:79:cc:d0:de:2d:ea:c9:14:73:ad:86:
                    40:6e:2c:e8:b1:b5:9b:66:d7:3f:2d:59:8b:d3:68:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:8C:3A:46:60:51:F3:54:64:51:80:0E:BE:73:7B:AA:D2:5E:2B
            X509v3 Authority Key Identifier:
                keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/lsaMOkZgUfNUZFGADr5ze6rSXis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c3:c8:26:19:43:6b:78:ef:4f:e2:d0:41:09:81:fc:ad:91:
         07:b9:2d:8e:e6:0f:ed:7e:70:7b:82:d4:be:50:69:97:3a:c3:
         ca:23:4a:a3:17:e1:8b:30:ca:03:c1:34:1c:9f:2a:51:89:5e:
         4d:e1:13:7e:66:8c:ef:ba:ea:1c:59:5e:87:2d:7c:36:5f:e3:
         97:18:cd:4e:96:7c:ca:0d:65:ce:60:51:92:a5:4a:2e:87:f1:
         fb:19:c5:9f:5b:36:35:05:20:ef:8d:30:b7:ed:fa:32:91:2d:
         8d:e9:70:2b:a2:24:48:24:6c:8a:6a:01:59:7e:3b:cc:41:e2:
         a7:78:00:45:3a:c3:a5:af:bd:c0:e0:cb:ce:de:af:62:52:71:
         fd:b4:8b:2d:2b:d9:c0:90:2a:fc:95:9a:b6:50:0c:92:80:ca:
         8f:52:b7:96:43:5f:2b:94:e8:81:49:10:e6:ab:cb:3c:77:ad:
         72:fa:28:63:5c:4e:8d:dc:29:64:14:49:c8:8a:93:20:9d:e5:
         02:ef:b3:c6:59:9d:f9:a9:a6:02:1b:86:f9:37:1b:18:fc:28:
         3a:36:00:0d:c3:ee:50:36:c8:69:01:6a:e3:63:ec:b6:c4:d5:
         6d:24:a8:17:42:0f:43:93:05:2e:34:6f:6e:ba:0a:f9:09:6c:
         a0:50:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:21 2024 by rpki-client on console-fra.rpki-client.org